_enter_from_user_mode+0x1d/0x50 [ 2898.616166] do_syscall_64+0x33/0x40 [ 2898.616926] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2898.617963] RIP: 0033:0x7f4ded6f8b19 [ 2898.618919] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2898.622677] RSP: 002b:00007f4deac6e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 2898.624246] RAX: ffffffffffffffda RBX: 00007f4ded80bf60 RCX: 00007f4ded6f8b19 [ 2898.625670] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2898.627102] RBP: 00007f4deac6e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2898.628582] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2898.630023] R13: 00007ffdd13eda0f R14: 00007f4deac6e300 R15: 0000000000022000 20:19:05 executing program 5: r0 = creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) open_by_handle_at(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="5000000000000004000000"], 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f0000000200)=0x6, 0x4) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14030d00000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) 20:19:05 executing program 7: creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="1400000000000001f400000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) 20:19:05 executing program 1: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x46842, 0x0) io_setup(0x5, &(0x7f0000000080)) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x8800000) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x5, r3, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481223, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f00000001c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7}}, './file1\x00'}) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) r5 = syz_io_uring_setup(0x3de4, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000180), &(0x7f0000002a40)) ioctl$BLKTRACESTART(r4, 0x1274, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x882c2, 0x0) fsync(r6) ioctl$FS_IOC_GETFSMAP(r6, 0xc0c0583b, &(0x7f0000000440)={0x0, 0x0, 0x5, 0x0, '\x00', [{0x7, 0x7fff, 0x5, 0xffff, 0x8, 0x401}, {0x9, 0x81, 0xfffe00000000, 0x1000, 0x2}], ['\x00', '\x00', '\x00', '\x00', '\x00']}) io_uring_enter(r5, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$FIGETBSZ(r5, 0x2, &(0x7f0000000240)) 20:19:05 executing program 3: statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f0000000200)=0x6, 0x4) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000340)=ANY=[@ANYBLOB="01080000011270c839284f30e054da4374340020000000000000", @ANYRES32, @ANYBLOB="ffa22106351700002e2f661c696c653000"]) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) pread64(0xffffffffffffffff, &(0x7f0000000400)=""/255, 0xff, 0x7eb9) dup(0xffffffffffffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0), 0x9) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="140a0000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) 20:19:05 executing program 0: creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) pread64(0xffffffffffffffff, &(0x7f0000000400)=""/255, 0xff, 0x7eb9) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xcf00}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) 20:19:05 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002740), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f0000002180)={&(0x7f00000010c0), 0xc, &(0x7f0000002140)={&(0x7f0000002100)={0x24, r2, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x6}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x90}, 0x800) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r2, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@ETHTOOL_A_LINKMODES_OURS={0x4}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x3}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x1f}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x8014) sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x0, 0x0) pidfd_send_signal(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xb, 0x5, 0x2000000}, 0x0) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file2\x00', 0x0, 0x127) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, 0x0, 0x800, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x1f}}}}, [@NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x20048000}, 0x0) r4 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r5 = syz_open_dev$hiddev(&(0x7f0000000280), 0xffff, 0x101000) dup3(r5, r3, 0x80000) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r4, &(0x7f0000000440)={0x60000019}) syz_genetlink_get_family_id$tipc(&(0x7f0000000140), r4) 20:19:05 executing program 5: r0 = creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) open_by_handle_at(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="5000000000000004000000"], 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f0000000200)=0x6, 0x4) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000e00000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) 20:19:05 executing program 4: madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x12) mlock(&(0x7f0000ffb000/0x1000)=nil, 0x1000) fork() (fail_nth: 2) [ 2899.092153] FAULT_INJECTION: forcing a failure. [ 2899.092153] name failslab, interval 1, probability 0, space 0, times 0 [ 2899.094385] CPU: 1 PID: 15412 Comm: syz-executor.4 Not tainted 5.10.194 #1 [ 2899.095685] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2899.097218] Call Trace: [ 2899.097726] dump_stack+0x107/0x167 [ 2899.098394] should_fail.cold+0x5/0xa [ 2899.099123] ? create_object.isra.0+0x3a/0xa20 [ 2899.099981] should_failslab+0x5/0x20 [ 2899.100710] kmem_cache_alloc+0x5b/0x310 [ 2899.101477] create_object.isra.0+0x3a/0xa20 [ 2899.102357] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2899.103320] kmem_cache_alloc_node+0x169/0x330 [ 2899.104160] copy_process+0x3285/0x7800 [ 2899.104888] ? __lock_acquire+0xbb1/0x5b00 [ 2899.105682] ? lock_downgrade+0x6d0/0x6d0 [ 2899.106448] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2899.107416] ? SOFTIRQ_verbose+0x10/0x10 [ 2899.108159] ? __cleanup_sighand+0xb0/0xb0 [ 2899.108937] ? lock_acquire+0x197/0x470 [ 2899.109674] ? find_held_lock+0x2c/0x110 [ 2899.110406] kernel_clone+0xe7/0x980 [ 2899.111097] ? lock_downgrade+0x6d0/0x6d0 [ 2899.111837] ? find_held_lock+0x2c/0x110 [ 2899.112572] ? create_io_thread+0xf0/0xf0 [ 2899.113322] ? ksys_write+0x12d/0x260 [ 2899.114025] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2899.114960] __do_sys_fork+0x8a/0xc0 [ 2899.115634] ? kernel_thread+0xf0/0xf0 [ 2899.116375] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2899.117307] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2899.118270] ? trace_hardirqs_on+0x5b/0x180 [ 2899.119053] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2899.120063] do_syscall_64+0x33/0x40 [ 2899.120747] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2899.121708] RIP: 0033:0x7f4ded6f8b19 [ 2899.122397] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2899.125706] RSP: 002b:00007f4deac6e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 2899.127104] RAX: ffffffffffffffda RBX: 00007f4ded80bf60 RCX: 00007f4ded6f8b19 [ 2899.128397] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2899.129692] RBP: 00007f4deac6e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2899.130985] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2899.132275] R13: 00007ffdd13eda0f R14: 00007f4deac6e300 R15: 0000000000022000 20:19:21 executing program 3: statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f0000000200)=0x6, 0x4) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000340)=ANY=[@ANYBLOB="01080000011270c839284f30e054da4374340020000000000000", @ANYRES32, @ANYBLOB="ffa22106351700002e2f661c696c653000"]) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) pread64(0xffffffffffffffff, &(0x7f0000000400)=""/255, 0xff, 0x7eb9) dup(0xffffffffffffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0), 0x9) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="140e0000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) 20:19:21 executing program 1: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x46842, 0x0) io_setup(0x5, &(0x7f0000000080)) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x8800000) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x5, r3, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481225, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f00000001c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7}}, './file1\x00'}) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) r5 = syz_io_uring_setup(0x3de4, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000180), &(0x7f0000002a40)) ioctl$BLKTRACESTART(r4, 0x1274, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x882c2, 0x0) fsync(r6) ioctl$FS_IOC_GETFSMAP(r6, 0xc0c0583b, &(0x7f0000000440)={0x0, 0x0, 0x5, 0x0, '\x00', [{0x7, 0x7fff, 0x5, 0xffff, 0x8, 0x401}, {0x9, 0x81, 0xfffe00000000, 0x1000, 0x2}], ['\x00', '\x00', '\x00', '\x00', '\x00']}) io_uring_enter(r5, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$FIGETBSZ(r5, 0x2, &(0x7f0000000240)) 20:19:21 executing program 7: creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="1400000000000000fd00000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) 20:19:21 executing program 4: madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x12) mlock(&(0x7f0000ffb000/0x1000)=nil, 0x1000) fork() (fail_nth: 3) 20:19:21 executing program 5: r0 = creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) open_by_handle_at(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="5000000000000004000000"], 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f0000000200)=0x6, 0x4) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14002000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) 20:19:21 executing program 0: creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) pread64(0xffffffffffffffff, &(0x7f0000000400)=""/255, 0xff, 0x7eb9) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xd4c0}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) 20:19:21 executing program 6: sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x8) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000200)=0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x100000001) perf_event_open(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x8, 0x4, 0x1f, 0x0, 0x3, 0x800, 0xa, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x4, @perf_config_ext={0x7fff, 0x1}, 0x4, 0x1, 0x7c, 0x8, 0x200, 0x2, 0x8, 0x0, 0x5}, r0, 0x5, r1, 0x3) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x0, 0x0) pidfd_send_signal(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xb, 0x5, 0x2000000}, 0x0) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file2\x00', 0x40080, 0x127) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, 0x0, 0x800, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x1f}}}}, [@NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0xfffffffe}]}, 0x30}, 0x1, 0x0, 0x0, 0x20048000}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="1000000017010007002e2f664169"], 0x10) 20:19:21 executing program 2: sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0xfa, 0x0, 0x0, 0x82a, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x400000000000}, 0x40200, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0x3, 0xffffffffffffffff, 0x8) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r0, 0x40047211, &(0x7f0000000380)=0x1) r1 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x0, 0x0) pidfd_send_signal(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xb, 0x5, 0x2000000}, 0x0) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file2\x00', 0x0, 0x127) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000825bd7000ffdbdf254400000008000300", @ANYRES32=0x0, @ANYBLOB="0c00990001087c04000df8ff9a000000000000000000"], 0x30}, 0x1, 0x0, 0x0, 0x20048000}, 0x0) execveat(r1, &(0x7f0000000180)='./file0\x00', &(0x7f0000000280)=[&(0x7f00000001c0)='rpc_pipefs\x00', &(0x7f0000000200)='TIPC\x00', &(0x7f0000000240)='TIPC\x00'], &(0x7f0000000340)=[&(0x7f0000000300)='\x00'], 0x100) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r2, &(0x7f0000000440)={0x60000019}) syz_genetlink_get_family_id$tipc(&(0x7f0000000140), r2) [ 2914.748479] FAULT_INJECTION: forcing a failure. [ 2914.748479] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2914.750916] CPU: 0 PID: 15434 Comm: syz-executor.4 Not tainted 5.10.194 #1 [ 2914.752324] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2914.754004] Call Trace: [ 2914.754555] dump_stack+0x107/0x167 [ 2914.755316] should_fail.cold+0x5/0xa [ 2914.756106] __alloc_pages_nodemask+0x182/0x600 [ 2914.757061] ? lock_downgrade+0x6d0/0x6d0 [ 2914.757920] ? __alloc_pages_slowpath.constprop.0+0x2130/0x2130 [ 2914.759176] ? memcg_slab_post_alloc_hook+0x17a/0x430 [ 2914.760246] ? kmem_cache_alloc_node+0x2bc/0x330 [ 2914.761236] copy_process+0x618/0x7800 [ 2914.762045] ? __lock_acquire+0xbb1/0x5b00 [ 2914.762930] ? lock_downgrade+0x6d0/0x6d0 [ 2914.763801] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2914.764882] ? SOFTIRQ_verbose+0x10/0x10 [ 2914.765732] ? __cleanup_sighand+0xb0/0xb0 [ 2914.766617] ? lock_acquire+0x197/0x470 [ 2914.767460] ? find_held_lock+0x2c/0x110 [ 2914.768296] kernel_clone+0xe7/0x980 [ 2914.769060] ? lock_downgrade+0x6d0/0x6d0 [ 2914.769910] ? find_held_lock+0x2c/0x110 [ 2914.770747] ? create_io_thread+0xf0/0xf0 [ 2914.771603] ? ksys_write+0x12d/0x260 [ 2914.772397] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2914.773389] __do_sys_fork+0x8a/0xc0 [ 2914.774150] ? kernel_thread+0xf0/0xf0 [ 2914.774968] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2914.776032] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2914.777074] ? trace_hardirqs_on+0x5b/0x180 [ 2914.777950] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2914.778994] do_syscall_64+0x33/0x40 [ 2914.779786] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2914.780826] RIP: 0033:0x7f4ded6f8b19 [ 2914.781587] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2914.785521] RSP: 002b:00007f4deac6e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 2914.787079] RAX: ffffffffffffffda RBX: 00007f4ded80bf60 RCX: 00007f4ded6f8b19 [ 2914.788537] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2914.789990] RBP: 00007f4deac6e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2914.791444] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2914.792895] R13: 00007ffdd13eda0f R14: 00007f4deac6e300 R15: 0000000000022000 20:19:21 executing program 3: statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f0000000200)=0x6, 0x4) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000340)=ANY=[@ANYBLOB="01080000011270c839284f30e054da4374340020000000000000", @ANYRES32, @ANYBLOB="ffa22106351700002e2f661c696c653000"]) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) pread64(0xffffffffffffffff, &(0x7f0000000400)=""/255, 0xff, 0x7eb9) dup(0xffffffffffffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0), 0x9) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14600000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) 20:19:21 executing program 5: r0 = creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) open_by_handle_at(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="5000000000000004000000"], 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f0000000200)=0x6, 0x4) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14006000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) 20:19:21 executing program 0: creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) pread64(0xffffffffffffffff, &(0x7f0000000400)=""/255, 0xff, 0x7eb9) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xda80}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) 20:19:21 executing program 1: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x46842, 0x0) io_setup(0x5, &(0x7f0000000080)) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x8800000) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x5, r3, 0x0) ioctl$BLKTRACESETUP(r0, 0xc048122a, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f00000001c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7}}, './file1\x00'}) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) r5 = syz_io_uring_setup(0x3de4, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000180), &(0x7f0000002a40)) ioctl$BLKTRACESTART(r4, 0x1274, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x882c2, 0x0) fsync(r6) ioctl$FS_IOC_GETFSMAP(r6, 0xc0c0583b, &(0x7f0000000440)={0x0, 0x0, 0x5, 0x0, '\x00', [{0x7, 0x7fff, 0x5, 0xffff, 0x8, 0x401}, {0x9, 0x81, 0xfffe00000000, 0x1000, 0x2}], ['\x00', '\x00', '\x00', '\x00', '\x00']}) io_uring_enter(r5, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$FIGETBSZ(r5, 0x2, &(0x7f0000000240)) 20:19:21 executing program 7: creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="1400000000ffffffff00000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) 20:19:21 executing program 2: sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x0, 0x0) pidfd_send_signal(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xb, 0x5, 0x2000000}, 0x0) mount$bind(&(0x7f0000000180)='./file2\x00', &(0x7f00000001c0)='./file1\x00', &(0x7f0000000200), 0x8000, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f00000002c0)='./file2\x00', 0x0, 0x127) r1 = signalfd(r0, &(0x7f0000000240)={[0x6]}, 0x8) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="0000b97e84989e6b27cfdc1d46ac961f16c1bb2892c737a73f7fd80b7c22b4a90a631ce89537c38a00940a53aea57633460a74617ada07930ab808204ad4affe4dddfc0380d97546f692dcc23b176a65ccd82f84818fad675b1db5bfb4c687859e925ce79992ce2556456d215068e6fa46fd3896b1b81ff296c6950e5c97f4ec7712a10ed4f789e496069db67633267822e2e262e3fc30ea1a69bc24a8ec000510fe2dff02dc1414d91557389cfc348e9e38000000000000000000", @ANYRES16=0x0, @ANYBLOB="000825bd7000ffdbdf254400000008000300", @ANYRES32=0x0, @ANYRES64=r1], 0x30}, 0x1, 0x0, 0x0, 0x20048000}, 0x4000) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) rename(&(0x7f0000000280)='./file1\x00', &(0x7f0000000300)='./file2\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x100000001) dup2(r3, r1) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r2, &(0x7f0000000440)={0x60000019}) syz_genetlink_get_family_id$tipc(&(0x7f0000000140), r2) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x100000001) sendmsg$NL80211_CMD_TESTMODE(r5, &(0x7f0000000640)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000480)={&(0x7f0000000380)={0x94, 0x0, 0x800, 0x70bd2b, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_TESTDATA={0x2b, 0x45, "2780a1941c05d76e3b3bffb40bf6ab4a9b6d926439c23f4838f00e903bc6b6980eb465f55974ff"}, @NL80211_ATTR_TESTDATA={0x54, 0x45, "da3f193a5d254ebae65319c142ba142db2e8c412715d127f9ec04aaf48ce92a5ae7b5bb246d0fe7334cbd12fbc4e43004746212fe91e5051c25b1bd5f36660b817cb0af5ac4d9fef2d4b5482e14506ee"}]}, 0x94}, 0x1, 0x0, 0x0, 0x2000001d}, 0x4000050) 20:19:21 executing program 5: r0 = creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) open_by_handle_at(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="5000000000000004000000"], 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f0000000200)=0x6, 0x4) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="1405c000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) 20:19:21 executing program 3: statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f0000000200)=0x6, 0x4) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000340)=ANY=[@ANYBLOB="01080000011270c839284f30e054da4374340020000000000000", @ANYRES32, @ANYBLOB="ffa22106351700002e2f661c696c653000"]) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) pread64(0xffffffffffffffff, &(0x7f0000000400)=""/255, 0xff, 0x7eb9) dup(0xffffffffffffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0), 0x9) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14fd0000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) 20:19:21 executing program 1: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x46842, 0x0) io_setup(0x5, &(0x7f0000000080)) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x8800000) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x5, r3, 0x0) ioctl$BLKTRACESETUP(r0, 0xc048122b, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f00000001c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7}}, './file1\x00'}) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) r5 = syz_io_uring_setup(0x3de4, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000180), &(0x7f0000002a40)) ioctl$BLKTRACESTART(r4, 0x1274, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x882c2, 0x0) fsync(r6) ioctl$FS_IOC_GETFSMAP(r6, 0xc0c0583b, &(0x7f0000000440)={0x0, 0x0, 0x5, 0x0, '\x00', [{0x7, 0x7fff, 0x5, 0xffff, 0x8, 0x401}, {0x9, 0x81, 0xfffe00000000, 0x1000, 0x2}], ['\x00', '\x00', '\x00', '\x00', '\x00']}) io_uring_enter(r5, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$FIGETBSZ(r5, 0x2, &(0x7f0000000240)) 20:19:21 executing program 7: creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000200000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) 20:19:36 executing program 4: madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x12) mlock(&(0x7f0000ffb000/0x1000)=nil, 0x1000) fork() (fail_nth: 4) 20:19:36 executing program 0: creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) pread64(0xffffffffffffffff, &(0x7f0000000400)=""/255, 0xff, 0x7eb9) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xe040}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) 20:19:36 executing program 5: r0 = creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) open_by_handle_at(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="5000000000000004000000"], 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f0000000200)=0x6, 0x4) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="1405e600000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) 20:19:36 executing program 7: creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000300000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) 20:19:36 executing program 3: statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f0000000200)=0x6, 0x4) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000340)=ANY=[@ANYBLOB="01080000011270c839284f30e054da4374340020000000000000", @ANYRES32, @ANYBLOB="ffa22106351700002e2f661c696c653000"]) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) pread64(0xffffffffffffffff, &(0x7f0000000400)=""/255, 0xff, 0x7eb9) dup(0xffffffffffffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0), 0x9) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14f40100000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) 20:19:36 executing program 1: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x46842, 0x0) io_setup(0x5, &(0x7f0000000080)) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x8800000) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x5, r3, 0x0) ioctl$BLKTRACESETUP(r0, 0xc048122d, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f00000001c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7}}, './file1\x00'}) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) r5 = syz_io_uring_setup(0x3de4, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000180), &(0x7f0000002a40)) ioctl$BLKTRACESTART(r4, 0x1274, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x882c2, 0x0) fsync(r6) ioctl$FS_IOC_GETFSMAP(r6, 0xc0c0583b, &(0x7f0000000440)={0x0, 0x0, 0x5, 0x0, '\x00', [{0x7, 0x7fff, 0x5, 0xffff, 0x8, 0x401}, {0x9, 0x81, 0xfffe00000000, 0x1000, 0x2}], ['\x00', '\x00', '\x00', '\x00', '\x00']}) io_uring_enter(r5, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$FIGETBSZ(r5, 0x2, &(0x7f0000000240)) 20:19:36 executing program 6: semctl$IPC_RMID(0x0, 0x0, 0x0) sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x8) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x0, 0x0) pidfd_send_signal(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xb, 0x5, 0x2000000}, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f00000002c0)='./file2\x00', 0x40080, 0x127) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, 0x0, 0x800, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x1f}}}}, [@NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0xfffffffe}]}, 0x30}, 0x1, 0x0, 0x0, 0x20048000}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="1000000017010007002e2f664169"], 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), r0) 20:19:36 executing program 2: sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x0, 0x0) pidfd_send_signal(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xb, 0x5, 0x2000000}, 0x0) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file2\x00', 0x0, 0x127) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = dup(r4) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x28, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f00000001c0)={0x28, 0x0, 0x800, 0x70bd24, 0x25dfdbff, {{}, {@val={0x0, 0x3, r6}, @void}}}, 0x7f}}, 0x0) r7 = creat(&(0x7f0000000080)='./file0\x00', 0x0) epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r7, &(0x7f0000000440)={0x60000019}) syz_genetlink_get_family_id$tipc(&(0x7f0000000140), r7) [ 2929.907161] FAULT_INJECTION: forcing a failure. [ 2929.907161] name failslab, interval 1, probability 0, space 0, times 0 [ 2929.909584] CPU: 0 PID: 15511 Comm: syz-executor.4 Not tainted 5.10.194 #1 [ 2929.911252] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2929.912932] Call Trace: [ 2929.913592] dump_stack+0x107/0x167 [ 2929.914346] should_fail.cold+0x5/0xa [ 2929.915280] ? prepare_creds+0x25/0x5f0 [ 2929.916135] should_failslab+0x5/0x20 [ 2929.917070] kmem_cache_alloc+0x5b/0x310 [ 2929.917894] ? lock_downgrade+0x6d0/0x6d0 [ 2929.918910] prepare_creds+0x25/0x5f0 [ 2929.919694] copy_creds+0x72/0x580 [ 2929.920559] copy_process+0xfdc/0x7800 [ 2929.921348] ? __lock_acquire+0xbb1/0x5b00 [ 2929.922387] ? lock_downgrade+0x6d0/0x6d0 [ 2929.923234] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2929.924516] ? __cleanup_sighand+0xb0/0xb0 [ 2929.925375] ? lock_acquire+0x197/0x470 [ 2929.926343] ? find_held_lock+0x2c/0x110 [ 2929.927166] kernel_clone+0xe7/0x980 [ 2929.928092] ? lock_downgrade+0x6d0/0x6d0 [ 2929.928926] ? find_held_lock+0x2c/0x110 [ 2929.929911] ? create_io_thread+0xf0/0xf0 [ 2929.930754] ? ksys_write+0x12d/0x260 [ 2929.931701] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2929.932685] __do_sys_fork+0x8a/0xc0 [ 2929.933581] ? kernel_thread+0xf0/0xf0 [ 2929.934386] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2929.935522] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2929.936553] ? trace_hardirqs_on+0x5b/0x180 [ 2929.937414] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2929.938442] do_syscall_64+0x33/0x40 [ 2929.939191] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2929.940223] RIP: 0033:0x7f4ded6f8b19 [ 2929.940970] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2929.944740] RSP: 002b:00007f4deac6e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 2929.946355] RAX: ffffffffffffffda RBX: 00007f4ded80bf60 RCX: 00007f4ded6f8b19 [ 2929.947892] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2929.949394] RBP: 00007f4deac6e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2929.950903] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2929.952421] R13: 00007ffdd13eda0f R14: 00007f4deac6e300 R15: 0000000000022000 20:19:36 executing program 4: madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x12) mlock(&(0x7f0000ffb000/0x1000)=nil, 0x1000) fork() (fail_nth: 5) 20:19:36 executing program 0: creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) pread64(0xffffffffffffffff, &(0x7f0000000400)=""/255, 0xff, 0x7eb9) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xe600}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) 20:19:36 executing program 3: statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f0000000200)=0x6, 0x4) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000340)=ANY=[@ANYBLOB="01080000011270c839284f30e054da4374340020000000000000", @ANYRES32, @ANYBLOB="ffa22106351700002e2f661c696c653000"]) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) pread64(0xffffffffffffffff, &(0x7f0000000400)=""/255, 0xff, 0x7eb9) dup(0xffffffffffffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0), 0x9) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14e70200000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) 20:19:36 executing program 6: sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x8) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x4, 0x80, 0x6, 0xf7, 0x81, 0x7, 0x0, 0x9, 0x4949c, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x4, 0x4, @perf_config_ext={0x7, 0x2}, 0xa8, 0x0, 0x32f9, 0x1, 0x6a3, 0x2d, 0x400, 0x0, 0xfff, 0x0, 0x1bf}, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0x7) pidfd_send_signal(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xb, 0x5, 0x2000000}, 0x0) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file2\x00', 0x40080, 0x127) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, 0x0, 0x800, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x1f}}}}, [@NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0xfffffffe}]}, 0x30}, 0x1, 0x0, 0x0, 0x20048000}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="1000000017010007002e2f664169"], 0x10) [ 2930.106403] FAULT_INJECTION: forcing a failure. [ 2930.106403] name failslab, interval 1, probability 0, space 0, times 0 [ 2930.108747] CPU: 1 PID: 15525 Comm: syz-executor.4 Not tainted 5.10.194 #1 [ 2930.110137] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2930.111843] Call Trace: [ 2930.112388] dump_stack+0x107/0x167 [ 2930.113142] should_fail.cold+0x5/0xa [ 2930.113926] ? create_object.isra.0+0x3a/0xa20 [ 2930.114861] should_failslab+0x5/0x20 [ 2930.115658] kmem_cache_alloc+0x5b/0x310 [ 2930.116497] create_object.isra.0+0x3a/0xa20 [ 2930.117389] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 20:19:36 executing program 5: r0 = creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) open_by_handle_at(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="5000000000000004000000"], 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f0000000200)=0x6, 0x4) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="1402e700000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) [ 2930.118431] kmem_cache_alloc+0x159/0x310 [ 2930.119446] prepare_creds+0x25/0x5f0 [ 2930.120234] copy_creds+0x72/0x580 [ 2930.120965] copy_process+0xfdc/0x7800 [ 2930.121761] ? __lock_acquire+0xbb1/0x5b00 [ 2930.122643] ? lock_downgrade+0x6d0/0x6d0 [ 2930.123507] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2930.124571] ? __cleanup_sighand+0xb0/0xb0 [ 2930.125445] ? lock_acquire+0x197/0x470 [ 2930.126238] ? find_held_lock+0x2c/0x110 [ 2930.127087] kernel_clone+0xe7/0x980 [ 2930.127848] ? lock_downgrade+0x6d0/0x6d0 [ 2930.128737] ? find_held_lock+0x2c/0x110 [ 2930.129574] ? create_io_thread+0xf0/0xf0 [ 2930.130423] ? ksys_write+0x12d/0x260 [ 2930.131211] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2930.132216] __do_sys_fork+0x8a/0xc0 [ 2930.132981] ? kernel_thread+0xf0/0xf0 [ 2930.133795] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2930.134862] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2930.135963] ? trace_hardirqs_on+0x5b/0x180 [ 2930.136848] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2930.137904] do_syscall_64+0x33/0x40 [ 2930.138673] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2930.139725] RIP: 0033:0x7f4ded6f8b19 [ 2930.140498] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2930.144259] RSP: 002b:00007f4deac6e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 2930.145814] RAX: ffffffffffffffda RBX: 00007f4ded80bf60 RCX: 00007f4ded6f8b19 [ 2930.147272] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2930.148747] RBP: 00007f4deac6e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2930.150213] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2930.151678] R13: 00007ffdd13eda0f R14: 00007f4deac6e300 R15: 0000000000022000 20:19:36 executing program 7: creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000400000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) 20:19:36 executing program 1: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x46842, 0x0) io_setup(0x5, &(0x7f0000000080)) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x8800000) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x5, r3, 0x0) ioctl$BLKTRACESETUP(r0, 0xc048122e, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f00000001c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7}}, './file1\x00'}) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) r5 = syz_io_uring_setup(0x3de4, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000180), &(0x7f0000002a40)) ioctl$BLKTRACESTART(r4, 0x1274, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x882c2, 0x0) fsync(r6) ioctl$FS_IOC_GETFSMAP(r6, 0xc0c0583b, &(0x7f0000000440)={0x0, 0x0, 0x5, 0x0, '\x00', [{0x7, 0x7fff, 0x5, 0xffff, 0x8, 0x401}, {0x9, 0x81, 0xfffe00000000, 0x1000, 0x2}], ['\x00', '\x00', '\x00', '\x00', '\x00']}) io_uring_enter(r5, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$FIGETBSZ(r5, 0x2, &(0x7f0000000240)) 20:19:36 executing program 0: creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) pread64(0xffffffffffffffff, &(0x7f0000000400)=""/255, 0xff, 0x7eb9) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xebc0}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) 20:19:36 executing program 3: statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f0000000200)=0x6, 0x4) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000340)=ANY=[@ANYBLOB="01080000011270c839284f30e054da4374340020000000000000", @ANYRES32, @ANYBLOB="ffa22106351700002e2f661c696c653000"]) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) pread64(0xffffffffffffffff, &(0x7f0000000400)=""/255, 0xff, 0x7eb9) dup(0xffffffffffffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0), 0x9) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000300000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) 20:19:36 executing program 5: r0 = creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) open_by_handle_at(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="5000000000000004000000"], 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f0000000200)=0x6, 0x4) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="1403e800000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) 20:19:36 executing program 7: creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000800000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) 20:19:36 executing program 6: sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x8) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x0, 0x0) pidfd_send_signal(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xb, 0x5, 0x2000000}, 0x0) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file2\x00', 0x40080, 0x127) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, 0x0, 0x800, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x1f}}}}, [@NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0xfffffffe}]}, 0x30}, 0x1, 0x0, 0x0, 0x20048000}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="1880250017417a15bb002f664169"], 0x10) 20:19:37 executing program 1: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x46842, 0x0) io_setup(0x5, &(0x7f0000000080)) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x8800000) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x5, r3, 0x0) ioctl$BLKTRACESETUP(r0, 0xc048122f, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f00000001c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7}}, './file1\x00'}) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) r5 = syz_io_uring_setup(0x3de4, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000180), &(0x7f0000002a40)) ioctl$BLKTRACESTART(r4, 0x1274, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x882c2, 0x0) fsync(r6) ioctl$FS_IOC_GETFSMAP(r6, 0xc0c0583b, &(0x7f0000000440)={0x0, 0x0, 0x5, 0x0, '\x00', [{0x7, 0x7fff, 0x5, 0xffff, 0x8, 0x401}, {0x9, 0x81, 0xfffe00000000, 0x1000, 0x2}], ['\x00', '\x00', '\x00', '\x00', '\x00']}) io_uring_enter(r5, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$FIGETBSZ(r5, 0x2, &(0x7f0000000240)) 20:19:37 executing program 0: creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) pread64(0xffffffffffffffff, &(0x7f0000000400)=""/255, 0xff, 0x7eb9) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xf180}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) 20:19:37 executing program 5: r0 = creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) open_by_handle_at(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="5000000000000004000000"], 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f0000000200)=0x6, 0x4) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="1401f400000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) 20:19:50 executing program 4: madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x12) mlock(&(0x7f0000ffb000/0x1000)=nil, 0x1000) fork() (fail_nth: 6) 20:19:50 executing program 7: creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000a00000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) 20:19:50 executing program 0: creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) pread64(0xffffffffffffffff, &(0x7f0000000400)=""/255, 0xff, 0x7eb9) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xf740}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) 20:19:50 executing program 2: sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x0, 0x0) pidfd_send_signal(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xb, 0x5, 0x2000000}, 0x0) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file2\x00', 0x0, 0x127) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, 0x0, 0x800, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x1f}}}}, [@NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x20048000}, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r0, &(0x7f0000000440)={0x60000019}) syz_genetlink_get_family_id$tipc(&(0x7f0000000140), r0) [ 2943.927875] FAULT_INJECTION: forcing a failure. [ 2943.927875] name failslab, interval 1, probability 0, space 0, times 0 [ 2943.929548] CPU: 0 PID: 15593 Comm: syz-executor.4 Not tainted 5.10.194 #1 [ 2943.930507] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2943.931679] Call Trace: [ 2943.932078] dump_stack+0x107/0x167 [ 2943.932642] should_fail.cold+0x5/0xa [ 2943.933223] ? security_prepare_creds+0x112/0x190 [ 2943.933957] should_failslab+0x5/0x20 [ 2943.934523] __kmalloc+0x72/0x390 [ 2943.935045] security_prepare_creds+0x112/0x190 [ 2943.935762] prepare_creds+0x458/0x5f0 [ 2943.936359] copy_creds+0x72/0x580 [ 2943.936896] copy_process+0xfdc/0x7800 [ 2943.937479] ? __lock_acquire+0xbb1/0x5b00 [ 2943.938126] ? lock_downgrade+0x6d0/0x6d0 [ 2943.938746] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2943.939527] ? __cleanup_sighand+0xb0/0xb0 [ 2943.940147] ? lock_acquire+0x197/0x470 [ 2943.940741] ? find_held_lock+0x2c/0x110 [ 2943.941348] kernel_clone+0xe7/0x980 [ 2943.941912] ? lock_downgrade+0x6d0/0x6d0 [ 2943.942515] ? find_held_lock+0x2c/0x110 [ 2943.943107] ? create_io_thread+0xf0/0xf0 [ 2943.943729] ? ksys_write+0x12d/0x260 [ 2943.944292] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2943.945003] __do_sys_fork+0x8a/0xc0 [ 2943.945546] ? kernel_thread+0xf0/0xf0 [ 2943.946134] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2943.946890] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2943.947638] ? trace_hardirqs_on+0x5b/0x180 [ 2943.948265] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2943.949004] do_syscall_64+0x33/0x40 [ 2943.949544] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2943.950322] RIP: 0033:0x7f4ded6f8b19 [ 2943.950882] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2943.953680] RSP: 002b:00007f4deac6e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 2943.954871] RAX: ffffffffffffffda RBX: 00007f4ded80bf60 RCX: 00007f4ded6f8b19 [ 2943.955964] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2943.957010] RBP: 00007f4deac6e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2943.958058] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2943.959147] R13: 00007ffdd13eda0f R14: 00007f4deac6e300 R15: 0000000000022000 20:19:50 executing program 3: statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f0000000200)=0x6, 0x4) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000340)=ANY=[@ANYBLOB="01080000011270c839284f30e054da4374340020000000000000", @ANYRES32, @ANYBLOB="ffa22106351700002e2f661c696c653000"]) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) pread64(0xffffffffffffffff, &(0x7f0000000400)=""/255, 0xff, 0x7eb9) dup(0xffffffffffffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0), 0x9) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="140d0300000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) 20:19:50 executing program 1: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x46842, 0x0) io_setup(0x5, &(0x7f0000000080)) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x8800000) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x5, r3, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481230, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f00000001c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7}}, './file1\x00'}) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) r5 = syz_io_uring_setup(0x3de4, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000180), &(0x7f0000002a40)) ioctl$BLKTRACESTART(r4, 0x1274, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x882c2, 0x0) fsync(r6) ioctl$FS_IOC_GETFSMAP(r6, 0xc0c0583b, &(0x7f0000000440)={0x0, 0x0, 0x5, 0x0, '\x00', [{0x7, 0x7fff, 0x5, 0xffff, 0x8, 0x401}, {0x9, 0x81, 0xfffe00000000, 0x1000, 0x2}], ['\x00', '\x00', '\x00', '\x00', '\x00']}) io_uring_enter(r5, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$FIGETBSZ(r5, 0x2, &(0x7f0000000240)) 20:19:50 executing program 6: sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x400000}, 0x0, 0x0, 0x0, 0x91cb3b545d56f65c, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x7, 0x80, 0x6, 0x0, 0x8, 0x9, 0x0, 0x7, 0x220, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x8, 0x2, @perf_config_ext={0xdeff, 0x36}, 0x1, 0xa0000000000000, 0x7ff, 0x7, 0x3, 0x9, 0x2, 0x0, 0x8001, 0x0, 0x80000000}, 0x0, 0x7, 0xffffffffffffffff, 0x8) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x0, 0x0) pidfd_send_signal(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xb, 0x5, 0x2000000}, 0x0) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file2\x00', 0x40080, 0x127) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c28befa298cc9f3801458be50842d334164b6d695e417705c06669e2490d0c4d994c5a3352743b54125dfaa8c64ec1b8034cc74cae450ec69dde66c022419a10823a28697b2df286f930c78252c86dc73a672bced11af75f38a3ecd76db7ab474b2620e5dc6a44fd61d0bf69e7fde5100ef5e8689e93f15f87abc", @ANYRES16=0x0, @ANYBLOB="000825bd7000ffdbdf254400000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900000000001f00000008000d00feffffff"], 0x30}, 0x1, 0x0, 0x0, 0x20048000}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="1000000017010007002e2f664169"], 0x10) syz_mount_image$iso9660(&(0x7f0000000300), &(0x7f0000000340)='./file0\x00', 0x73b1, 0x4, &(0x7f0000000640)=[{&(0x7f0000000380)="9615815b7948c5c8d3ba52707d51c20dd917b1ae75e0486749af70ba68cb026d0a422eab787f1f", 0x27, 0x458f2608}, {&(0x7f00000003c0)="d3cb1a5ea270d59d89075ca2eef1501fda6f700cc3b73c100bc5981c9eb5fb16eb7b48a4e7f652ecd8c6777d30beb730b376ccc5ae73c241e4b6f3b1764934bc0912ed2a6c16fef08f422bc722ee59a65d5ce32322f492113a3e47f3da0022", 0x5f, 0x10000}, {&(0x7f0000000540)="c188c499eed50961c7d4010db1a0e9d108bebb810a8cce69e1cac59c7cc7c5840de2c245ff16305b465aeb1e0e6d6333d60ccc0a5c7f766ab95af938df113ea11c4e", 0x42, 0x7}, {&(0x7f00000005c0)="1ccb1c13267872cb7ccf03dcad265fd516f3fdf4a1bb9fe0792a716c5cc0c4b5cf13bf42576f8d28e6e7ad81f476fdffb55a34c8e5959951d3465112aa7c03f5ecc787886294904c813c68e1666cdafe39a2b65478eb", 0x56}], 0x10, &(0x7f0000000480)={[{@check_strict}], [{@dont_hash}, {@uid_eq}]}) 20:19:50 executing program 5: r0 = creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) open_by_handle_at(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="5000000000000004000000"], 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f0000000200)=0x6, 0x4) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="1400fd00000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) 20:19:50 executing program 4: madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x12) mlock(&(0x7f0000ffb000/0x1000)=nil, 0x1000) fork() (fail_nth: 7) [ 2944.101244] FAULT_INJECTION: forcing a failure. [ 2944.101244] name failslab, interval 1, probability 0, space 0, times 0 [ 2944.103012] CPU: 0 PID: 15616 Comm: syz-executor.4 Not tainted 5.10.194 #1 [ 2944.103996] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2944.105163] Call Trace: [ 2944.105550] dump_stack+0x107/0x167 [ 2944.106080] should_fail.cold+0x5/0xa [ 2944.106624] ? create_object.isra.0+0x3a/0xa20 [ 2944.107283] should_failslab+0x5/0x20 [ 2944.107834] kmem_cache_alloc+0x5b/0x310 [ 2944.108406] create_object.isra.0+0x3a/0xa20 [ 2944.109046] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2944.109770] __kmalloc+0x16e/0x390 [ 2944.110283] security_prepare_creds+0x112/0x190 [ 2944.110921] prepare_creds+0x458/0x5f0 [ 2944.111476] copy_creds+0x72/0x580 [ 2944.111987] copy_process+0xfdc/0x7800 [ 2944.112536] ? __lock_acquire+0xbb1/0x5b00 [ 2944.113137] ? lock_downgrade+0x6d0/0x6d0 [ 2944.113723] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2944.114458] ? __cleanup_sighand+0xb0/0xb0 [ 2944.115053] ? lock_acquire+0x197/0x470 [ 2944.115629] ? find_held_lock+0x2c/0x110 [ 2944.116199] kernel_clone+0xe7/0x980 [ 2944.116724] ? lock_downgrade+0x6d0/0x6d0 [ 2944.117291] ? find_held_lock+0x2c/0x110 [ 2944.117867] ? create_io_thread+0xf0/0xf0 [ 2944.118450] ? ksys_write+0x12d/0x260 [ 2944.118989] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2944.119673] __do_sys_fork+0x8a/0xc0 [ 2944.120197] ? kernel_thread+0xf0/0xf0 [ 2944.120755] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2944.121476] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2944.122185] ? trace_hardirqs_on+0x5b/0x180 [ 2944.122796] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2944.123529] do_syscall_64+0x33/0x40 [ 2944.124053] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2944.124772] RIP: 0033:0x7f4ded6f8b19 [ 2944.125297] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2944.127904] RSP: 002b:00007f4deac6e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 2944.128969] RAX: ffffffffffffffda RBX: 00007f4ded80bf60 RCX: 00007f4ded6f8b19 [ 2944.129975] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2944.130981] RBP: 00007f4deac6e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2944.132009] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2944.133040] R13: 00007ffdd13eda0f R14: 00007f4deac6e300 R15: 0000000000022000 20:20:02 executing program 4: madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x12) mlock(&(0x7f0000ffb000/0x1000)=nil, 0x1000) fork() (fail_nth: 8) 20:20:02 executing program 2: sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000240)={0x0, 0x0}) r2 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000280), 0x101001, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), r2) sendmsg$NL80211_CMD_GET_MPP(r2, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x28, r3, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0x20004009}, 0x0) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x8, 0x8, 0x2, 0x0, 0x8, 0x500c, 0xa, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x80000001, 0x4, @perf_config_ext={0x7f, 0x100000000}, 0x2004, 0x80000001, 0x7fff, 0x9, 0xffff, 0x200, 0x3, 0x0, 0x3, 0x0, 0x2}, r1, 0x6, r2, 0x1) pidfd_send_signal(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xb, 0x5, 0x2000000}, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f00000002c0)='./file2\x00', 0x0, 0x127) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, 0x0, 0x800, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x1f}}}}, [@NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x20048000}, 0x0) r5 = creat(&(0x7f0000000080)='./file0\x00', 0x0) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r5, &(0x7f0000000440)={0x60000019}) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x10a00, 0x40) syz_genetlink_get_family_id$tipc(&(0x7f0000000140), r5) sendmsg$IPCTNL_MSG_EXP_GET(r4, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0xb4, 0x1, 0x2, 0x201, 0x0, 0x0, {0xa, 0x0, 0x5}, [@CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x6b}, @CTA_EXPECT_MASK={0x44, 0x3, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0xf}}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x36}}}}]}, @CTA_EXPECT_HELP_NAME={0xa, 0x6, 'H.245\x00'}, @CTA_EXPECT_MASK={0x48, 0x3, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}]}, 0xb4}}, 0x20000000) 20:20:02 executing program 7: creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000e00000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) 20:20:02 executing program 5: r0 = creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) open_by_handle_at(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="5000000000000004000000"], 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f0000000200)=0x6, 0x4) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000008000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) 20:20:02 executing program 3: statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f0000000200)=0x6, 0x4) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000340)=ANY=[@ANYBLOB="01080000011270c839284f30e054da4374340020000000000000", @ANYRES32, @ANYBLOB="ffa22106351700002e2f661c696c653000"]) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) pread64(0xffffffffffffffff, &(0x7f0000000400)=""/255, 0xff, 0x7eb9) dup(0xffffffffffffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0), 0x9) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14e80300000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) 20:20:02 executing program 1: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x46842, 0x0) io_setup(0x5, &(0x7f0000000080)) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x8800000) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x5, r3, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481258, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f00000001c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7}}, './file1\x00'}) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) r5 = syz_io_uring_setup(0x3de4, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000180), &(0x7f0000002a40)) ioctl$BLKTRACESTART(r4, 0x1274, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x882c2, 0x0) fsync(r6) ioctl$FS_IOC_GETFSMAP(r6, 0xc0c0583b, &(0x7f0000000440)={0x0, 0x0, 0x5, 0x0, '\x00', [{0x7, 0x7fff, 0x5, 0xffff, 0x8, 0x401}, {0x9, 0x81, 0xfffe00000000, 0x1000, 0x2}], ['\x00', '\x00', '\x00', '\x00', '\x00']}) io_uring_enter(r5, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$FIGETBSZ(r5, 0x2, &(0x7f0000000240)) 20:20:02 executing program 6: sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x8) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = geteuid() syz_mount_image$nfs4(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x8001, 0x1, &(0x7f0000000300)=[{&(0x7f0000000200)="3dcf50c72f126ea073de0b70f48553a52c42b75972c81a45493f4625194fbb04ba5a065d77fb448ef6872c086bd5ce33f0a2bf443a0ee39e209f5638daf06d124bcba87d73e931d0895bf032675fbff07bc404286daf551ce8dc544a3487ce9aa5f880cba2c32fa5686f9b8fb402eba8407f09bb90bc90994922d09b65e5a41cdf48c33aebff161b7afd77cbfda4dd3f0144242d8cfbacb87de4d6b5553ac56a", 0xa0, 0x7fff}], 0x10, &(0x7f0000000340)={[{}, {'*/\\\xf6-]'}], [{@appraise_type}, {@fowner_eq={'fowner', 0x3d, r0}}, {@dont_appraise}, {@dont_hash}]}) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x0, 0x0) pidfd_send_signal(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xb, 0x5, 0x2000000}, 0x0) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file2\x00', 0x40080, 0x127) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, 0x0, 0x800, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x1f}}}}, [@NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0xfffffffe}]}, 0x30}, 0x1, 0x0, 0x0, 0x20048000}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="1000000017010007002e2f664169"], 0x10) 20:20:02 executing program 0: creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) pread64(0xffffffffffffffff, &(0x7f0000000400)=""/255, 0xff, 0x7eb9) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xfd00}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) [ 2956.244114] FAULT_INJECTION: forcing a failure. [ 2956.244114] name failslab, interval 1, probability 0, space 0, times 0 [ 2956.246499] CPU: 1 PID: 15629 Comm: syz-executor.4 Not tainted 5.10.194 #1 [ 2956.247926] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2956.249593] Call Trace: [ 2956.250135] dump_stack+0x107/0x167 [ 2956.250881] should_fail.cold+0x5/0xa [ 2956.251666] ? __delayacct_tsk_init+0x1b/0x80 [ 2956.252582] should_failslab+0x5/0x20 [ 2956.253349] kmem_cache_alloc+0x5b/0x310 [ 2956.254166] ? prepare_creds+0x46c/0x5f0 [ 2956.254989] __delayacct_tsk_init+0x1b/0x80 [ 2956.255876] copy_process+0x3319/0x7800 [ 2956.256684] ? __lock_acquire+0xbb1/0x5b00 [ 2956.257548] ? lock_downgrade+0x6d0/0x6d0 [ 2956.258395] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2956.259463] ? __cleanup_sighand+0xb0/0xb0 [ 2956.260348] ? lock_acquire+0x197/0x470 [ 2956.261165] ? find_held_lock+0x2c/0x110 [ 2956.261993] kernel_clone+0xe7/0x980 [ 2956.262744] ? lock_downgrade+0x6d0/0x6d0 [ 2956.263576] ? find_held_lock+0x2c/0x110 [ 2956.264409] ? create_io_thread+0xf0/0xf0 [ 2956.265245] ? ksys_write+0x12d/0x260 [ 2956.266021] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2956.266998] __do_sys_fork+0x8a/0xc0 [ 2956.267773] ? kernel_thread+0xf0/0xf0 [ 2956.268575] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2956.269626] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2956.270676] ? trace_hardirqs_on+0x5b/0x180 [ 2956.271550] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2956.272600] do_syscall_64+0x33/0x40 [ 2956.273367] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2956.274407] RIP: 0033:0x7f4ded6f8b19 [ 2956.275167] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2956.278969] RSP: 002b:00007f4deac6e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 20:20:02 executing program 5: r0 = creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) open_by_handle_at(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="5000000000000004000000"], 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f0000000200)=0x6, 0x4) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000010000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) [ 2956.280521] RAX: ffffffffffffffda RBX: 00007f4ded80bf60 RCX: 00007f4ded6f8b19 [ 2956.282084] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2956.283529] RBP: 00007f4deac6e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2956.284983] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2956.286428] R13: 00007ffdd13eda0f R14: 00007f4deac6e300 R15: 0000000000022000 20:20:02 executing program 3: statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f0000000200)=0x6, 0x4) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000340)=ANY=[@ANYBLOB="01080000011270c839284f30e054da4374340020000000000000", @ANYRES32, @ANYBLOB="ffa22106351700002e2f661c696c653000"]) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) pread64(0xffffffffffffffff, &(0x7f0000000400)=""/255, 0xff, 0x7eb9) dup(0xffffffffffffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0), 0x9) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14c00500000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) [ 2956.340035] nfs4: Unknown parameter '*/\ö-]' [ 2956.462095] nfs4: Unknown parameter '*/\ö-]' 20:20:17 executing program 1: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x46842, 0x0) io_setup(0x5, &(0x7f0000000080)) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x8800000) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x5, r3, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481263, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f00000001c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7}}, './file1\x00'}) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) r5 = syz_io_uring_setup(0x3de4, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000180), &(0x7f0000002a40)) ioctl$BLKTRACESTART(r4, 0x1274, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x882c2, 0x0) fsync(r6) ioctl$FS_IOC_GETFSMAP(r6, 0xc0c0583b, &(0x7f0000000440)={0x0, 0x0, 0x5, 0x0, '\x00', [{0x7, 0x7fff, 0x5, 0xffff, 0x8, 0x401}, {0x9, 0x81, 0xfffe00000000, 0x1000, 0x2}], ['\x00', '\x00', '\x00', '\x00', '\x00']}) io_uring_enter(r5, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$FIGETBSZ(r5, 0x2, &(0x7f0000000240)) 20:20:17 executing program 5: r0 = creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) open_by_handle_at(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="5000000000000004000000"], 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f0000000200)=0x6, 0x4) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000020000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) 20:20:17 executing program 3: statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f0000000200)=0x6, 0x4) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000340)=ANY=[@ANYBLOB="01080000011270c839284f30e054da4374340020000000000000", @ANYRES32, @ANYBLOB="ffa22106351700002e2f661c696c653000"]) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) pread64(0xffffffffffffffff, &(0x7f0000000400)=""/255, 0xff, 0x7eb9) dup(0xffffffffffffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0), 0x9) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14e60500000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) 20:20:17 executing program 6: sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x8) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x0, 0x0) pidfd_send_signal(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xb, 0x5, 0x2000000}, 0x0) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file2\x00', 0x40080, 0x127) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000580)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000825bd7034cee3fedbdfa96c3a254400000008003fa1b203d4e2018353932ca22fb3bab1233f84f7941e0166d90886f5896513ab7c23e5b081c8b2bc3c05567b7bd71cac5a5d5dcd2470fef7a52d38b07f097f709f7b2fde47f8fb9159a7abb11601354510532d818689457960b588974c616a826a6da2eb9b3eb753b1b68c3370863f42e8ea44de074c4c9f22a0a49392436f172772e4160c9796101ca726ed7708e4288755140b52bb6ba8726cb9f2065b3253e4cd6a7b4fa53e03bdf7dd493b270c26ad7d3d9c23ea7e1f3e5e", @ANYRES32=0x0, @ANYBLOB="0c009900000000001f00000008000d00feffffff"], 0x30}, 0x1, 0x0, 0x0, 0x20048000}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="1000000017010007002e2f664169"], 0x10) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x100000001) openat(r2, &(0x7f00000003c0)='./file0\x00', 0x68680, 0x20) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="4840b60000000000000000", @ANYRES16=r4, @ANYBLOB="050000000000000000000f00000008000300", @ANYRES32=0x0, @ANYBLOB="2c000e0080800000ffffffffffffffffffffffffdd0b7470fe16000000000000000000000000000064000000"], 0x48}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x6c, r4, 0x800, 0x70bd28, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0x5}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0x72}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x2}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x2}]}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x1}, @NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_BSS_BASIC_RATES={0x21, 0x24, [{0x30}, {0x30}, {0x2}, {0x30, 0x1}, {0xb, 0x1}, {0x3}, {0x18, 0x1}, {0x2}, {0x24}, {}, {0x1}, {0x4}, {0x1, 0x1}, {0x6c, 0x1}, {0x36}, {0xba74cfa137f4877d, 0x1}, {0x1b}, {0x30}, {0x1b}, {0x12}, {0x6c}, {0x5}, {0xc}, {0x2}, {0xc}, {0x1b, 0x1}, {0x6c, 0x1}, {0x30}, {0xb}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x24040800}, 0x20000000) 20:20:17 executing program 7: creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14006000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) 20:20:17 executing program 4: madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x12) mlock(&(0x7f0000ffb000/0x1000)=nil, 0x1000) fork() (fail_nth: 9) 20:20:17 executing program 2: sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x0, 0x0) pidfd_send_signal(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xb, 0x5, 0x2000000}, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f00000002c0)='./file2\x00', 0x0, 0x127) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="300000005f9811d1f98aa492d10698993aad3a38417ce3898b6ff58b428cfa41f8cb08347ce749e90a42c57e054006211f65d3c9f5be8c936a2f", @ANYRES16=0x0, @ANYBLOB="000825bd7000e1dbdf2544000000171058e9", @ANYRES32=0x0, @ANYBLOB="0c009900000000001f00000008000d0000000000"], 0x30}, 0x1, 0x0, 0x0, 0x20048000}, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000180)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) writev(r1, &(0x7f0000000240)=[{&(0x7f00000001c0)="30777afc64ac62626e8138b69ec53f482de72eace7766236717ca14c1fb7beec24dbc001751fe663c0b62a630b37e82e9147251267299b525246352655ada716834855b0ed109c95f65d9ccf8a4e7a53a48dff8cb504c2b20ef2a997e4ccc2ae4d81ec2a5306c95868eeb873b86a1ef8f491a0a6042e", 0x76}], 0x1) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r2, &(0x7f0000000440)={0x60000019}) sendmsg$IPVS_CMD_GET_INFO(r1, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x68, 0x0, 0x101, 0x70bd27, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@empty}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x2}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000010}, 0x90) syz_genetlink_get_family_id$tipc(&(0x7f0000000140), r2) 20:20:17 executing program 0: creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) pread64(0xffffffffffffffff, &(0x7f0000000400)=""/255, 0xff, 0x7eb9) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0x200103a7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) [ 2970.819880] FAULT_INJECTION: forcing a failure. [ 2970.819880] name failslab, interval 1, probability 0, space 0, times 0 [ 2970.822369] CPU: 0 PID: 15688 Comm: syz-executor.4 Not tainted 5.10.194 #1 [ 2970.823809] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2970.825522] Call Trace: [ 2970.826076] dump_stack+0x107/0x167 [ 2970.826835] should_fail.cold+0x5/0xa [ 2970.827622] ? create_object.isra.0+0x3a/0xa20 [ 2970.828578] should_failslab+0x5/0x20 [ 2970.829364] kmem_cache_alloc+0x5b/0x310 [ 2970.830203] create_object.isra.0+0x3a/0xa20 [ 2970.831107] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2970.832181] kmem_cache_alloc+0x159/0x310 [ 2970.833055] __delayacct_tsk_init+0x1b/0x80 [ 2970.833937] copy_process+0x3319/0x7800 [ 2970.834766] ? __lock_acquire+0xbb1/0x5b00 [ 2970.835640] ? lock_downgrade+0x6d0/0x6d0 [ 2970.836507] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2970.837586] ? __cleanup_sighand+0xb0/0xb0 [ 2970.838461] ? lock_acquire+0x197/0x470 [ 2970.839289] ? find_held_lock+0x2c/0x110 [ 2970.840148] kernel_clone+0xe7/0x980 [ 2970.840911] ? lock_downgrade+0x6d0/0x6d0 [ 2970.841756] ? find_held_lock+0x2c/0x110 [ 2970.842586] ? create_io_thread+0xf0/0xf0 [ 2970.843443] ? ksys_write+0x12d/0x260 [ 2970.844246] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2970.845258] __do_sys_fork+0x8a/0xc0 [ 2970.846017] ? kernel_thread+0xf0/0xf0 [ 2970.846841] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2970.847922] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2970.848987] ? trace_hardirqs_on+0x5b/0x180 [ 2970.849866] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2970.850915] do_syscall_64+0x33/0x40 [ 2970.851679] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2970.852739] RIP: 0033:0x7f4ded6f8b19 [ 2970.853500] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2970.857247] RSP: 002b:00007f4deac6e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 2970.858804] RAX: ffffffffffffffda RBX: 00007f4ded80bf60 RCX: 00007f4ded6f8b19 [ 2970.860272] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2970.861719] RBP: 00007f4deac6e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2970.863163] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2970.864623] R13: 00007ffdd13eda0f R14: 00007f4deac6e300 R15: 0000000000022000 20:20:17 executing program 0: creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) pread64(0xffffffffffffffff, &(0x7f0000000400)=""/255, 0xff, 0x7eb9) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0x7ffff000}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) 20:20:17 executing program 3: statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f0000000200)=0x6, 0x4) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000340)=ANY=[@ANYBLOB="01080000011270c839284f30e054da4374340020000000000000", @ANYRES32, @ANYBLOB="ffa22106351700002e2f661c696c653000"]) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) pread64(0xffffffffffffffff, &(0x7f0000000400)=""/255, 0xff, 0x7eb9) dup(0xffffffffffffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0), 0x9) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000a00000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) 20:20:17 executing program 5: r0 = creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) open_by_handle_at(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="5000000000000004000000"], 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f0000000200)=0x6, 0x4) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000030000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) 20:20:17 executing program 7: creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="1400fd00000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) 20:20:17 executing program 2: sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x0, 0x8, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) r2 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000003c0), 0x2102, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000400)=0x6) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x0, 0x0) pidfd_send_signal(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xb, 0x5, 0x2000000}, 0x0) r3 = geteuid() statx(r1, &(0x7f0000000380)='./file2\x00', 0x400, 0x0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_xen(&(0x7f0000000280), &(0x7f0000000300)='./file1\x00', &(0x7f0000000340), 0x8000, &(0x7f0000000640)={'trans=xen,', {[{@posixacl}, {@mmap}, {@dfltuid={'dfltuid', 0x3d, r3}}, {@uname={'uname', 0x3d, '.6-.'}}, {@access_user}, {@fscache}, {@dfltuid={'dfltuid', 0x3d, r4}}, {@debug={'debug', 0x3d, 0x4}}, {@nodevmap}, {@nodevmap}], [{@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@fsmagic={'fsmagic', 0x3d, 0x7}}, {@smackfsroot={'smackfsroot', 0x3d, 'TIPC\x00'}}]}}) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file2\x00', 0x0, 0x127) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, 0x0, 0x800, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x1f}}}}, [@NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x20048000}, 0x0) r5 = creat(&(0x7f0000000080)='./file0\x00', 0x0) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r5, &(0x7f0000000440)={0x60000019}) syz_genetlink_get_family_id$tipc(&(0x7f0000000140), r5) 20:20:17 executing program 1: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x46842, 0x0) io_setup(0x5, &(0x7f0000000080)) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x8800000) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x5, r3, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481264, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f00000001c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7}}, './file1\x00'}) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) r5 = syz_io_uring_setup(0x3de4, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000180), &(0x7f0000002a40)) ioctl$BLKTRACESTART(r4, 0x1274, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x882c2, 0x0) fsync(r6) ioctl$FS_IOC_GETFSMAP(r6, 0xc0c0583b, &(0x7f0000000440)={0x0, 0x0, 0x5, 0x0, '\x00', [{0x7, 0x7fff, 0x5, 0xffff, 0x8, 0x401}, {0x9, 0x81, 0xfffe00000000, 0x1000, 0x2}], ['\x00', '\x00', '\x00', '\x00', '\x00']}) io_uring_enter(r5, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$FIGETBSZ(r5, 0x2, &(0x7f0000000240)) 20:20:17 executing program 5: r0 = creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) open_by_handle_at(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="5000000000000004000000"], 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f0000000200)=0x6, 0x4) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000040000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) 20:20:17 executing program 0: creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) pread64(0xffffffffffffffff, &(0x7f0000000400)=""/255, 0xff, 0x7eb9) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xfffffdef}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) 20:20:17 executing program 4: madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x12) mlock(&(0x7f0000ffb000/0x1000)=nil, 0x1000) fork() (fail_nth: 10) 20:20:17 executing program 3: statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f0000000200)=0x6, 0x4) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000340)=ANY=[@ANYBLOB="01080000011270c839284f30e054da4374340020000000000000", @ANYRES32, @ANYBLOB="ffa22106351700002e2f661c696c653000"]) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) pread64(0xffffffffffffffff, &(0x7f0000000400)=""/255, 0xff, 0x7eb9) dup(0xffffffffffffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0), 0x9) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14030d00000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) [ 2971.217201] FAULT_INJECTION: forcing a failure. [ 2971.217201] name failslab, interval 1, probability 0, space 0, times 0 [ 2971.219575] CPU: 0 PID: 15726 Comm: syz-executor.4 Not tainted 5.10.194 #1 [ 2971.221007] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2971.222802] Call Trace: [ 2971.223352] dump_stack+0x107/0x167 [ 2971.224116] should_fail.cold+0x5/0xa [ 2971.224906] ? dup_fd+0x89/0xcf0 [ 2971.225607] should_failslab+0x5/0x20 [ 2971.226389] kmem_cache_alloc+0x5b/0x310 [ 2971.227232] dup_fd+0x89/0xcf0 [ 2971.227903] ? audit_filter_inodes+0x40/0x40 [ 2971.228805] ? security_task_alloc+0xe6/0x260 [ 2971.229720] copy_process+0x197e/0x7800 [ 2971.230532] ? __lock_acquire+0xbb1/0x5b00 [ 2971.231421] ? __cleanup_sighand+0xb0/0xb0 [ 2971.232310] ? lock_acquire+0x197/0x470 [ 2971.233128] ? find_held_lock+0x2c/0x110 [ 2971.233958] kernel_clone+0xe7/0x980 [ 2971.234715] ? lock_downgrade+0x6d0/0x6d0 [ 2971.235565] ? find_held_lock+0x2c/0x110 [ 2971.236393] ? create_io_thread+0xf0/0xf0 [ 2971.237245] ? ksys_write+0x12d/0x260 [ 2971.238034] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2971.239017] __do_sys_fork+0x8a/0xc0 [ 2971.239775] ? kernel_thread+0xf0/0xf0 [ 2971.240604] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2971.241668] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2971.242710] ? trace_hardirqs_on+0x5b/0x180 [ 2971.243587] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2971.244644] do_syscall_64+0x33/0x40 [ 2971.245409] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2971.246453] RIP: 0033:0x7f4ded6f8b19 [ 2971.247216] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2971.250958] RSP: 002b:00007f4deac6e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 2971.252516] RAX: ffffffffffffffda RBX: 00007f4ded80bf60 RCX: 00007f4ded6f8b19 [ 2971.253975] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2971.255426] RBP: 00007f4deac6e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2971.256902] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2971.258369] R13: 00007ffdd13eda0f R14: 00007f4deac6e300 R15: 0000000000022000 20:20:17 executing program 7: creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="1400f401000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) [ 2971.392925] 9pnet: Could not find request transport: xen 20:20:17 executing program 6: sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x0, 0x0) pidfd_send_signal(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xb, 0x5, 0x2000000}, 0x0) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file2\x00', 0x40080, 0x127) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, 0x0, 0x800, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x1f}}}}, [@NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0xfffffffe}]}, 0x30}, 0x1, 0x0, 0x0, 0x20048000}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="1000000017010007002e2f664169"], 0x10) [ 2971.542355] 9pnet: Could not find request transport: xen 20:20:30 executing program 2: sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x0, 0x0) pidfd_send_signal(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xb, 0x5, 0x2000000}, 0x0) pidfd_send_signal(0xffffffffffffffff, 0x40, &(0x7f0000000180)={0x3e, 0xdf9b, 0xf1}, 0x0) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file2\x00', 0x0, 0x127) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, 0x0, 0x800, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x1f}}}}, [@NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x20048000}, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r0, &(0x7f0000000440)={0x60000019}) syz_genetlink_get_family_id$tipc(&(0x7f0000000140), r0) 20:20:30 executing program 5: r0 = creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) open_by_handle_at(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="5000000000000004000000"], 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f0000000200)=0x6, 0x4) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="140000000a0000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) 20:20:30 executing program 6: sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x8) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x0, 0x0) pidfd_send_signal(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xb, 0x5, 0x2000000}, 0x0) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file2\x00', 0x40080, 0x127) r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, 0x0, 0x800, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x1f}}}}, [@NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0xfffffffe}]}, 0x30}, 0x1, 0x0, 0x0, 0x20048000}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="1000000017010007002e2f664169"], 0x10) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000180)=0xeb6, 0x4) 20:20:30 executing program 1: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x46842, 0x0) io_setup(0x5, &(0x7f0000000080)) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x8800000) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x5, r3, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481269, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f00000001c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7}}, './file1\x00'}) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) r5 = syz_io_uring_setup(0x3de4, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000180), &(0x7f0000002a40)) ioctl$BLKTRACESTART(r4, 0x1274, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x882c2, 0x0) fsync(r6) ioctl$FS_IOC_GETFSMAP(r6, 0xc0c0583b, &(0x7f0000000440)={0x0, 0x0, 0x5, 0x0, '\x00', [{0x7, 0x7fff, 0x5, 0xffff, 0x8, 0x401}, {0x9, 0x81, 0xfffe00000000, 0x1000, 0x2}], ['\x00', '\x00', '\x00', '\x00', '\x00']}) io_uring_enter(r5, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$FIGETBSZ(r5, 0x2, &(0x7f0000000240)) 20:20:30 executing program 4: madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x12) mlock(&(0x7f0000ffb000/0x1000)=nil, 0x1000) fork() (fail_nth: 11) 20:20:30 executing program 3: statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f0000000200)=0x6, 0x4) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000340)=ANY=[@ANYBLOB="01080000011270c839284f30e054da4374340020000000000000", @ANYRES32, @ANYBLOB="ffa22106351700002e2f661c696c653000"]) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) pread64(0xffffffffffffffff, &(0x7f0000000400)=""/255, 0xff, 0x7eb9) dup(0xffffffffffffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0), 0x9) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000e00000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) 20:20:30 executing program 0: creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) pread64(0xffffffffffffffff, &(0x7f0000000400)=""/255, 0xff, 0x7eb9) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x2, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) 20:20:30 executing program 7: creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="1400e702000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) [ 2984.009850] FAULT_INJECTION: forcing a failure. [ 2984.009850] name failslab, interval 1, probability 0, space 0, times 0 [ 2984.012205] CPU: 0 PID: 15764 Comm: syz-executor.4 Not tainted 5.10.194 #1 [ 2984.013598] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2984.015253] Call Trace: [ 2984.015793] dump_stack+0x107/0x167 [ 2984.016536] should_fail.cold+0x5/0xa [ 2984.017304] ? create_object.isra.0+0x3a/0xa20 [ 2984.018226] should_failslab+0x5/0x20 [ 2984.018987] kmem_cache_alloc+0x5b/0x310 [ 2984.019808] create_object.isra.0+0x3a/0xa20 [ 2984.020709] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2984.021722] kmem_cache_alloc+0x159/0x310 [ 2984.022557] dup_fd+0x89/0xcf0 [ 2984.023190] ? audit_filter_inodes+0x40/0x40 [ 2984.024115] ? security_task_alloc+0xe6/0x260 [ 2984.025063] copy_process+0x197e/0x7800 [ 2984.025880] ? __lock_acquire+0xbb1/0x5b00 [ 2984.026770] ? __cleanup_sighand+0xb0/0xb0 [ 2984.027634] ? lock_acquire+0x197/0x470 [ 2984.028461] ? find_held_lock+0x2c/0x110 [ 2984.029287] kernel_clone+0xe7/0x980 [ 2984.030044] ? lock_downgrade+0x6d0/0x6d0 [ 2984.030890] ? find_held_lock+0x2c/0x110 [ 2984.031720] ? create_io_thread+0xf0/0xf0 [ 2984.032587] ? ksys_write+0x12d/0x260 [ 2984.033374] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2984.034373] __do_sys_fork+0x8a/0xc0 [ 2984.035134] ? kernel_thread+0xf0/0xf0 [ 2984.035941] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2984.037012] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2984.038067] ? trace_hardirqs_on+0x5b/0x180 [ 2984.038952] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2984.040012] do_syscall_64+0x33/0x40 [ 2984.040790] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2984.041809] RIP: 0033:0x7f4ded6f8b19 [ 2984.042584] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2984.046252] RSP: 002b:00007f4deac6e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 2984.047769] RAX: ffffffffffffffda RBX: 00007f4ded80bf60 RCX: 00007f4ded6f8b19 [ 2984.049201] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2984.050619] RBP: 00007f4deac6e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2984.052062] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2984.053478] R13: 00007ffdd13eda0f R14: 00007f4deac6e300 R15: 0000000000022000 20:20:30 executing program 7: creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000003000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) 20:20:30 executing program 3: statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f0000000200)=0x6, 0x4) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000340)=ANY=[@ANYBLOB="01080000011270c839284f30e054da4374340020000000000000", @ANYRES32, @ANYBLOB="ffa22106351700002e2f661c696c653000"]) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) pread64(0xffffffffffffffff, &(0x7f0000000400)=""/255, 0xff, 0x7eb9) dup(0xffffffffffffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0), 0x9) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14006000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) 20:20:30 executing program 5: r0 = creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) open_by_handle_at(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="5000000000000004000000"], 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f0000000200)=0x6, 0x4) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="140000030d0000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) 20:20:30 executing program 0: creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) pread64(0xffffffffffffffff, &(0x7f0000000400)=""/255, 0xff, 0x7eb9) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x3, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) 20:20:30 executing program 6: sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x8) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x0, 0x0) pidfd_send_signal(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xb, 0x5, 0x2000000}, 0x0) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file2\x00', 0x40080, 0x127) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000825bd7000ffdbdf254400000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900000000001f00000008000d00feffffff"], 0x30}, 0x1, 0x0, 0x0, 0x20048000}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="102e2f6641690000000000000000"], 0x10) 20:20:30 executing program 1: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x46842, 0x0) io_setup(0x5, &(0x7f0000000080)) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x8800000) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x5, r3, 0x0) ioctl$BLKTRACESETUP(r0, 0xc048126c, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f00000001c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7}}, './file1\x00'}) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) r5 = syz_io_uring_setup(0x3de4, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000180), &(0x7f0000002a40)) ioctl$BLKTRACESTART(r4, 0x1274, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x882c2, 0x0) fsync(r6) ioctl$FS_IOC_GETFSMAP(r6, 0xc0c0583b, &(0x7f0000000440)={0x0, 0x0, 0x5, 0x0, '\x00', [{0x7, 0x7fff, 0x5, 0xffff, 0x8, 0x401}, {0x9, 0x81, 0xfffe00000000, 0x1000, 0x2}], ['\x00', '\x00', '\x00', '\x00', '\x00']}) io_uring_enter(r5, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$FIGETBSZ(r5, 0x2, &(0x7f0000000240)) 20:20:30 executing program 2: sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x0, 0x0) pidfd_send_signal(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xb, 0x5, 0x2000000}, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f00000002c0)='./file2\x00', 0x0, 0x127) clone3(&(0x7f00000003c0)={0x24084080, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200), {0x1}, &(0x7f0000000300)=""/145, 0x91, &(0x7f0000000540)=""/203, &(0x7f0000000240)=[0x0], 0x1, {r0}}, 0x58) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, 0x0, 0x800, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x1f}}}}, [@NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x20048000}, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r1, &(0x7f0000000440)={0x60000019}) syz_genetlink_get_family_id$tipc(&(0x7f0000000140), r1) 20:20:30 executing program 7: creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000d03000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) 20:20:46 executing program 4: madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x12) mlock(&(0x7f0000ffb000/0x1000)=nil, 0x1000) fork() (fail_nth: 12) 20:20:46 executing program 5: r0 = creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) open_by_handle_at(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="5000000000000004000000"], 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f0000000200)=0x6, 0x4) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="140000000e0000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) [ 2999.703647] FAULT_INJECTION: forcing a failure. [ 2999.703647] name failslab, interval 1, probability 0, space 0, times 0 [ 2999.705998] CPU: 1 PID: 15830 Comm: syz-executor.4 Not tainted 5.10.194 #1 20:20:46 executing program 2: sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x31) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_PUBL_GET(r1, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x48, r2, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x77}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8000}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x44040}, 0x20000000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x82, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x0, 0x0) pidfd_send_signal(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xb, 0x5, 0x2000000}, 0x0) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file2\x00', 0x0, 0x127) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000825bd7000000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900000000001f00000008000d0000000000"], 0x30}, 0x1, 0x0, 0x0, 0x20048000}, 0x0) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r3, &(0x7f0000000440)={0x60000019}) syz_genetlink_get_family_id$tipc(&(0x7f0000000140), r3) r4 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x100000001) syncfs(r4) 20:20:46 executing program 6: sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x8) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x0, 0x0) pidfd_send_signal(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xb, 0x5, 0x2000000}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_NOP={0x0, 0x2}, 0x7ff) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file2\x00', 0x40080, 0x127) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, 0x0, 0x800, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x1f}}}}, [@NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0xfffffffe}]}, 0x30}, 0x1, 0x0, 0x0, 0x20048000}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x100000001) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) [ 2999.707669] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2999.709589] Call Trace: [ 2999.710134] dump_stack+0x107/0x167 [ 2999.710891] should_fail.cold+0x5/0xa [ 2999.711668] ? alloc_fdtable+0x84/0x280 [ 2999.712726] should_failslab+0x5/0x20 [ 2999.713503] kmem_cache_alloc_trace+0x55/0x320 [ 2999.714467] ? rwlock_bug.part.0+0x90/0x90 [ 2999.715318] alloc_fdtable+0x84/0x280 [ 2999.716102] dup_fd+0x74d/0xcf0 [ 2999.716804] ? security_task_alloc+0xe6/0x260 [ 2999.717734] copy_process+0x197e/0x7800 [ 2999.718555] ? __lock_acquire+0xbb1/0x5b00 [ 2999.719453] ? __cleanup_sighand+0xb0/0xb0 [ 2999.720333] ? lock_acquire+0x197/0x470 [ 2999.721151] ? find_held_lock+0x2c/0x110 [ 2999.721990] kernel_clone+0xe7/0x980 [ 2999.722752] ? lock_downgrade+0x6d0/0x6d0 [ 2999.723590] ? find_held_lock+0x2c/0x110 [ 2999.724444] ? create_io_thread+0xf0/0xf0 [ 2999.725293] ? ksys_write+0x12d/0x260 [ 2999.726083] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2999.727167] __do_sys_fork+0x8a/0xc0 [ 2999.727953] ? kernel_thread+0xf0/0xf0 [ 2999.728774] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2999.730090] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2999.731269] ? trace_hardirqs_on+0x5b/0x180 [ 2999.732144] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2999.733218] do_syscall_64+0x33/0x40 [ 2999.734212] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2999.735301] RIP: 0033:0x7f4ded6f8b19 sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000001740)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000540)={0x11e4, r3, 0x20, 0x70bd2a, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_TID_CONFIG={0x20, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x79}]}, {0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x3d8, 0x11d, 0x0, 0x1, [{0x2ac, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x2}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x264, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x78, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0xf1, 0x0, 0x9, 0x4, 0x9, 0x1, 0xc9]}}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0x3, 0x1, 0x26, 0x24, 0x1, 0x2, 0x16, 0xb, 0x60, 0x6c, 0x48, 0x30, 0x24, 0xb, 0x5, 0x6, 0x3, 0xb, 0x12, 0x18, 0x6c, 0xb, 0xb, 0x18, 0x60, 0x1b, 0x16, 0x30]}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x4, 0x24, 0xc, 0xc, 0x0]}, @NL80211_TXRATE_HT={0x33, 0x2, [{0x7, 0x8}, {0x3, 0x1}, {0x0, 0x5}, {0x0, 0x4}, {0x1}, {0x0, 0xa}, {}, {0x6, 0x8}, {0x5, 0x5}, {0x4, 0x7}, {0x1, 0x3}, {0x1, 0x4}, {0x3, 0x8}, {0x6, 0x6}, {0x6}, {0x7, 0x3}, {0x7, 0x9}, {0x4, 0x9}, {0x4, 0x2}, {0x5, 0x9}, {0x1, 0x2}, {0x3, 0x6}, {0x3, 0x6}, {0x2, 0xa}, {0x5, 0xa}, {0x4, 0x2}, {0x3, 0x5}, {0x2, 0x2}, {0x1, 0x3}, {0x7, 0x4}, {0x1, 0x5}, {0x4, 0x8}, {0x4, 0xa}, {0x0, 0x8}, {0x3, 0x6}, {0x1, 0x3}, {0x7, 0x2}, {0x0, 0x8}, {0x7, 0x3}, {0x4, 0x7}, {0x6, 0x8}, {0x4, 0x1}, {0x0, 0x7}, {0x6, 0x4}, {0x2, 0x7}, {0x0, 0x6}, {}]}]}, @NL80211_BAND_2GHZ={0x118, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x7, 0x1, [0x16, 0x18, 0x1]}, @NL80211_TXRATE_HT={0x39, 0x2, [{0x4, 0x7}, {0x7}, {0x4, 0x1}, {0x2, 0x1}, {0x4, 0x4}, {0x5}, {0x1, 0x6}, {0x3, 0x7}, {0x1, 0x7}, {0x5, 0x9}, {0x2, 0x1}, {0x7, 0x8}, {0x6, 0x9}, {0x0, 0x4}, {0x5, 0x3}, {0x7}, {0x2, 0xa}, {0x7, 0x2}, {0x5, 0x3}, {0x5, 0x2}, {0x2, 0x9}, {0x3, 0xa}, {0x4, 0x8}, {0x7, 0x5}, {0x5, 0x2}, {0x6, 0x2}, {0x7, 0x8}, {0x6, 0x2}, {0x5, 0x6}, {0x5, 0x6}, {0x1, 0x4}, {0x4, 0x3}, {0x0, 0x4}, {0x7, 0x6}, {}, {0x5, 0x8}, {0x3, 0x4}, {0x1}, {0x1, 0x7}, {0x7, 0x3}, {0x4, 0x8}, {0x7, 0x4}, {0x1, 0x6}, {}, {0x3, 0x9}, {0x6, 0x4}, {0x2, 0x3}, {0x7, 0x4}, {}, {0x4}, {0x5, 0x6}, {0x1, 0x9}, {0x6, 0x3}]}, @NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0x55, 0x2, 0x36, 0x60, 0x16, 0x1, 0x36, 0x9]}, @NL80211_TXRATE_HT={0x51, 0x2, [{0x4, 0x8}, {0x4, 0x6}, {0x3, 0xa}, {0x1, 0x3}, {0x6}, {0x7, 0x6}, {0x0, 0x8}, {0x2, 0x2}, {0x6, 0xa}, {0x4, 0x2}, {0x3, 0x7}, {0x0, 0x7}, {0x7, 0x5}, {0x0, 0x4}, {0x2, 0x4}, {0x1}, {0x2, 0x6}, {0x6}, {0x3, 0x4}, {0x5, 0x9}, {0x2, 0x6}, {0x3, 0x1}, {0x1, 0x2}, {0x6}, {0x7, 0x6}, {0x5, 0x8}, {0x5, 0x1}, {0x1, 0x7}, {0x3, 0x9}, {0x0, 0x5}, {0x7, 0x3}, {}, {0x6, 0x8}, {0x4, 0x7}, {0x0, 0x9}, {0x3}, {0x6, 0x2}, {0x1}, {0x1, 0x2}, {0x1, 0x8}, {0x0, 0x6}, {0x1, 0x6}, {0x7, 0x9}, {0x0, 0x7}, {0x2, 0x3}, {0x5}, {0x6, 0x9}, {0x6, 0xa}, {0x7, 0x9}, {0x6, 0x9}, {0x5, 0x2}, {0x7}, {0x2, 0x2}, {0x0, 0x3}, {0x0, 0x3}, {0x4, 0x9}, {0x1}, {0x5, 0x4}, {0x6}, {0x5, 0x1}, {0x6, 0x3}, {}, {0x2, 0x3}, {0x1, 0x1}, {0x7, 0x5}, {0x1, 0x5}, {0x7, 0x4}, {0x0, 0x1}, {0x0, 0x5}, {0x0, 0x4}, {0x1}, {0x6, 0x2}, {0x0, 0x7}, {0x3, 0xa}, {0x6, 0x9}, {0x2, 0x4}, {0x0, 0x5}]}, @NL80211_TXRATE_HT={0x41, 0x2, [{0x3, 0x1}, {0x7, 0x7}, {0x4, 0x4}, {0x0, 0x2}, {0x7, 0x8}, {0x1, 0x7}, {0x1, 0xa}, {0x2, 0x4}, {0x0, 0xa}, {0x4, 0x8}, {0x0, 0x9}, {0x1, 0x9}, {0x4, 0x5}, {0x2, 0x2}, {0x2, 0x7}, {0x2, 0xa}, {0x5, 0x5}, {0x3, 0xa}, {0x4, 0x2}, {0x2, 0x9}, {0x3, 0x8}, {0x1, 0xa}, {0x1, 0x1}, {0x4, 0x3}, {0x1, 0x6}, {0x0, 0x8}, {0x7, 0x6}, {0x0, 0x6}, {0x0, 0x7}, {0x2, 0xa}, {0x6, 0x7}, {0x5, 0x6}, {0x6, 0x3}, {0x2, 0xa}, {0x1, 0x4}, {0x7, 0x9}, {0x3, 0x6}, {0x1, 0x5}, {0x6, 0xa}, {0x3, 0x3}, {0x0, 0x5}, {0x0, 0x9}, {0x3, 0x1}, {0x3, 0x4}, {0x1, 0x9}, {0x2, 0x1}, {0x2, 0x3}, {0x3, 0x5}, {0x0, 0x5}, {}, {0x6, 0x7}, {0x1, 0x2}, {0x3}, {0x0, 0x7}, {0x5, 0x4}, {0x1, 0x7}, {0x4, 0x9}, {0x1, 0x8}, {0x4}, {0x4, 0x7}, {0x7, 0x3}]}, @NL80211_TXRATE_HT={0x20, 0x2, [{0x1, 0x8}, {0x6, 0x7}, {0x3, 0x9}, {0x7, 0x9}, {0x0, 0x3}, {0x6, 0x7}, {0x5, 0x5}, {0x7, 0x8}, {0x3, 0x4}, {0x0, 0x9}, {0x4, 0x8}, {0x4, 0xa}, {0x7}, {0x6, 0xa}, {0x0, 0x4}, {0x7}, {0x6, 0x5}, {0x6, 0xa}, {0x7, 0x9}, {0x5, 0x3}, {0x2, 0x3}, {0x4, 0x8}, {0x2, 0x1}, {0x4, 0xa}, {0x5, 0x3}, {0x2, 0xa}, {0x1, 0x2}, {0x1, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_60GHZ={0x34, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x4, 0x2, 0x101, 0x1, 0xfff, 0xfff, 0x8]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x2, 0x18, 0x2, 0x48, 0x5]}, @NL80211_TXRATE_HT={0x6, 0x2, [{0x1, 0x2}, {0x4, 0x2}]}]}, @NL80211_BAND_6GHZ={0x88, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x1, 0x2}, {0x4, 0x1}, {0x7}, {0x2, 0x3}, {0x1, 0x9}, {0x1}, {0x7, 0x7}, {0x6, 0xa}, {0x0, 0x6}, {0x2, 0x9}, {0x6, 0x5}, {0x6, 0x5}, {0x1, 0x6}, {0x5, 0x3}, {0x1, 0x1}, {0x2, 0x2}, {0x3, 0x2}, {0x6, 0x4}, {0x2, 0x6}, {0x4, 0x2}, {0x5, 0x8}, {0x1}, {0x4, 0x9}, {0x0, 0x1}, {0x1, 0xa}]}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x18, 0x5, 0x24, 0x1b, 0x2, 0x1b, 0x6c, 0x0, 0x2, 0x18, 0x18, 0x3, 0x9, 0x16, 0x24, 0x36, 0x60, 0x1, 0x3, 0x48, 0x30, 0x60, 0x24, 0x3, 0x6c, 0x2, 0x24, 0x48, 0xc]}, @NL80211_TXRATE_HT={0x35, 0x2, [{0x6, 0x9}, {0x3, 0x5}, {0x5, 0x4}, {0x7, 0x2}, {0x3, 0xa}, {0x7, 0x4}, {0x4, 0x4}, {0x0, 0x5}, {0x5, 0x3}, {0x0, 0x3}, {0x5, 0x7}, {0x4, 0x2}, {0x6, 0x2}, {0x1, 0x6}, {0x0, 0x4}, {0x6, 0x8}, {0x1, 0x4}, {0x7, 0x1}, {0x4, 0x9}, {0x7, 0x9}, {0x0, 0x6}, {0x5, 0x2}, {0x1, 0xa}, {0x3}, {0x3, 0x6}, {0x0, 0x7}, {0x6, 0x5}, {0x2, 0x1}, {0x5, 0x7}, {0x5, 0x7}, {0x5}, {0x1, 0x9}, {0x0, 0x8}, {0x2, 0x2}, {0x5, 0x5}, {0x6, 0x2}, {0x0, 0x8}, {0x4, 0x1}, {0x0, 0x4}, {0x2, 0x4}, {0x1, 0x9}, {0x2, 0x5}, {0x5, 0x6}, {0x2, 0x8}, {0x5, 0x5}, {0x7, 0xa}, {0x0, 0x7}, {0x1, 0x2}, {0x7, 0x1}]}]}, @NL80211_BAND_5GHZ={0x14, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xf, 0x1, [0xb, 0x2, 0x18, 0x30, 0xc, 0x3d, 0x3, 0x12, 0x1, 0x1b, 0x3]}]}]}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x60}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xb}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x1c, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x4, 0x800, 0xe860, 0x6, 0xba4, 0x9, 0x5]}}]}]}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x3}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x95}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x6}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xcc}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xf8}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x2}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x62}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x4a}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xc7}]}]}, @NL80211_ATTR_TID_CONFIG={0x2f0, 0x11d, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x8}]}, {0x15c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xe09}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x80000000}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x128, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x44, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x2e, 0x2, [{0x5, 0x5}, {0x0, 0x3}, {0x6, 0x2}, {0x1, 0x5}, {0x5}, {0x3, 0x7}, {0x5, 0x6}, {0x0, 0x5}, {0x4}, {0x3, 0xa}, {0x3, 0xa}, {0x2, 0x7}, {0x6, 0xa}, {0x1}, {0x4}, {0x0, 0x4}, {0x4}, {0x5, 0x8}, {0x3, 0x5}, {0x0, 0x3}, {0x2, 0x7}, {0x7, 0x2}, {0x5}, {0x4, 0x3}, {0x7}, {0x4, 0x8}, {0x5, 0x7}, {0x7, 0x1}, {0x1, 0x4}, {0x6, 0x6}, {0x0, 0x9}, {0x7, 0x4}, {0x0, 0x9}, {0x1, 0x7}, {0x2, 0xa}, {0x0, 0x6}, {0x7, 0x7}, {0x6, 0x3}, {0x1, 0x6}, {0x2, 0x1}, {0x3, 0xa}, {0x7, 0x6}]}, @NL80211_TXRATE_HT={0xf, 0x2, [{0x1, 0x6}, {0x2, 0x1}, {0x0, 0x9}, {0x6, 0x6}, {0x0, 0x8}, {0x4, 0x9}, {0x5, 0xa}, {0x5, 0x6}, {0x2, 0xa}, {0x1, 0xa}, {}]}]}, @NL80211_BAND_5GHZ={0x40, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff9, 0xfff9, 0x200, 0x2, 0x3, 0x1, 0x6, 0x20]}}, @NL80211_TXRATE_HT={0x16, 0x2, [{0x1, 0x9}, {0x3, 0x9}, {0x2, 0x5}, {0x7, 0x2}, {0x0, 0x9}, {0x6, 0x8}, {0x0, 0x3}, {0x6}, {0x4, 0x1}, {0x6, 0x3}, {0x3, 0x2}, {}, {0x0, 0x1}, {0x4, 0x8}, {0x6, 0x3}, {0x1, 0x7}, {0x1, 0x4}, {0x2, 0x5}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_6GHZ={0x54, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x18, 0x12, 0x9, 0x18, 0xd3, 0x24, 0x3]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x5da5, 0x8001, 0x8, 0x9, 0x1, 0x87, 0x7f]}}, @NL80211_TXRATE_HT={0xa, 0x2, [{0x4, 0x3}, {0x7, 0x5}, {0x4, 0x3}, {0x3, 0x18}, {0x0, 0x7}, {0x1, 0x9}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x70d, 0x3f, 0x1f, 0xa1, 0x5, 0x644]}}]}, @NL80211_BAND_6GHZ={0x4c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0x0, 0x6, 0x1b, 0x7b]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x9, 0x401, 0xf800, 0x5, 0x3, 0x9, 0x3ff]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x80, 0x2a42, 0x8, 0x9, 0x8, 0xf22]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x45}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}, {0x154, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x148, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x24, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x17, 0x1, [0x30, 0x0, 0x6c, 0x2, 0x60, 0x16, 0x4, 0x16, 0x9, 0x5, 0x2, 0x1, 0x24, 0x3, 0x36, 0x24, 0x5, 0xc, 0x0]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_5GHZ={0x2c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x17, 0x1, [0x5, 0x3, 0x1, 0x9, 0x36, 0x18, 0x24, 0x5, 0x18, 0x1, 0x16, 0x4, 0x2, 0x60, 0xc, 0x9, 0x48, 0x60, 0x18]}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x36, 0x6, 0x4, 0x16, 0x4, 0x18, 0x9, 0x16, 0x9, 0x12, 0xb]}]}, @NL80211_BAND_6GHZ={0x64, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x92, 0xfffe, 0xd4dc, 0x3, 0x7, 0x4, 0xffff, 0x1]}}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x7, 0x4}, {0x2, 0x4}, {0x4, 0x1}, {0x7, 0x8}, {0x1, 0x3}, {0x5, 0x2}, {0x6, 0x4}, {0x5, 0x7}, {0x1, 0x1}, {0x2, 0x5}, {0x0, 0x5}, {0x5, 0x1}, {0x7, 0x2}, {0x7, 0x8}, {0x2, 0x7}, {0x4, 0x3}, {0x7, 0x5}, {0x5, 0x8}, {0x1, 0x1}, {0x1, 0xa}, {0x6, 0x8}, {0x3, 0x8}, {0x6, 0x4}, {0x5, 0x5}, {0x2, 0x9}, {0x2, 0x1}, {0x1, 0x1}, {0x2, 0x6}, {0x4, 0x6}, {0x7, 0x9}, {0x6, 0x3}, {0x7, 0x8}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x74, 0x63a, 0x0, 0xc0, 0x7, 0x8, 0x6, 0x1]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0xa, 0x2, [{0x5, 0x2}, {0x4, 0x5}, {0x7, 0x4}, {0x3, 0x5}, {0x1, 0xa}, {0x0, 0x6}]}]}, @NL80211_BAND_5GHZ={0x90, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x6c, 0x2, 0x9, 0x1b, 0x9, 0x30, 0xb, 0x24, 0x3, 0x2, 0x1b, 0x6c]}, @NL80211_TXRATE_HT={0x36, 0x2, [{0x0, 0x7}, {0x3, 0x1}, {0x0, 0x1}, {0x1, 0x9}, {0x1, 0x5}, {0x6, 0x5}, {0x4, 0x2}, {0x0, 0xa}, {0x4, 0x6}, {0x3, 0x5}, {0x1, 0x2}, {0x0, 0x3}, {0x4, 0x6}, {0x5}, {0x6, 0x3}, {0x1, 0x6}, {0x6, 0xa}, {0x4, 0x4}, {0x2, 0x8}, {0x2, 0x5}, {0x0, 0x6}, {0x1, 0x6}, {0x2, 0xa}, {0x4}, {0x6, 0x3}, {0x2, 0x5}, {0x6, 0xa}, {0x4, 0x2}, {0x6, 0x1}, {0x3}, {0x3, 0x2}, {0x2, 0xa}, {0x4, 0x3}, {0x1, 0xa}, {0x6, 0xa}, {0x1}, {0x1, 0x3}, {0x0, 0xa}, {0x0, 0xa}, {0x0, 0x2}, {0x6, 0x4}, {0x2, 0x6}, {0x6, 0x9}, {0x4, 0x7}, {0x6, 0x9}, {0x4, 0x1}, {0x5, 0x5}, {0x1, 0x3}, {0x6, 0x5}, {0x4}]}, @NL80211_TXRATE_HT={0xc, 0x2, [{0x6, 0xa}, {0x2}, {0x2, 0x8}, {0x4, 0x2}, {0x0, 0x4}, {}, {0x3, 0x5}, {0x2, 0x9}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x400, 0x20, 0x4, 0x7, 0xb2, 0x2]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x7fff, 0x4e5f, 0xfffc, 0x4, 0x0, 0x8, 0x3]}}, @NL80211_TXRATE_LEGACY={0x6, 0x1, [0x5b, 0x18]}]}]}]}]}, @NL80211_ATTR_TID_CONFIG={0x28, 0x11d, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x360, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x75}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x27}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xcd}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x94}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0xa4, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x84, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x80, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x33, 0x2, [{0x3, 0xa}, {0x4, 0x2}, {0x0, 0x2}, {0x6}, {0x2, 0x3}, {0x4, 0x7}, {0x4}, {0x7, 0x1}, {0x2, 0xa}, {0x2, 0xa}, {0x1, 0xa}, {0x0, 0x4}, {0x5, 0x1}, {0x3, 0x4}, {0x4, 0x8}, {0x0, 0x3}, {0x1, 0x9}, {0x0, 0x9}, {0x1, 0x5}, {0x4, 0x6}, {0x6, 0x3}, {0x6, 0x6}, {0x3, 0x8}, {0x2, 0x5}, {0x6, 0x4}, {0x4, 0x5}, {0x0, 0x7}, {0x4, 0x8}, {0x4, 0x1}, {0x7}, {0x5, 0x1}, {0x3, 0x3}, {0x3, 0x2}, {0x6}, {0x4, 0xa}, {0x4, 0x3}, {0x0, 0x2}, {0x0, 0x9}, {0x3, 0x9}, {0x1, 0x9}, {0x5, 0x1}, {0x7, 0x4}, {0x4, 0xa}, {0x3, 0x6}, {0x6}, {0x5, 0x9}, {0x1, 0x1}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x30, 0x2, [{0x6, 0x6}, {0x0, 0x5}, {0x1, 0x9}, {0x7, 0x8}, {0x2, 0x6}, {0x4, 0x5}, {0x3, 0x2}, {}, {0x6, 0x8}, {0x6, 0x8}, {0x7, 0x8}, {0x7, 0x5}, {0x5, 0x6}, {0x6, 0x3}, {0x1, 0x1}, {0x0, 0x4}, {0x7, 0x8}, {0x6}, {0x2, 0x2}, {0x6, 0x2}, {0x2, 0x8}, {0x3, 0x9}, {0x6, 0x9}, {0x6, 0x2}, {0x1, 0x9}, {0x5, 0x1}, {0x1, 0x2}, {0x1, 0x7}, {0x1, 0x3}, {0x6, 0x3}, {0x6, 0x2}, {0x5, 0x5}, {0x4, 0xa}, {0x5, 0x5}, {0x5, 0x5}, {0x4, 0x5}, {0x1, 0x1}, {0x1, 0x9}, {0x0, 0x9}, {0x2, 0x1}, {0x7, 0x1}, {0x1, 0x9}, {0x0, 0x4}, {0x4, 0x3}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x58, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x9}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xf1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xfc}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xbd}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xcc}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x39}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0xeb}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x8}]}, {0x4c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x28}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x2}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x69845b7eeca78d47}]}, {0x188, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x16c, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x6c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4a, 0x2, [{0x0, 0x1}, {0x3, 0x9}, {0x2, 0x4}, {0x3, 0x2}, {0x5, 0x4}, {0x6, 0x3}, {0x1, 0x4}, {0x0, 0xa}, {0x0, 0x7}, {0x0, 0x8}, {0x4, 0x9}, {0x4, 0x3}, {0x3, 0x4}, {0x6}, {0x7}, {0x0, 0x2}, {0x6, 0xa}, {0x3, 0x7}, {0x6, 0x2}, {0x1, 0x1}, {0x4, 0x2}, {0x5, 0x5}, {0x2, 0x1}, {0x5, 0x2}, {0x1, 0x4}, {0x1, 0x2}, {0x2, 0x7}, {0x4}, {0x5, 0x5}, {0x5, 0x9}, {0x1, 0xa}, {0x1, 0x4}, {0x3, 0xa}, {0x4, 0x5}, {0x7, 0x3}, {0x1, 0x8}, {0x7, 0x7}, {0x5, 0x1}, {0x1, 0xa}, {0x7, 0x6}, {0x3, 0x8}, {0x6, 0x7}, {0x4, 0x4}, {0x0, 0x1}, {0x7, 0x5}, {}, {0x6, 0x5}, {0x6, 0x3}, {0x5, 0x1}, {0x1, 0x5}, {0x7, 0x2}, {0x1, 0x7}, {0x7}, {0x4, 0x2}, {0x1, 0x4}, {0x1, 0x9}, {0x1, 0x7}, {0x1, 0x3}, {0x4, 0x1}, {0x5, 0x3}, {0x3, 0x8}, {0x6}, {0x4, 0x9}, {0x4, 0xa}, {0x0, 0x7}, {0x6, 0x5}, {0x5, 0x3}, {0x6, 0x4}, {0x5, 0x7}, {0x6, 0x3}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xffff, 0x1ff, 0xc24, 0xfffc, 0x8, 0x1, 0x3, 0x4592]}}]}, @NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xd, 0x1, [0x2, 0x2, 0xc, 0x6c, 0x3, 0xb, 0x12, 0x4853cb3b57686228, 0x18]}, @NL80211_TXRATE_HT={0x3a, 0x2, [{0x1, 0x9}, {0x7, 0x2}, {0x7, 0x7}, {0x7, 0x6}, {0x6, 0x3}, {0x7, 0x1}, {0x5, 0x3}, {0x5}, {0x0, 0x1}, {0x1, 0x7}, {0x0, 0xa}, {0x6, 0x3}, {0x3}, {0x1, 0x3}, {0x6, 0xa}, {0x6, 0x9}, {0x6, 0x3}, {0x4, 0x9}, {0x7, 0x1}, {0x7}, {0x0, 0x9}, {0x4, 0xa}, {0x5, 0xa}, {0x1, 0x2}, {0x5, 0x4}, {0x2, 0x3}, {0x2}, {0x6}, {0x1, 0x5}, {0x0, 0x6}, {0x4, 0xa}, {0x1, 0x6}, {0x2, 0x8}, {0x7, 0x2}, {0x3, 0x6}, {0x5, 0x7}, {0x4, 0x8}, {0x6, 0x1}, {0x4, 0x6}, {0x6, 0x1}, {0x4, 0x5}, {0x6, 0x7}, {0x2, 0x9}, {0x2, 0xa}, {0x4, 0x5}, {0x1, 0x2}, {0x7, 0x4}, {0x3, 0x3}, {0x1, 0x7}, {0x3, 0x9}, {0x3, 0x4}, {0x3, 0xa}, {0x7, 0x5}, {0x4, 0x6}]}]}, @NL80211_BAND_6GHZ={0x34, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x19, 0x1, [0x60, 0xc, 0x3, 0x1, 0x6c, 0x3, 0x2, 0x30, 0x1b, 0x60, 0x9, 0x18, 0x6f, 0x9, 0x24, 0x1b, 0xb, 0x0, 0x30, 0x36, 0x48]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3f, 0x7, 0x5, 0x200, 0x1, 0x1000, 0x20, 0x5]}}]}, @NL80211_BAND_6GHZ={0x2c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x7, 0xd97, 0xc, 0x80, 0x15d2, 0x1, 0x1f]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x6, 0x6, 0x3, 0x100, 0xb3, 0x1, 0x7fff]}}]}, @NL80211_BAND_60GHZ={0x34, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0x20, 0x36, 0x2, 0x2, 0x36, 0x18, 0x6c, 0x2, 0x16, 0x60, 0xb, 0x36, 0x1b, 0x6, 0x6b, 0x16]}, @NL80211_TXRATE_HT={0x14, 0x2, [{0x1, 0x9}, {0x3, 0x1}, {0x5, 0x8}, {0x2, 0x7}, {}, {0x1, 0xa}, {0x1, 0x2}, {0x2, 0xa}, {0x4, 0x4}, {0x1, 0x5}, {0x1, 0x5}, {0x1, 0x9}, {0x7, 0x3}, {0x0, 0x9}, {0x6, 0x3}, {0x7, 0x2}]}]}, @NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xb, 0x1, [0x4, 0x3, 0x3, 0x5, 0x6c, 0x30, 0x5b]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x69}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x3fc, 0x11d, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x6}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x82}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x2d}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x1b}]}, {0x50, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1000}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xe}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}]}, {0x58, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xaf}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x6}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x6}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x80}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x2bc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x2b8, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x108, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x15, 0x1, [0xc, 0x12, 0xc, 0x48, 0x5, 0x18, 0x60, 0x65, 0xa, 0x24, 0x30, 0xc, 0x5, 0x0, 0x48, 0x1, 0xc]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x44, 0x2, [{0x7, 0x4}, {0x1, 0x6}, {0x0, 0x3}, {0x7, 0xa}, {0x3, 0x1}, {0x3, 0x7}, {0x6, 0x2}, {0x5, 0x10}, {0x0, 0x4}, {0x1, 0x5}, {0x0, 0x1}, {0x2, 0x7}, {0x3, 0x9}, {0x1, 0x9}, {0x1, 0x1}, {0x7, 0x3}, {0x7, 0x8}, {0x0, 0x8}, {0x3, 0x8}, {0x5, 0x2}, {0x6, 0x9}, {0x4, 0x6}, {0x2, 0x3}, {0x7, 0x3}, {0x1, 0x7}, {0x1, 0x4}, {0x2, 0x7}, {0x2, 0x2}, {0x6, 0x4}, {0x6, 0x8}, {0x1, 0x8}, {0x0, 0x3}, {0x5, 0x4}, {0x2, 0x4}, {0x5, 0x1}, {0x6, 0x9}, {0x1, 0x6}, {0x0, 0x8}, {0x7, 0x4}, {0x1, 0xa}, {0x2, 0x7}, {0x1, 0x5}, {0x0, 0xa}, {0x2, 0x1}, {0x7, 0x1}, {0x0, 0x9}, {0x3, 0x2}, {0x2, 0x4}, {0x0, 0x6}, {0x3, 0xa}, {0x6, 0x9}, {0x6}, {0x2, 0xa}, {0x6, 0x8}, {}, {0x3}, {0x2, 0x2}, {0x7, 0x9}, {0x0, 0xa}, {0x1, 0x9}, {0x7, 0x8}, {0x2, 0x3}, {0x0, 0x9}, {0x0, 0x5}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x7f, 0x5, 0x3, 0xae, 0x101, 0x5, 0x7ff]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8000, 0x800, 0x5, 0x3, 0xfa36, 0x7, 0x1f, 0x400]}}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0x9, 0x9, 0x4, 0x18, 0x16, 0x60, 0x6c, 0xb, 0xb, 0x24, 0x16, 0x75e92b0f5f8094f8, 0x1b, 0x5, 0x1e, 0x16, 0x16, 0x2, 0x0]}, @NL80211_TXRATE_HT={0x46, 0x2, [{0x4}, {0x0, 0x5}, {0x4, 0x5}, {0x7, 0x2}, {0x7, 0xa}, {0x4, 0x7}, {0x0, 0x2}, {0x3, 0x9}, {0x5, 0x8}, {0x6, 0x8}, {0x4, 0x5}, {0x5, 0x6}, {0x0, 0x4}, {0x0, 0x2}, {0x2, 0x2}, {0x6, 0x1}, {0x4, 0x4}, {0x2, 0x4}, {0x1, 0x5}, {}, {0x0, 0x7}, {0x0, 0x5}, {0x7, 0x4}, {0x7, 0x7}, {0x1, 0x8}, {0x0, 0x9}, {0x7, 0x4}, {0x7, 0x9}, {0x4, 0xa}, {0x1, 0xa}, {0x5, 0x6}, {0x6, 0x7}, {0x7, 0xa}, {}, {0x6, 0x8}, {0x1, 0xa}, {0x0, 0x6}, {0x0, 0x5}, {0x6, 0x3}, {0x4, 0x9}, {0x2, 0x7}, {0x1}, {0x4, 0x3}, {0x1, 0x8}, {0x3, 0x3}, {0x5, 0x9}, {0x6}, {0x6, 0x4}, {0x7, 0x3}, {0x7, 0x6}, {0x0, 0x5}, {0x0, 0x5}, {0x5, 0x9}, {0x5, 0x3}, {0x1, 0x2}, {0x7, 0x9}, {0x0, 0x4}, {0x4, 0x8}, {0x1, 0x4}, {0x2, 0xa}, {0x0, 0x8}, {0x5, 0x9}, {0x7, 0x2}, {0x1, 0x4}, {0x1, 0x1}, {0x5, 0x2}]}]}, @NL80211_BAND_5GHZ={0xa4, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x1, 0x9, 0x7ff, 0x100, 0x5, 0x5, 0x7fa3]}}, @NL80211_TXRATE_HT={0x34, 0x2, [{0x0, 0x7}, {0x6, 0x4}, {0x6, 0x4}, {0x5, 0x4}, {0x0, 0x7}, {0x3, 0x8}, {0x0, 0x8}, {0x2, 0x2}, {0x7, 0x3}, {0x0, 0x2}, {0x0, 0x6}, {0x0, 0x2}, {0x0, 0x5}, {0x4, 0x5}, {0x6, 0x9}, {0x5, 0x6}, {}, {0x0, 0x2}, {0x7, 0x3}, {0x0, 0x8}, {0x7, 0x6}, {0x4, 0x7}, {}, {0x5, 0x4}, {0x7}, {0x4, 0x9}, {0x2, 0x7}, {0x3, 0x9}, {0x7, 0x2}, {0x7, 0x7}, {0x3, 0x3}, {0x4, 0x5}, {0x2, 0x7}, {0x0, 0x2}, {0x0, 0xa}, {0x1, 0x4}, {0x1, 0x2}, {0x5, 0x7}, {0x6, 0x3}, {0x6, 0xa}, {0x1, 0x8}, {0x0, 0x1}, {0x1, 0x4}, {0x1}, {0x6, 0x1}, {0x6, 0x5}, {0x4, 0x9}, {0x0, 0x4}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x1, 0x1f, 0x100, 0x7ff, 0x7, 0x7f]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x7, 0x81, 0x4, 0x7, 0x3, 0x1ff, 0x606]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x4, 0x2, 0x1b, 0x0, 0xb, 0x36, 0x48, 0x6, 0x16, 0x24, 0x60, 0x2, 0x48, 0x9, 0x1, 0x24, 0x18, 0x5, 0x1b, 0x16, 0x5, 0x6, 0x16, 0x3, 0xb, 0x30, 0x6]}]}, @NL80211_BAND_2GHZ={0xf0, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x0, 0x28, 0x6, 0x3, 0x5, 0x2, 0x2, 0x6, 0x1, 0x1, 0xc, 0x30, 0x1b, 0x6, 0x6c, 0x24, 0xc, 0x1b, 0x12, 0x9, 0x30, 0x24, 0x36, 0x2, 0x1b]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8b, 0x2, 0x81, 0x5, 0x20, 0xe4, 0x4]}}, @NL80211_TXRATE_HT={0x3e, 0x2, [{0x2, 0x1}, {0x3, 0x6}, {0x1, 0x2}, {0x0, 0x5}, {0x1, 0x3}, {0x2, 0x4}, {0x7, 0x3}, {0x5, 0x8}, {0x7, 0xa}, {0x1, 0x8}, {0x5, 0x4}, {0x6, 0xa}, {0x1, 0xa}, {0x3, 0x5}, {0x4}, {0x3, 0x4}, {0x0, 0x4}, {0x0, 0x8}, {0x1, 0x7}, {}, {0x0, 0x3}, {0x6, 0x5}, {0x5, 0x9}, {0x7, 0x1}, {0x0, 0x1}, {0x2, 0x3}, {0x1, 0x6}, {0x7, 0x7}, {0x3, 0x4}, {0x3, 0x3}, {0x6, 0x3}, {0x4, 0xa}, {0x5, 0x6}, {0x0, 0x5}, {0x5, 0x6}, {0x0, 0x9}, {0x0, 0x5}, {0x2, 0x7}, {0x6, 0x5}, {0x4, 0xa}, {0x5, 0x3}, {0x5, 0x1}, {0x1}, {0x2, 0x9}, {}, {0x2, 0xa}, {0x2}, {0x1, 0x5}, {0x1, 0xa}, {0x7, 0x9}, {0x7, 0x3}, {0x4, 0x6}, {0x3, 0x4}, {0x5, 0x5}, {0x7}, {0x1, 0x2}, {0x0, 0x7}, {0x5, 0x8}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xca7, 0x1ff, 0x101, 0x4, 0x200, 0xa5, 0x9, 0x2]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x100, 0x8, 0x1, 0xf46e, 0x0, 0x0, 0x8]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x4, 0x800, 0x7, 0x8001, 0x4, 0x7, 0x6]}}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x0, 0x9}, {0x0, 0x4}, {0x1, 0x4}, {0x4, 0x2}, {0x0, 0x4}, {0x4, 0x1}, {0x5, 0x2}, {0x0, 0x1}, {0x6, 0x5}, {0x7, 0x8}, {0x5, 0x9}, {0x0, 0x4}, {0x1, 0x5}, {0x7, 0x6}, {0x4, 0x7}, {0x7, 0x2}, {0x2, 0x3}, {0x4, 0x7}, {0x5, 0xa}, {0x4, 0xa}, {0x1, 0x4}, {0x0, 0x1}, {0x6, 0x6}, {0x6, 0x3}, {0x1, 0x2}, {0x0, 0xa}, {0x5, 0x7}, {0x3, 0x5}, {0x3, 0x6}, {0x4, 0x8}, {0x5, 0xa}, {0x0, 0x9}, {0x1, 0x2}, {0x2, 0x4}, {0x1, 0x3}, {0x7, 0x2}, {0x5, 0x8}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_60GHZ={0x18, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x3, 0x4, 0xcf, 0x8c4, 0x995, 0x8, 0x2]}}]}]}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x44, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x28, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x5, 0x2, [{0x6, 0x9}]}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x30, 0x61, 0x6, 0x12, 0x36, 0x1, 0x3, 0x60, 0x9, 0xc, 0x36, 0x6, 0x12, 0x4, 0x4, 0x36, 0x48, 0x5, 0xb, 0x1b, 0xc, 0x12]}]}, @NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x13, 0x1, [0x0, 0x0, 0x16, 0x6c, 0x9, 0x3, 0xb, 0x4, 0x5, 0x12, 0x18, 0x4, 0x4, 0x2, 0x6c]}]}]}]}]}, @NL80211_ATTR_TID_CONFIG={0x364, 0x11d, 0x0, 0x1, [{0x2ec, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x38, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x34, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x1, 0x6c, 0x3, 0x60, 0x3, 0x4, 0x1b, 0xb, 0x3a, 0x6, 0x12, 0x30, 0x52, 0x6, 0x36, 0x16, 0x30, 0xb, 0x16, 0x3, 0x6, 0x1b]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x401, 0x3ff, 0x6, 0x0, 0x1, 0x2, 0x5]}}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x288, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x90, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xfbff, 0x9, 0x8, 0x2, 0x46c0, 0x2, 0x8, 0x1]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xf4ed, 0x8, 0x0, 0x7, 0x8, 0x7, 0x7, 0x8]}}, @NL80211_TXRATE_HT={0x37, 0x2, [{0x5, 0x2}, {0x3}, {0x2, 0x4}, {0x2, 0x5}, {0x3, 0xa}, {0x4, 0x9}, {0x3, 0x3}, {0x7, 0x8}, {0x0, 0x8}, {0x7, 0x3}, {0x2, 0x8}, {0x3, 0x8}, {0x7, 0x3}, {0x0, 0x8}, {0x6, 0x3}, {0x4, 0xa}, {0x0, 0x2}, {0x3, 0x2}, {0x3, 0x6}, {0x1, 0x4}, {0x2, 0xa}, {0x4, 0xa}, {0x3, 0x2}, {0x3, 0x2}, {0x5, 0x6}, {0x0, 0x9}, {0x5, 0x9}, {0x5, 0x6}, {0x7, 0x2}, {0x3, 0x7}, {0x6, 0xa}, {0x2, 0x1}, {0x5, 0x4}, {0x6, 0x4}, {0x0, 0xa}, {0x7, 0x5}, {0x4, 0x7}, {0x4, 0x2}, {0x7, 0x7}, {0x1, 0xa}, {0x4, 0x9}, {0x6, 0x2}, {0x1, 0x1}, {0x0, 0x7}, {0x6, 0xa}, {0x7, 0xa}, {0x2}, {0x2, 0x7}, {}, {0x6, 0x6}, {0x7, 0x9}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x1a, 0x2, [{0x5, 0xa}, {0x0, 0x4}, {0x5, 0x9}, {0x2, 0x4}, {0x2, 0x5}, {0x2, 0x2}, {0x4, 0x2}, {0x0, 0x9}, {0x4, 0x8}, {0x0, 0xa}, {0x6, 0x1}, {}, {0x0, 0x9}, {0x1}, {0x4, 0x8}, {0x0, 0xa}, {0x5, 0x7}, {0x3, 0x1}, {0x4, 0x3}, {0x1, 0x8}, {0x6, 0x2}, {0x6, 0x8}]}]}, @NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x80, 0x846, 0xdf9, 0x4, 0x3, 0xb62, 0x20, 0xec]}}]}, @NL80211_BAND_2GHZ={0x68, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3ff, 0x20, 0x3e7, 0x8, 0x2, 0x382f, 0x15b, 0xffff]}}, @NL80211_TXRATE_HT={0x2a, 0x2, [{0x3, 0x8}, {0x6, 0x5}, {0x0, 0x7}, {0x0, 0x5}, {0x1, 0x7}, {0x6, 0x2}, {0x6, 0x6}, {0x2, 0x9}, {0x2, 0x1}, {0x4, 0x7}, {0x0, 0x8}, {0x7, 0xa}, {0x0, 0xa}, {0x2, 0x9}, {0x2}, {0x2, 0x3}, {0x2, 0x8}, {0x4, 0x1}, {0x2}, {0x4, 0x5}, {0x1, 0x4}, {0x7, 0xa}, {0x6, 0x6}, {0x0, 0x9}, {0x6, 0x6}, {0x0, 0x5}, {0x2}, {0x0, 0x6}, {0x0, 0x8}, {0x0, 0x7}, {}, {0x5, 0xa}, {0x0, 0x2}, {0x2, 0x3}, {0x3, 0x1}, {0x4, 0x8}, {0x0, 0x8}, {0x4, 0x6}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xffff, 0x8, 0xfc, 0x8, 0x1, 0x8, 0x80, 0x1]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_2GHZ={0xec, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x2d, 0x2, [{0x1, 0x9}, {0x1, 0x1}, {0x0, 0x1}, {0x5, 0x8}, {0x5, 0x5}, {0x1, 0xa}, {0x5, 0x5}, {0x6, 0x8}, {0x4}, {0x1, 0x6}, {}, {0x2, 0x2}, {0x1, 0x2}, {0x6, 0x4}, {0x3, 0x1}, {0x3, 0x6}, {0x1, 0x3}, {0x0, 0x8}, {0x0, 0x9}, {0x0, 0x5}, {0x1, 0x8}, {0x4}, {0x0, 0x6}, {0x6, 0x9}, {0x0, 0x9}, {0x1, 0x1}, {0x7, 0xa}, {0x0, 0x8}, {0x7, 0x1}, {0x7, 0x6}, {0x4, 0x8}, {0x1, 0x2}, {}, {0x6, 0x9}, {0x2, 0x3}, {0x7, 0x5}, {0x0, 0x7}, {0x4, 0x8}, {0x2, 0x8}, {0x7, 0x2}, {0x7, 0x8}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x5, 0xfc3, 0xff80, 0x5, 0x3ff, 0x3300, 0x4]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x6, 0x5, 0x36, 0x48, 0xc, 0x24, 0x6c, 0x24, 0x4, 0xb, 0x6, 0x1, 0x1b, 0xb, 0x18, 0xc, 0x1b, 0x48, 0x6, 0x60, 0x18, 0x6, 0x1, 0x4, 0x16, 0xc, 0xc, 0x3, 0xb, 0x4, 0x4, 0x1]}, @NL80211_TXRATE_HT={0x3b, 0x2, [{0x1, 0xa}, {0x0, 0x6}, {0x5, 0x3}, {0x6, 0x6}, {0x1, 0x2}, {0x3, 0x9}, {0x7, 0x3}, {0x0, 0x2}, {0x5, 0x4}, {0x4, 0x5}, {0x2}, {}, {0x1, 0x8}, {0x2, 0x1}, {0x6, 0x5}, {0x5, 0xa}, {0x6, 0x6}, {0x0, 0x8}, {0x3, 0x4}, {0x7}, {0x4, 0x8}, {0x2, 0x4}, {0x3, 0x9}, {0x5, 0x2}, {0x7}, {0x2, 0x4}, {0x7, 0x5}, {0x2, 0xa}, {0x6, 0x3}, {0x1}, {0x5, 0x3}, {0x1, 0x8}, {0x5, 0x8}, {0x6, 0x6}, {0x7, 0x4}, {0x2, 0x1}, {0x0, 0x4}, {0x3, 0x3}, {0x3, 0x1}, {0x6, 0xa}, {0x1, 0x7}, {0x1, 0x9}, {0x1, 0x6}, {0x0, 0x4}, {0x2, 0x4}, {0x1, 0x4}, {0x1, 0x3}, {0x0, 0xa}, {0x3, 0x3}, {0x0, 0x8}, {0x5, 0x7}, {0x2, 0x5}, {}, {0x2, 0xa}, {0x7, 0x7}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0xfff, 0x9, 0x6, 0x921, 0x7, 0x4, 0x1]}}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0x6, 0x5, 0x0, 0x1, 0xb, 0x12, 0x5, 0xb, 0x36, 0x18, 0x48, 0x3, 0x2, 0x2, 0x48, 0x1, 0x1, 0x3]}]}, @NL80211_BAND_5GHZ={0x7c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0xffff, 0x9, 0xab, 0xc90e, 0x3, 0x4, 0x80]}}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x16, 0xb, 0x18, 0x18, 0xb, 0x12, 0xb, 0xc, 0x30, 0x6, 0xebefe8bed3a473e1, 0x3, 0x6, 0x48, 0x6b, 0x30, 0x9, 0x18, 0x9, 0x1b, 0x1b, 0x5, 0x18, 0xc, 0x6, 0x78]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x18, 0x1b, 0x48, 0x2, 0x6c, 0x6c, 0x1, 0x3, 0x1, 0x2, 0x24, 0x48, 0x16, 0x9, 0x60, 0x1, 0x6, 0x24, 0x24, 0x5, 0x4, 0x3, 0x60, 0x9, 0xc, 0x9, 0x72, 0x39, 0x3, 0xb, 0x1]}, @NL80211_TXRATE_HT={0x10, 0x2, [{0x0, 0x6}, {0x4, 0x8}, {0x3, 0x5}, {0x0, 0x8}, {0x1, 0x7}, {0x0, 0xa}, {0x1, 0x4}, {0x7, 0x7}, {0x4, 0x3}, {0x0, 0x8}, {0x5, 0x4}, {0x1}]}]}]}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x40}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x96}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x8001}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x4c}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x3}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}]}, 0x11e4}}, 0x4004850) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="1000000017010007002e2f664169"], 0x10) 20:20:46 executing program 7: creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="1400e803000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) 20:20:46 executing program 0: creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) pread64(0xffffffffffffffff, &(0x7f0000000400)=""/255, 0xff, 0x7eb9) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x4, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) 20:20:46 executing program 1: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x46842, 0x0) io_setup(0x5, &(0x7f0000000080)) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x8800000) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x5, r3, 0x0) ioctl$BLKTRACESETUP(r0, 0xc048126f, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f00000001c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7}}, './file1\x00'}) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) r5 = syz_io_uring_setup(0x3de4, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000180), &(0x7f0000002a40)) ioctl$BLKTRACESTART(r4, 0x1274, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x882c2, 0x0) fsync(r6) ioctl$FS_IOC_GETFSMAP(r6, 0xc0c0583b, &(0x7f0000000440)={0x0, 0x0, 0x5, 0x0, '\x00', [{0x7, 0x7fff, 0x5, 0xffff, 0x8, 0x401}, {0x9, 0x81, 0xfffe00000000, 0x1000, 0x2}], ['\x00', '\x00', '\x00', '\x00', '\x00']}) io_uring_enter(r5, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$FIGETBSZ(r5, 0x2, &(0x7f0000000240)) 20:20:46 executing program 3: statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f0000000200)=0x6, 0x4) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000340)=ANY=[@ANYBLOB="01080000011270c839284f30e054da4374340020000000000000", @ANYRES32, @ANYBLOB="ffa22106351700002e2f661c696c653000"]) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) pread64(0xffffffffffffffff, &(0x7f0000000400)=""/255, 0xff, 0x7eb9) dup(0xffffffffffffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0), 0x9) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="1405c000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) [ 2999.736060] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2999.740021] RSP: 002b:00007f4deac6e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 2999.741581] RAX: ffffffffffffffda RBX: 00007f4ded80bf60 RCX: 00007f4ded6f8b19 [ 2999.743036] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2999.744499] RBP: 00007f4deac6e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2999.745944] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2999.747394] R13: 00007ffdd13eda0f R14: 00007f4deac6e300 R15: 0000000000022000 20:20:46 executing program 7: creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="1400c005000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) 20:20:46 executing program 4: madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x12) mlock(&(0x7f0000ffb000/0x1000)=nil, 0x1000) fork() (fail_nth: 13) [ 2999.975508] FAULT_INJECTION: forcing a failure. [ 2999.975508] name failslab, interval 1, probability 0, space 0, times 0 [ 2999.978124] CPU: 1 PID: 15857 Comm: syz-executor.4 Not tainted 5.10.194 #1 [ 2999.979533] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2999.981238] Call Trace: [ 2999.981787] dump_stack+0x107/0x167 [ 2999.982544] should_fail.cold+0x5/0xa [ 2999.983326] ? create_object.isra.0+0x3a/0xa20 [ 2999.984281] should_failslab+0x5/0x20 [ 2999.985065] kmem_cache_alloc+0x5b/0x310 [ 2999.985900] create_object.isra.0+0x3a/0xa20 [ 2999.986801] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2999.987846] kmem_cache_alloc_trace+0x151/0x320 [ 2999.988811] alloc_fdtable+0x84/0x280 [ 2999.989594] dup_fd+0x74d/0xcf0 [ 2999.990296] ? security_task_alloc+0xe6/0x260 [ 2999.991226] copy_process+0x197e/0x7800 [ 2999.992044] ? __lock_acquire+0xbb1/0x5b00 [ 2999.992940] ? __cleanup_sighand+0xb0/0xb0 [ 2999.993805] ? lock_acquire+0x197/0x470 [ 2999.994617] ? find_held_lock+0x2c/0x110 [ 2999.995444] kernel_clone+0xe7/0x980 [ 2999.996220] ? lock_downgrade+0x6d0/0x6d0 [ 2999.997060] ? find_held_lock+0x2c/0x110 [ 2999.997884] ? create_io_thread+0xf0/0xf0 20:20:46 executing program 3: statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f0000000200)=0x6, 0x4) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000340)=ANY=[@ANYBLOB="01080000011270c839284f30e054da4374340020000000000000", @ANYRES32, @ANYBLOB="ffa22106351700002e2f661c696c653000"]) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) pread64(0xffffffffffffffff, &(0x7f0000000400)=""/255, 0xff, 0x7eb9) dup(0xffffffffffffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0), 0x9) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="1405e600000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) 20:20:46 executing program 5: r0 = creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) open_by_handle_at(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="5000000000000004000000"], 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f0000000200)=0x6, 0x4) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000200000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) [ 2999.998733] ? ksys_write+0x12d/0x260 [ 2999.999674] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3000.000676] __do_sys_fork+0x8a/0xc0 [ 3000.001432] ? kernel_thread+0xf0/0xf0 [ 3000.002237] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3000.003298] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3000.004344] ? trace_hardirqs_on+0x5b/0x180 [ 3000.005219] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3000.006263] do_syscall_64+0x33/0x40 [ 3000.007022] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 3000.008060] RIP: 0033:0x7f4ded6f8b19 [ 3000.008833] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3000.012555] RSP: 002b:00007f4deac6e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 3000.014096] RAX: ffffffffffffffda RBX: 00007f4ded80bf60 RCX: 00007f4ded6f8b19 [ 3000.015549] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 3000.017011] RBP: 00007f4deac6e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3000.018474] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3000.019917] R13: 00007ffdd13eda0f R14: 00007f4deac6e300 R15: 0000000000022000 20:20:59 executing program 2: sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x0, 0x0) pidfd_send_signal(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xb, 0x5, 0x2000000}, 0x0) clock_gettime(0x0, &(0x7f0000001d40)={0x0, 0x0}) recvmmsg(0xffffffffffffffff, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000540)=""/4096, 0x1000}, {&(0x7f0000000180)=""/108, 0x6c}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000000200)=""/145, 0x91}, {&(0x7f0000000300)=""/114, 0x72}, {&(0x7f0000002e00)=""/4096, 0x1000}, {&(0x7f0000003e00)=""/4096, 0x1000}], 0x7, &(0x7f0000004e00)=""/4096, 0x1000}, 0x2}, {{&(0x7f0000001540)=@nfc_llcp, 0x80, &(0x7f0000001800)=[{&(0x7f00000015c0)=""/131, 0x83}, {&(0x7f0000001680)=""/243, 0xf3}, {&(0x7f0000001780)=""/122, 0x7a}, {&(0x7f0000000400)=""/41, 0x29}, {&(0x7f0000005e00)=""/4096, 0x1000}, {&(0x7f0000006e00)=""/4096, 0x1000}], 0x6, &(0x7f0000001880)=""/236, 0xec}, 0x1}, {{&(0x7f0000001980)=@un=@abs, 0x80, &(0x7f0000001a00), 0x0, &(0x7f0000001a40)=""/67, 0x43}, 0x80000001}, {{&(0x7f0000001ac0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000001b40)=[{&(0x7f0000007e00)=""/4096, 0x1000}, {&(0x7f0000008e00)=""/4096, 0x1000}], 0x2, &(0x7f0000001b80)=""/174, 0xae}, 0x20}], 0x4, 0x0, &(0x7f0000009e00)={r0, r1+10000000}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x48, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x2c, 0xe, {@with_ht={{{}, {}, @broadcast, @broadcast, @random="dd0b7470fe16"}}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}]]}, 0x48}}, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000009f80)={&(0x7f0000009e40)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000009f40)={&(0x7f0000009fc0)=ANY=[@ANYBLOB="94000000", @ANYRES16=r4, @ANYBLOB="100029bd7000fedbdf251300000008000300", @ANYRES32=0x0, @ANYBLOB="06001401000000000600ab00020000001b001300898b8c3009a41b1685821b9b89b06c3b0c6c000500e4000000000006001a01030000003c0081000500020006000000051bcb000100010000000500010005000000050001009f0000000500010003000000050001000800000005000100060000000000000000"], 0x94}, 0x1, 0x0, 0x0, 0x20008001}, 0x10044800) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file2\x00', 0x0, 0x127) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, 0x0, 0x800, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x1f}}}}, [@NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x20048000}, 0x0) r5 = creat(&(0x7f0000000080)='./file0\x00', 0x0) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r5, &(0x7f0000000440)={0x60000019}) syz_genetlink_get_family_id$tipc(&(0x7f0000000140), r5) 20:20:59 executing program 1: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x46842, 0x0) io_setup(0x5, &(0x7f0000000080)) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x8800000) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x5, r3, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481270, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f00000001c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7}}, './file1\x00'}) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) r5 = syz_io_uring_setup(0x3de4, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000180), &(0x7f0000002a40)) ioctl$BLKTRACESTART(r4, 0x1274, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x882c2, 0x0) fsync(r6) ioctl$FS_IOC_GETFSMAP(r6, 0xc0c0583b, &(0x7f0000000440)={0x0, 0x0, 0x5, 0x0, '\x00', [{0x7, 0x7fff, 0x5, 0xffff, 0x8, 0x401}, {0x9, 0x81, 0xfffe00000000, 0x1000, 0x2}], ['\x00', '\x00', '\x00', '\x00', '\x00']}) io_uring_enter(r5, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$FIGETBSZ(r5, 0x2, &(0x7f0000000240)) 20:20:59 executing program 3: statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f0000000200)=0x6, 0x4) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000340)=ANY=[@ANYBLOB="01080000011270c839284f30e054da4374340020000000000000", @ANYRES32, @ANYBLOB="ffa22106351700002e2f661c696c653000"]) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) pread64(0xffffffffffffffff, &(0x7f0000000400)=""/255, 0xff, 0x7eb9) dup(0xffffffffffffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0), 0x9) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="1402e700000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) 20:20:59 executing program 6: sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x8) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x0, 0x0) pidfd_send_signal(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xb, 0x5, 0x2000000}, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f00000002c0)='./file2\x00', 0x40080, 0x127) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="300000002800d5c43007168c391fa1b0071c0d22219a5b351e01273780f355db33acfe29bf13d17a82df14512151b32948a91b47a21f43bec72403ceabb3dc71690edc7e46b60f95d4484d01930cd0ce36df02a03ba07de135aff6f9a0c37d02023ef3a8d7581e4c8b8c99e61b0ae63673a5be79a1f3a378a3d67ed52e29932164bf96adc46e2dd5e768ded92334d4", @ANYRES16=0x0, @ANYBLOB="000825bd7000ff06df254400000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900000000001f00000008000d00feffffff"], 0x30}, 0x1, 0x0, 0x0, 0x20048000}, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {0xfffffffffffffffe}}, './file2\x00'}) syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="1000000017010007002e6f664169"], 0x10) 20:20:59 executing program 7: creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="1400e605000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) 20:20:59 executing program 5: r0 = creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) open_by_handle_at(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="5000000000000004000000"], 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f0000000200)=0x6, 0x4) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000600000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) 20:20:59 executing program 4: madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x12) mlock(&(0x7f0000ffb000/0x1000)=nil, 0x1000) fork() (fail_nth: 14) 20:20:59 executing program 0: creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) pread64(0xffffffffffffffff, &(0x7f0000000400)=""/255, 0xff, 0x7eb9) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x8, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) [ 3013.120782] FAULT_INJECTION: forcing a failure. [ 3013.120782] name failslab, interval 1, probability 0, space 0, times 0 [ 3013.122151] CPU: 0 PID: 15893 Comm: syz-executor.4 Not tainted 5.10.194 #1 [ 3013.122987] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3013.123910] Call Trace: [ 3013.124228] dump_stack+0x107/0x167 [ 3013.124676] should_fail.cold+0x5/0xa [ 3013.125138] ? kvmalloc_node+0x119/0x170 [ 3013.125631] should_failslab+0x5/0x20 [ 3013.126088] __kmalloc_node+0x76/0x420 [ 3013.126559] kvmalloc_node+0x119/0x170 [ 3013.127027] alloc_fdtable+0xd3/0x280 [ 3013.127491] dup_fd+0x74d/0xcf0 [ 3013.127861] ? security_task_alloc+0xe6/0x260 [ 3013.128403] copy_process+0x197e/0x7800 [ 3013.128883] ? __lock_acquire+0xbb1/0x5b00 [ 3013.129405] ? __cleanup_sighand+0xb0/0xb0 [ 3013.129918] ? lock_acquire+0x197/0x470 [ 3013.130395] ? find_held_lock+0x2c/0x110 [ 3013.130887] kernel_clone+0xe7/0x980 [ 3013.131303] ? lock_downgrade+0x6d0/0x6d0 [ 3013.131801] ? find_held_lock+0x2c/0x110 [ 3013.132285] ? create_io_thread+0xf0/0xf0 [ 3013.132799] ? ksys_write+0x12d/0x260 [ 3013.133253] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3013.133837] __do_sys_fork+0x8a/0xc0 [ 3013.134278] ? kernel_thread+0xf0/0xf0 [ 3013.134754] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3013.135386] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3013.135945] ? trace_hardirqs_on+0x5b/0x180 [ 3013.136473] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3013.137093] do_syscall_64+0x33/0x40 [ 3013.137537] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 3013.138154] RIP: 0033:0x7f4ded6f8b19 [ 3013.138597] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3013.140810] RSP: 002b:00007f4deac6e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 3013.141722] RAX: ffffffffffffffda RBX: 00007f4ded80bf60 RCX: 00007f4ded6f8b19 [ 3013.142487] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 3013.143336] RBP: 00007f4deac6e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3013.144104] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3013.144958] R13: 00007ffdd13eda0f R14: 00007f4deac6e300 R15: 0000000000022000 20:20:59 executing program 1: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x46842, 0x0) io_setup(0x5, &(0x7f0000000080)) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x8800000) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x5, r3, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481275, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f00000001c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7}}, './file1\x00'}) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) r5 = syz_io_uring_setup(0x3de4, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000180), &(0x7f0000002a40)) ioctl$BLKTRACESTART(r4, 0x1274, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x882c2, 0x0) fsync(r6) ioctl$FS_IOC_GETFSMAP(r6, 0xc0c0583b, &(0x7f0000000440)={0x0, 0x0, 0x5, 0x0, '\x00', [{0x7, 0x7fff, 0x5, 0xffff, 0x8, 0x401}, {0x9, 0x81, 0xfffe00000000, 0x1000, 0x2}], ['\x00', '\x00', '\x00', '\x00', '\x00']}) io_uring_enter(r5, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$FIGETBSZ(r5, 0x2, &(0x7f0000000240)) 20:20:59 executing program 0: creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) pread64(0xffffffffffffffff, &(0x7f0000000400)=""/255, 0xff, 0x7eb9) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x10, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) 20:20:59 executing program 5: r0 = creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) open_by_handle_at(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="5000000000000004000000"], 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f0000000200)=0x6, 0x4) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14ffffff970000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) 20:20:59 executing program 7: creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="1400000a000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) 20:20:59 executing program 6: sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x8) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x0, 0x0) pidfd_send_signal(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xb, 0x5, 0x2000000}, 0x0) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file2\x00', 0x40080, 0x127) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, 0x0, 0x800, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x1f}}}}, [@NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0xfffffffe}]}, 0x30}, 0x1, 0x0, 0x0, 0x20048000}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="1000000017010007002e2f664169"], 0x10) 20:20:59 executing program 3: statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f0000000200)=0x6, 0x4) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000340)=ANY=[@ANYBLOB="01080000011270c839284f30e054da4374340020000000000000", @ANYRES32, @ANYBLOB="ffa22106351700002e2f661c696c653000"]) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) pread64(0xffffffffffffffff, &(0x7f0000000400)=""/255, 0xff, 0x7eb9) dup(0xffffffffffffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0), 0x9) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="1403e800000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) 20:20:59 executing program 5: r0 = creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) open_by_handle_at(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="5000000000000004000000"], 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f0000000200)=0x6, 0x4) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000005c00000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) 20:20:59 executing program 2: sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pidfd_send_signal(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xb, 0x5, 0x2000000}, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f00000002c0)='./file2\x00', 0x0, 0x127) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000825bd7000ffdbdf254400000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900000002000000000000000d00000026de"], 0x30}, 0x1, 0x0, 0x0, 0x20048000}, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r1, &(0x7f0000000440)={0x60000019}) syz_genetlink_get_family_id$tipc(&(0x7f0000000140), r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x88, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x88}, 0x1, 0x0, 0x0, 0x20000000}, 0x40045) 20:20:59 executing program 0: creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) pread64(0xffffffffffffffff, &(0x7f0000000400)=""/255, 0xff, 0x7eb9) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x500, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) 20:20:59 executing program 1: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x46842, 0x0) io_setup(0x5, &(0x7f0000000080)) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x8800000) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x5, r3, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481278, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f00000001c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7}}, './file1\x00'}) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) r5 = syz_io_uring_setup(0x3de4, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000180), &(0x7f0000002a40)) ioctl$BLKTRACESTART(r4, 0x1274, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x882c2, 0x0) fsync(r6) ioctl$FS_IOC_GETFSMAP(r6, 0xc0c0583b, &(0x7f0000000440)={0x0, 0x0, 0x5, 0x0, '\x00', [{0x7, 0x7fff, 0x5, 0xffff, 0x8, 0x401}, {0x9, 0x81, 0xfffe00000000, 0x1000, 0x2}], ['\x00', '\x00', '\x00', '\x00', '\x00']}) io_uring_enter(r5, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$FIGETBSZ(r5, 0x2, &(0x7f0000000240)) 20:20:59 executing program 7: creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="1400030d000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) 20:21:00 executing program 4: madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x12) mlock(&(0x7f0000ffb000/0x1000)=nil, 0x1000) fork() (fail_nth: 15) 20:21:00 executing program 0: creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) pread64(0xffffffffffffffff, &(0x7f0000000400)=""/255, 0xff, 0x7eb9) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x19502, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) [ 3013.460503] FAULT_INJECTION: forcing a failure. [ 3013.460503] name failslab, interval 1, probability 0, space 0, times 0 [ 3013.462817] CPU: 1 PID: 15945 Comm: syz-executor.4 Not tainted 5.10.194 #1 [ 3013.464208] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3013.465884] Call Trace: [ 3013.466426] dump_stack+0x107/0x167 [ 3013.467168] should_fail.cold+0x5/0xa [ 3013.467942] ? create_object.isra.0+0x3a/0xa20 [ 3013.468885] should_failslab+0x5/0x20 [ 3013.469657] kmem_cache_alloc+0x5b/0x310 [ 3013.470481] create_object.isra.0+0x3a/0xa20 [ 3013.471365] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3013.472420] __kmalloc_node+0x1ae/0x420 [ 3013.473233] kvmalloc_node+0x119/0x170 [ 3013.474026] alloc_fdtable+0xd3/0x280 [ 3013.474796] dup_fd+0x74d/0xcf0 [ 3013.475485] ? security_task_alloc+0xe6/0x260 [ 3013.476411] copy_process+0x197e/0x7800 [ 3013.477219] ? __lock_acquire+0xbb1/0x5b00 [ 3013.478112] ? __cleanup_sighand+0xb0/0xb0 [ 3013.478969] ? lock_acquire+0x197/0x470 [ 3013.479781] ? find_held_lock+0x2c/0x110 [ 3013.480619] kernel_clone+0xe7/0x980 [ 3013.481374] ? lock_downgrade+0x6d0/0x6d0 [ 3013.482220] ? find_held_lock+0x2c/0x110 [ 3013.483041] ? create_io_thread+0xf0/0xf0 [ 3013.483898] ? ksys_write+0x12d/0x260 [ 3013.484684] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3013.485665] __do_sys_fork+0x8a/0xc0 [ 3013.486427] ? kernel_thread+0xf0/0xf0 [ 3013.487237] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3013.488299] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3013.489354] ? trace_hardirqs_on+0x5b/0x180 [ 3013.490231] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3013.491272] do_syscall_64+0x33/0x40 [ 3013.492026] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 3013.493081] RIP: 0033:0x7f4ded6f8b19 [ 3013.493835] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3013.497543] RSP: 002b:00007f4deac6e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 3013.499073] RAX: ffffffffffffffda RBX: 00007f4ded80bf60 RCX: 00007f4ded6f8b19 [ 3013.500518] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 3013.501948] RBP: 00007f4deac6e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3013.503377] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3013.504823] R13: 00007ffdd13eda0f R14: 00007f4deac6e300 R15: 0000000000022000 20:21:13 executing program 4: madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x12) mlock(&(0x7f0000ffb000/0x1000)=nil, 0x1000) fork() (fail_nth: 16) 20:21:13 executing program 5: r0 = creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) open_by_handle_at(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="5000000000000004000000"], 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f0000000200)=0x6, 0x4) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000005e60000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) 20:21:13 executing program 2: sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL802154_CMD_SET_TX_POWER(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x0, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@NL802154_ATTR_TX_POWER={0x8, 0xb, 0xfffffffe}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0x4}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x4000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x0, 0x0) pidfd_send_signal(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xb, 0x5, 0x2000000}, 0x0) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file2\x00', 0x0, 0x127) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, 0x0, 0x800, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x1f}}}}, [@NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x20048000}, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r0, &(0x7f0000000440)={0x60000019}) syz_genetlink_get_family_id$tipc(&(0x7f0000000140), r0) 20:21:13 executing program 1: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x46842, 0x0) io_setup(0x5, &(0x7f0000000080)) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x8800000) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x5, r3, 0x0) ioctl$BLKTRACESETUP(r0, 0xc04812ba, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f00000001c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7}}, './file1\x00'}) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) r5 = syz_io_uring_setup(0x3de4, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000180), &(0x7f0000002a40)) ioctl$BLKTRACESTART(r4, 0x1274, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x882c2, 0x0) fsync(r6) ioctl$FS_IOC_GETFSMAP(r6, 0xc0c0583b, &(0x7f0000000440)={0x0, 0x0, 0x5, 0x0, '\x00', [{0x7, 0x7fff, 0x5, 0xffff, 0x8, 0x401}, {0x9, 0x81, 0xfffe00000000, 0x1000, 0x2}], ['\x00', '\x00', '\x00', '\x00', '\x00']}) io_uring_enter(r5, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$FIGETBSZ(r5, 0x2, &(0x7f0000000240)) 20:21:13 executing program 3: statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f0000000200)=0x6, 0x4) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000340)=ANY=[@ANYBLOB="01080000011270c839284f30e054da4374340020000000000000", @ANYRES32, @ANYBLOB="ffa22106351700002e2f661c696c653000"]) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) pread64(0xffffffffffffffff, &(0x7f0000000400)=""/255, 0xff, 0x7eb9) dup(0xffffffffffffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0), 0x9) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="1401f400000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) 20:21:13 executing program 7: creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="1400000e000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) 20:21:13 executing program 0: creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) pread64(0xffffffffffffffff, &(0x7f0000000400)=""/255, 0xff, 0x7eb9) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x68000, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) 20:21:13 executing program 6: sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x8) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x0, 0x0) pidfd_send_signal(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xb, 0x5, 0x2000000}, 0x0) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file2\x00', 0x40080, 0x127) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, 0x0, 0x800, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x1f}}}}, [@NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0xfffffffe}]}, 0x30}, 0x1, 0x0, 0x0, 0x20048000}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="1000000017010007002e2f664169"], 0x10) socket$inet6_udp(0xa, 0x2, 0x0) [ 3027.197836] FAULT_INJECTION: forcing a failure. [ 3027.197836] name failslab, interval 1, probability 0, space 0, times 0 [ 3027.199109] CPU: 0 PID: 15970 Comm: syz-executor.4 Not tainted 5.10.194 #1 [ 3027.199860] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3027.200780] Call Trace: [ 3027.201086] dump_stack+0x107/0x167 [ 3027.201491] should_fail.cold+0x5/0xa [ 3027.201923] ? kvmalloc_node+0x119/0x170 [ 3027.202383] should_failslab+0x5/0x20 [ 3027.202838] __kmalloc_node+0x76/0x420 [ 3027.203295] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3027.203869] kvmalloc_node+0x119/0x170 [ 3027.204315] alloc_fdtable+0x13f/0x280 [ 3027.204769] dup_fd+0x74d/0xcf0 [ 3027.205155] ? security_task_alloc+0xe6/0x260 [ 3027.205678] copy_process+0x197e/0x7800 [ 3027.206148] ? __lock_acquire+0xbb1/0x5b00 [ 3027.206663] ? __cleanup_sighand+0xb0/0xb0 [ 3027.207144] ? lock_acquire+0x197/0x470 [ 3027.207603] ? find_held_lock+0x2c/0x110 [ 3027.208065] kernel_clone+0xe7/0x980 [ 3027.208509] ? lock_downgrade+0x6d0/0x6d0 [ 3027.208967] ? find_held_lock+0x2c/0x110 [ 3027.209444] ? create_io_thread+0xf0/0xf0 [ 3027.209936] ? ksys_write+0x12d/0x260 [ 3027.210394] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3027.210970] __do_sys_fork+0x8a/0xc0 [ 3027.211414] ? kernel_thread+0xf0/0xf0 [ 3027.211881] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3027.212460] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3027.213032] ? trace_hardirqs_on+0x5b/0x180 [ 3027.213522] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3027.214143] do_syscall_64+0x33/0x40 [ 3027.214555] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 3027.215136] RIP: 0033:0x7f4ded6f8b19 [ 3027.215551] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3027.217576] RSP: 002b:00007f4deac6e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 3027.218401] RAX: ffffffffffffffda RBX: 00007f4ded80bf60 RCX: 00007f4ded6f8b19 [ 3027.219181] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 3027.219966] RBP: 00007f4deac6e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3027.220771] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3027.221563] R13: 00007ffdd13eda0f R14: 00007f4deac6e300 R15: 0000000000022000 20:21:13 executing program 5: r0 = creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) open_by_handle_at(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="5000000000000004000000"], 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f0000000200)=0x6, 0x4) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000002e70000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) 20:21:13 executing program 0: creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) pread64(0xffffffffffffffff, &(0x7f0000000400)=""/255, 0xff, 0x7eb9) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x80000, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) 20:21:13 executing program 1: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x46842, 0x0) io_setup(0x5, &(0x7f0000000080)) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x8800000) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x5, r3, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f00000001c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7}}, './file1\x00'}) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) r5 = syz_io_uring_setup(0x3de4, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000180), &(0x7f0000002a40)) ioctl$BLKTRACESTART(r4, 0x1274, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x882c2, 0x0) fsync(r6) ioctl$FS_IOC_GETFSMAP(r6, 0xc0c0583b, &(0x7f0000000440)={0x0, 0x0, 0x5, 0x0, '\x00', [{0x7, 0x7fff, 0x5, 0xffff, 0x8, 0x401}, {0x9, 0x81, 0xfffe00000000, 0x1000, 0x2}], ['\x00', '\x00', '\x00', '\x00', '\x00']}) io_uring_enter(r5, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$FIGETBSZ(r5, 0x2, &(0x7f0000000240)) 20:21:13 executing program 3: statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f0000000200)=0x6, 0x4) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000340)=ANY=[@ANYBLOB="01080000011270c839284f30e054da4374340020000000000000", @ANYRES32, @ANYBLOB="ffa22106351700002e2f661c696c653000"]) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) pread64(0xffffffffffffffff, &(0x7f0000000400)=""/255, 0xff, 0x7eb9) dup(0xffffffffffffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0), 0x9) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="1400fd00000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) 20:21:13 executing program 4: madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x12) mlock(&(0x7f0000ffb000/0x1000)=nil, 0x1000) fork() (fail_nth: 17) 20:21:13 executing program 7: creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000060000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) [ 3027.398654] FAULT_INJECTION: forcing a failure. [ 3027.398654] name failslab, interval 1, probability 0, space 0, times 0 [ 3027.400003] CPU: 0 PID: 15998 Comm: syz-executor.4 Not tainted 5.10.194 #1 [ 3027.400753] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3027.401664] Call Trace: [ 3027.401960] dump_stack+0x107/0x167 [ 3027.402351] should_fail.cold+0x5/0xa [ 3027.402782] ? create_object.isra.0+0x3a/0xa20 [ 3027.403269] should_failslab+0x5/0x20 [ 3027.403673] kmem_cache_alloc+0x5b/0x310 [ 3027.404117] create_object.isra.0+0x3a/0xa20 [ 3027.404616] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3027.405165] __kmalloc_node+0x1ae/0x420 [ 3027.405605] kvmalloc_node+0x119/0x170 [ 3027.406023] alloc_fdtable+0x13f/0x280 [ 3027.406450] dup_fd+0x74d/0xcf0 [ 3027.406814] ? security_task_alloc+0xe6/0x260 [ 3027.407302] copy_process+0x197e/0x7800 [ 3027.407737] ? __lock_acquire+0xbb1/0x5b00 [ 3027.408205] ? __cleanup_sighand+0xb0/0xb0 [ 3027.408678] ? lock_acquire+0x197/0x470 [ 3027.409110] ? find_held_lock+0x2c/0x110 [ 3027.409549] kernel_clone+0xe7/0x980 [ 3027.409950] ? lock_downgrade+0x6d0/0x6d0 [ 3027.410389] ? find_held_lock+0x2c/0x110 [ 3027.410832] ? create_io_thread+0xf0/0xf0 [ 3027.411279] ? ksys_write+0x12d/0x260 [ 3027.411703] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3027.412223] __do_sys_fork+0x8a/0xc0 [ 3027.412636] ? kernel_thread+0xf0/0xf0 [ 3027.413078] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3027.413634] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3027.414194] ? trace_hardirqs_on+0x5b/0x180 [ 3027.414664] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3027.415227] do_syscall_64+0x33/0x40 [ 3027.415632] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 3027.416183] RIP: 0033:0x7f4ded6f8b19 [ 3027.416587] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3027.418538] RSP: 002b:00007f4deac6e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 3027.419344] RAX: ffffffffffffffda RBX: 00007f4ded80bf60 RCX: 00007f4ded6f8b19 [ 3027.420109] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 3027.420874] RBP: 00007f4deac6e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3027.421627] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3027.422385] R13: 00007ffdd13eda0f R14: 00007f4deac6e300 R15: 0000000000022000 20:21:28 executing program 3: statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f0000000200)=0x6, 0x4) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000340)=ANY=[@ANYBLOB="01080000011270c839284f30e054da4374340020000000000000", @ANYRES32, @ANYBLOB="ffa22106351700002e2f661c696c653000"]) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) pread64(0xffffffffffffffff, &(0x7f0000000400)=""/255, 0xff, 0x7eb9) dup(0xffffffffffffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0), 0x9) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000008000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) 20:21:28 executing program 0: creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) pread64(0xffffffffffffffff, &(0x7f0000000400)=""/255, 0xff, 0x7eb9) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="0f000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) 20:21:28 executing program 1: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x46842, 0x0) io_setup(0x5, &(0x7f0000000080)) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x8800000) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x5, r3, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x2, 0x100, 0xb91}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f00000001c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7}}, './file1\x00'}) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) r5 = syz_io_uring_setup(0x3de4, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000180), &(0x7f0000002a40)) ioctl$BLKTRACESTART(r4, 0x1274, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x882c2, 0x0) fsync(r6) ioctl$FS_IOC_GETFSMAP(r6, 0xc0c0583b, &(0x7f0000000440)={0x0, 0x0, 0x5, 0x0, '\x00', [{0x7, 0x7fff, 0x5, 0xffff, 0x8, 0x401}, {0x9, 0x81, 0xfffe00000000, 0x1000, 0x2}], ['\x00', '\x00', '\x00', '\x00', '\x00']}) io_uring_enter(r5, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$FIGETBSZ(r5, 0x2, &(0x7f0000000240)) [ 3041.522655] FAULT_INJECTION: forcing a failure. [ 3041.522655] name failslab, interval 1, probability 0, space 0, times 0 [ 3041.523904] CPU: 0 PID: 16021 Comm: syz-executor.4 Not tainted 5.10.194 #1 [ 3041.524648] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3041.525562] Call Trace: [ 3041.525861] dump_stack+0x107/0x167 [ 3041.526262] should_fail.cold+0x5/0xa [ 3041.526687] ? copy_fs_struct+0x45/0x340 [ 3041.527134] should_failslab+0x5/0x20 [ 3041.527548] kmem_cache_alloc+0x5b/0x310 [ 3041.528131] copy_fs_struct+0x45/0x340 [ 3041.528564] copy_process+0x3435/0x7800 [ 3041.529007] ? __lock_acquire+0xbb1/0x5b00 [ 3041.529482] ? __cleanup_sighand+0xb0/0xb0 [ 3041.529940] ? lock_acquire+0x197/0x470 [ 3041.530377] ? find_held_lock+0x2c/0x110 [ 3041.530823] kernel_clone+0xe7/0x980 [ 3041.531223] ? lock_downgrade+0x6d0/0x6d0 [ 3041.531674] ? find_held_lock+0x2c/0x110 [ 3041.532114] ? create_io_thread+0xf0/0xf0 [ 3041.532571] ? ksys_write+0x12d/0x260 [ 3041.532994] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3041.533516] __do_sys_fork+0x8a/0xc0 [ 3041.533919] ? kernel_thread+0xf0/0xf0 [ 3041.534346] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3041.534914] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3041.535466] ? trace_hardirqs_on+0x5b/0x180 [ 3041.535935] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3041.536493] do_syscall_64+0x33/0x40 [ 3041.536915] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 3041.537467] RIP: 0033:0x7f4ded6f8b19 [ 3041.537870] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3041.539857] RSP: 002b:00007f4deac6e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 3041.540684] RAX: ffffffffffffffda RBX: 00007f4ded80bf60 RCX: 00007f4ded6f8b19 [ 3041.541471] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 3041.542232] RBP: 00007f4deac6e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3041.543001] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3041.543788] R13: 00007ffdd13eda0f R14: 00007f4deac6e300 R15: 0000000000022000 20:21:28 executing program 7: creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="140005c0000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) 20:21:28 executing program 5: r0 = creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) open_by_handle_at(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="5000000000000004000000"], 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f0000000200)=0x6, 0x4) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000003e80000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) 20:21:28 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x0, 0x0) pidfd_send_signal(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xb, 0x5, 0x2000000}, 0x0) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file2\x00', 0x0, 0x127) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) write(r1, &(0x7f0000000300)="afa57846f39d360d19991ba6205462", 0xf) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000825bd7000ffdbdf254400000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900000000001f00000008000d000000f2a2"], 0x30}, 0x1, 0x0, 0x0, 0x20048000}, 0x0) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r2, &(0x7f0000000440)={0x60000019}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r2, 0xc0189372, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) getsockname(r3, &(0x7f00000001c0)=@sco={0x1f, @fixed}, &(0x7f0000000240)=0x80) syz_genetlink_get_family_id$tipc(&(0x7f0000000140), r2) open(&(0x7f0000000280)='.\x00', 0x420001, 0x72) 20:21:28 executing program 6: sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x8) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x0, 0x0) pidfd_send_signal(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xb, 0x5, 0x2000000}, 0x0) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file2\x00', 0x40080, 0x80) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000540)={0x88, 0x0, 0x800, 0x70bd24, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TX_RATES={0x6c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x64, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x4f, 0x2, [{0x5}, {0x5, 0x7}, {0x4, 0x5}, {0x2, 0x1}, {0x2, 0x7}, {0x7, 0x3}, {0x0, 0x7}, {0x4, 0x7}, {0x4, 0x5}, {0x4, 0x6}, {0x7, 0xa}, {0x6, 0x9}, {0x3, 0x8}, {0x4, 0x8}, {0x5, 0x4}, {0x1}, {0x1, 0x2}, {0x1, 0x4}, {0x3, 0x3}, {0x2, 0x8}, {0x4, 0x3}, {0x4, 0x9}, {0x4, 0x5}, {0x5, 0x6}, {0x3, 0x2}, {0x1, 0x5}, {0x4, 0x8}, {0x0, 0x7}, {}, {0x7}, {0x0, 0xa}, {0x3, 0x3}, {0x2, 0xa}, {0x3, 0x1}, {0x6, 0x6}, {0x5, 0x7}, {0x2, 0x9}, {0x1, 0x5}, {0x6, 0x7}, {0x1, 0x1}, {0x7, 0x2}, {0x4, 0x8}, {0x0, 0x9}, {0x1, 0xa}, {0x0, 0x9}, {0x4, 0x3}, {0x5, 0x1}, {0x1, 0x7}, {0x3, 0x9}, {0x7, 0x1}, {0x5, 0x2}, {0x1, 0x1}, {0x0, 0xa}, {0x4, 0x9}, {0x5, 0x6}, {0x0, 0x8}, {0x3, 0x9}, {0x7, 0x5}, {0x1, 0x4}, {0x5, 0x3}, {0x5, 0x7}, {0x5, 0x6}, {0x3}, {0x3, 0x7}, {0x3, 0x3}, {0x1, 0x3}, {0x6, 0x5}, {0x4, 0x2}, {0x6, 0x4}, {0x6, 0x1}, {0x6, 0xa}, {0x2, 0x6}, {0x1, 0x2}, {0x0, 0x9}, {0x0, 0x5}]}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_60GHZ={0x4}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x20048000}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="1000000017010007002e2f664169"], 0x10) 20:21:28 executing program 4: madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x12) mlock(&(0x7f0000ffb000/0x1000)=nil, 0x1000) fork() (fail_nth: 18) 20:21:28 executing program 3: statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f0000000200)=0x6, 0x4) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000340)=ANY=[@ANYBLOB="01080000011270c839284f30e054da4374340020000000000000", @ANYRES32, @ANYBLOB="ffa22106351700002e2f661c696c653000"]) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) pread64(0xffffffffffffffff, &(0x7f0000000400)=""/255, 0xff, 0x7eb9) dup(0xffffffffffffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0), 0x9) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000010000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) 20:21:28 executing program 0: creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) pread64(0xffffffffffffffff, &(0x7f0000000400)=""/255, 0xff, 0x7eb9) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="38000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) 20:21:28 executing program 7: creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="140005e6000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) 20:21:28 executing program 4: madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x12) mlock(&(0x7f0000ffb000/0x1000)=nil, 0x1000) fork() (fail_nth: 19) 20:21:28 executing program 0: creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) pread64(0xffffffffffffffff, &(0x7f0000000400)=""/255, 0xff, 0x7eb9) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14020000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) 20:21:28 executing program 3: statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f0000000200)=0x6, 0x4) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000340)=ANY=[@ANYBLOB="01080000011270c839284f30e054da4374340020000000000000", @ANYRES32, @ANYBLOB="ffa22106351700002e2f661c696c653000"]) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) pread64(0xffffffffffffffff, &(0x7f0000000400)=""/255, 0xff, 0x7eb9) dup(0xffffffffffffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0), 0x9) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000020000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) 20:21:28 executing program 5: r0 = creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) open_by_handle_at(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="5000000000000004000000"], 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f0000000200)=0x6, 0x4) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000001f40000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) [ 3041.699109] FAULT_INJECTION: forcing a failure. [ 3041.699109] name failslab, interval 1, probability 0, space 0, times 0 [ 3041.700323] CPU: 0 PID: 16046 Comm: syz-executor.4 Not tainted 5.10.194 #1 [ 3041.701043] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3041.701895] Call Trace: [ 3041.702179] dump_stack+0x107/0x167 [ 3041.702560] should_fail.cold+0x5/0xa [ 3041.702963] ? create_object.isra.0+0x3a/0xa20 [ 3041.703438] should_failslab+0x5/0x20 [ 3041.703834] kmem_cache_alloc+0x5b/0x310 [ 3041.704259] create_object.isra.0+0x3a/0xa20 [ 3041.704729] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3041.705263] kmem_cache_alloc+0x159/0x310 [ 3041.705696] copy_fs_struct+0x45/0x340 [ 3041.706103] copy_process+0x3435/0x7800 [ 3041.706517] ? __lock_acquire+0xbb1/0x5b00 [ 3041.706973] ? __cleanup_sighand+0xb0/0xb0 [ 3041.707412] ? lock_acquire+0x197/0x470 [ 3041.707831] ? find_held_lock+0x2c/0x110 [ 3041.708255] kernel_clone+0xe7/0x980 [ 3041.708641] ? lock_downgrade+0x6d0/0x6d0 [ 3041.709080] ? find_held_lock+0x2c/0x110 [ 3041.709500] ? create_io_thread+0xf0/0xf0 [ 3041.709941] ? ksys_write+0x12d/0x260 [ 3041.710341] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3041.710844] __do_sys_fork+0x8a/0xc0 [ 3041.711231] ? kernel_thread+0xf0/0xf0 [ 3041.711645] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3041.712187] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3041.712735] ? trace_hardirqs_on+0x5b/0x180 [ 3041.713183] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3041.713728] do_syscall_64+0x33/0x40 [ 3041.714114] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 3041.714645] RIP: 0033:0x7f4ded6f8b19 [ 3041.715032] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3041.716933] RSP: 002b:00007f4deac6e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 3041.717713] RAX: ffffffffffffffda RBX: 00007f4ded80bf60 RCX: 00007f4ded6f8b19 [ 3041.718461] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 3041.719200] RBP: 00007f4deac6e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3041.719937] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3041.720671] R13: 00007ffdd13eda0f R14: 00007f4deac6e300 R15: 0000000000022000 20:21:28 executing program 6: sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x8) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x0, 0x0) pidfd_send_signal(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xb, 0x5, 0x2000000}, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f00000002c0)='./file2\x00', 0x40080, 0x127) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, 0x0, 0x800, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x1f}}}}, [@NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0xfffffffe}]}, 0x30}, 0x1, 0x0, 0x0, 0x20048000}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)={0xd8, r2, 0x200, 0x70bd27, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x8, 0x1a}}}}, [@NL80211_ATTR_SCHED_SCAN_MATCH={0xa4, 0x84, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x10000}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x1c, 0x6, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x8, 0x1, 0x80}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x4}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x6}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x1}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x4c, 0x6, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x8, 0x1, 0x80}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x400}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x7}, @NL80211_BAND_6GHZ={0x8, 0x3, 0xfffffd77}, @NL80211_BAND_6GHZ={0x8, 0x3, 0xfffff000}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x9}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x7fff}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x81}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x7}]}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x1c, 0x6, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x8, 0x0, 0x3}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x9}, @NL80211_BAND_60GHZ={0x8}]}]}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x8}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0xd8}, 0x1, 0x0, 0x0, 0x20040080}, 0x40000) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="1000000017010007002e2f664169"], 0x10) 20:21:28 executing program 7: creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="140002e7000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) 20:21:28 executing program 1: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x46842, 0x0) io_setup(0x5, &(0x7f0000000080)) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x8800000) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x5, r3, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x8, 0x100, 0xb91}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f00000001c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7}}, './file1\x00'}) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) r5 = syz_io_uring_setup(0x3de4, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000180), &(0x7f0000002a40)) ioctl$BLKTRACESTART(r4, 0x1274, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x882c2, 0x0) fsync(r6) ioctl$FS_IOC_GETFSMAP(r6, 0xc0c0583b, &(0x7f0000000440)={0x0, 0x0, 0x5, 0x0, '\x00', [{0x7, 0x7fff, 0x5, 0xffff, 0x8, 0x401}, {0x9, 0x81, 0xfffe00000000, 0x1000, 0x2}], ['\x00', '\x00', '\x00', '\x00', '\x00']}) io_uring_enter(r5, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$FIGETBSZ(r5, 0x2, &(0x7f0000000240)) 20:21:28 executing program 7: creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="140003e8000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) 20:21:28 executing program 5: r0 = creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) open_by_handle_at(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="5000000000000004000000"], 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f0000000200)=0x6, 0x4) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000fd0000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) 20:21:28 executing program 2: sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x4, 0xfffffde2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x0, 0x0) pidfd_send_signal(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xb, 0x5, 0x2000000}, 0x0) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file2\x00', 0x0, 0x127) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, 0x0, 0x800, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x1f}}}}, [@NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x20048000}, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r0, &(0x7f0000000440)={0x60000019}) syz_genetlink_get_family_id$tipc(&(0x7f0000000140), r0) 20:21:41 executing program 4: madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x12) mlock(&(0x7f0000ffb000/0x1000)=nil, 0x1000) fork() (fail_nth: 20) 20:21:41 executing program 6: sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x8) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x0, 0x0) pidfd_send_signal(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xb, 0x5, 0x2000000}, 0x0) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file2\x00', 0x40080, 0x127) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000540)={0x160, 0x0, 0x800, 0x870bd25, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0xfffffffe}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x6}, @NL80211_ATTR_TX_RATES={0x134, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x20, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x40, 0x9, 0x5422, 0x1, 0x9b16, 0x6, 0x2]}}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0xc, 0x4a, 0x36]}]}, @NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x8, 0x1, 0x5, 0xff, 0x7000, 0x8, 0x8]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x3f, 0x3b5a, 0x3, 0x8, 0x5, 0x7f, 0x8]}}]}, @NL80211_BAND_5GHZ={0xe4, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8001, 0x2, 0x5, 0x13a8, 0xbdb, 0x2, 0x401, 0x4]}}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0xb, 0x16, 0x6c, 0xc, 0x16, 0x13, 0x30]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x37, 0x2, [{0x2, 0x5}, {0x4, 0xa}, {0x7, 0x9}, {0x5}, {0x1, 0x3}, {}, {0x6, 0xa}, {0x2, 0xa}, {0x4, 0x8}, {0x1, 0x9}, {0x3, 0x1}, {0x3, 0xa}, {0x5, 0x5}, {0x7, 0x3}, {0x6, 0x8}, {0x2, 0x9}, {0x3, 0x3}, {0x6, 0x8}, {0x5, 0x2}, {0x3, 0x7}, {0x1, 0x1}, {0x1, 0x2}, {0x1, 0x5}, {0x3, 0x1}, {0x5, 0x9}, {0x1, 0x1}, {0x0, 0x9}, {0x2, 0x7}, {0x0, 0x1}, {0x5, 0x7}, {0x5, 0x7}, {0x4, 0x8}, {0x3, 0x4}, {0x5, 0x5}, {0x0, 0x2}, {0x5}, {0x7, 0x5}, {0x6}, {0x4, 0x8}, {0x6}, {0x0, 0x4}, {0x0, 0x2}, {0x5, 0x5}, {0x5, 0x5}, {0x2, 0x8}, {}, {0x2, 0xa}, {0x5}, {0x2, 0x6}, {0x6, 0x3}, {0x7, 0xa}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x50, 0x2, [{0x0, 0x2}, {0x0, 0x1}, {0x4, 0x2}, {0x1, 0x8}, {0x0, 0x5}, {0x6, 0x2}, {0x7, 0x6}, {0x7, 0x9}, {0x5, 0x8}, {0x1, 0x7}, {0x4, 0xa}, {0x1, 0x6}, {0x7, 0xa}, {0x3}, {0x0, 0xa}, {0x0, 0x6}, {0x5, 0x7}, {0x6, 0x1}, {0x1, 0x9}, {0x0, 0x6}, {0x0, 0xa}, {0x7, 0x6}, {0x6, 0x2}, {0x7}, {0x7, 0x9}, {0x3, 0xa}, {0x4, 0x2}, {0x4, 0x9}, {0x7, 0x8}, {0x3, 0xa}, {0x2, 0x9}, {0x4, 0x3}, {0x0, 0x3}, {0x2, 0x3}, {0x4, 0xa}, {0x6, 0x3}, {0x5, 0xa}, {0x6, 0x8}, {0x1, 0x3}, {0x5, 0x6}, {0x4, 0x1}, {0x1, 0x7}, {0x1, 0x1}, {0x2, 0x10}, {}, {0x3}, {0x3, 0x2}, {0x4, 0x8}, {0x0, 0xa}, {0x0, 0x7}, {0x6, 0x2}, {0x2, 0x2}, {0x6, 0x9}, {0x1, 0x7}, {0x5, 0x1}, {0x2}, {0x6, 0x7}, {0x5}, {0x7, 0x3}, {0x4, 0xa}, {0x2, 0x6}, {0x4, 0x4}, {0x3, 0x2}, {0x0, 0x5}, {0x0, 0xa}, {0x1, 0xa}, {0x7, 0x8}, {0x7, 0x4}, {0x5, 0xa}, {0x5, 0x1}, {0x1}, {0x6, 0x3}, {0x7, 0x6}, {0x3, 0x6}, {0x4, 0x1}, {0x5, 0x9}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x361, 0x4, 0x2, 0x401, 0x6, 0x100, 0xfdc6, 0x7ff]}}, @NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}]}]}, 0x160}, 0x1, 0x0, 0x0, 0x20048000}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="1000000017010007002e2f664169"], 0x10) 20:21:41 executing program 2: sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x0, 0x0) pidfd_send_signal(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xb, 0x5, 0x2000000}, 0x0) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file2\x00', 0x0, 0x127) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0008252544003f0700000300", @ANYRES32=0x0, @ANYBLOB="0c009900000000001f00000008000d0000000000"], 0x30}, 0x1, 0x0, 0x0, 0x20048000}, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r0, &(0x7f0000000440)={0x60000019}) syz_genetlink_get_family_id$tipc(&(0x7f0000000140), r0) 20:21:41 executing program 1: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x46842, 0x0) io_setup(0x5, &(0x7f0000000080)) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x8800000) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x5, r3, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0xa, 0x100, 0xb91}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f00000001c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7}}, './file1\x00'}) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) r5 = syz_io_uring_setup(0x3de4, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000180), &(0x7f0000002a40)) ioctl$BLKTRACESTART(r4, 0x1274, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x882c2, 0x0) fsync(r6) ioctl$FS_IOC_GETFSMAP(r6, 0xc0c0583b, &(0x7f0000000440)={0x0, 0x0, 0x5, 0x0, '\x00', [{0x7, 0x7fff, 0x5, 0xffff, 0x8, 0x401}, {0x9, 0x81, 0xfffe00000000, 0x1000, 0x2}], ['\x00', '\x00', '\x00', '\x00', '\x00']}) io_uring_enter(r5, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$FIGETBSZ(r5, 0x2, &(0x7f0000000240)) 20:21:41 executing program 3: statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f0000000200)=0x6, 0x4) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000340)=ANY=[@ANYBLOB="01080000011270c839284f30e054da4374340020000000000000", @ANYRES32, @ANYBLOB="ffa22106351700002e2f661c696c653000"]) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) pread64(0xffffffffffffffff, &(0x7f0000000400)=""/255, 0xff, 0x7eb9) dup(0xffffffffffffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0), 0x9) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000030000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) 20:21:41 executing program 7: creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="140001f4000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) 20:21:41 executing program 5: r0 = creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) open_by_handle_at(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="5000000000000004000000"], 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f0000000200)=0x6, 0x4) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="1497ffffff0000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) 20:21:41 executing program 0: creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) pread64(0xffffffffffffffff, &(0x7f0000000400)=""/255, 0xff, 0x7eb9) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14030000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) [ 3055.349615] FAULT_INJECTION: forcing a failure. [ 3055.349615] name failslab, interval 1, probability 0, space 0, times 0 [ 3055.351994] CPU: 1 PID: 16093 Comm: syz-executor.4 Not tainted 5.10.194 #1 [ 3055.353403] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3055.355088] Call Trace: [ 3055.355639] dump_stack+0x107/0x167 [ 3055.356389] should_fail.cold+0x5/0xa [ 3055.357192] ? copy_process+0x1add/0x7800 [ 3055.358038] should_failslab+0x5/0x20 [ 3055.358808] kmem_cache_alloc+0x5b/0x310 [ 3055.359638] ? _raw_spin_unlock+0x1a/0x30 [ 3055.360485] copy_process+0x1add/0x7800 [ 3055.361305] ? __lock_acquire+0xbb1/0x5b00 [ 3055.362190] ? __cleanup_sighand+0xb0/0xb0 [ 3055.363048] ? lock_acquire+0x197/0x470 [ 3055.363858] ? find_held_lock+0x2c/0x110 [ 3055.364681] kernel_clone+0xe7/0x980 [ 3055.365439] ? lock_downgrade+0x6d0/0x6d0 [ 3055.366272] ? find_held_lock+0x2c/0x110 [ 3055.367089] ? create_io_thread+0xf0/0xf0 [ 3055.367932] ? ksys_write+0x12d/0x260 [ 3055.368706] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3055.369699] __do_sys_fork+0x8a/0xc0 [ 3055.370449] ? kernel_thread+0xf0/0xf0 [ 3055.371249] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3055.372301] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3055.373347] ? trace_hardirqs_on+0x5b/0x180 [ 3055.374222] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3055.375269] do_syscall_64+0x33/0x40 [ 3055.376021] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 3055.377058] RIP: 0033:0x7f4ded6f8b19 [ 3055.377809] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3055.381512] RSP: 002b:00007f4deac6e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 3055.383039] RAX: ffffffffffffffda RBX: 00007f4ded80bf60 RCX: 00007f4ded6f8b19 [ 3055.384469] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 3055.385905] RBP: 00007f4deac6e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3055.387334] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3055.388763] R13: 00007ffdd13eda0f R14: 00007f4deac6e300 R15: 0000000000022000 20:21:41 executing program 3: statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f0000000200)=0x6, 0x4) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000340)=ANY=[@ANYBLOB="01080000011270c839284f30e054da4374340020000000000000", @ANYRES32, @ANYBLOB="ffa22106351700002e2f661c696c653000"]) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) pread64(0xffffffffffffffff, &(0x7f0000000400)=""/255, 0xff, 0x7eb9) dup(0xffffffffffffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0), 0x9) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000040000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) 20:21:41 executing program 0: creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) pread64(0xffffffffffffffff, &(0x7f0000000400)=""/255, 0xff, 0x7eb9) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14040000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) 20:21:42 executing program 7: creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="140000fd000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) 20:21:42 executing program 0: creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) pread64(0xffffffffffffffff, &(0x7f0000000400)=""/255, 0xff, 0x7eb9) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14080000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) [ 3070.551302] FAULT_INJECTION: forcing a failure. [ 3070.551302] name failslab, interval 1, probability 0, space 0, times 0 [ 3070.553909] CPU: 1 PID: 16142 Comm: syz-executor.4 Not tainted 5.10.194 #1 [ 3070.555391] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3070.557198] Call Trace: [ 3070.557774] dump_stack+0x107/0x167 [ 3070.558565] should_fail.cold+0x5/0xa [ 3070.559386] ? create_object.isra.0+0x3a/0xa20 [ 3070.560368] should_failslab+0x5/0x20 20:21:57 executing program 2: sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x0, 0x0) pidfd_send_signal(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xb, 0x5, 0x2000000}, 0x0) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file2\x00', 0x0, 0x127) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000825bd7000000000000000f2ffffff00d1192bb9be17e2513fea288fc86b4d00", @ANYRES32=0x0, @ANYBLOB="0c009900000000001f00000008000d0000000000"], 0x30}, 0x1, 0x0, 0x0, 0x20048000}, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r0, &(0x7f0000000440)={0x60000019}) syz_genetlink_get_family_id$tipc(&(0x7f0000000140), r0) 20:21:57 executing program 5: r0 = creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) open_by_handle_at(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="5000000000000004000000"], 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f0000000200)=0x6, 0x4) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000080000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) [ 3070.561199] kmem_cache_alloc+0x5b/0x310 20:21:57 executing program 0: creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) pread64(0xffffffffffffffff, &(0x7f0000000400)=""/255, 0xff, 0x7eb9) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="140a0000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) 20:21:57 executing program 7: creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000080000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) 20:21:57 executing program 1: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x46842, 0x0) io_setup(0x5, &(0x7f0000000080)) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x8800000) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x5, r3, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x48, 0x100, 0xb91}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f00000001c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7}}, './file1\x00'}) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) r5 = syz_io_uring_setup(0x3de4, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000180), &(0x7f0000002a40)) ioctl$BLKTRACESTART(r4, 0x1274, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x882c2, 0x0) fsync(r6) ioctl$FS_IOC_GETFSMAP(r6, 0xc0c0583b, &(0x7f0000000440)={0x0, 0x0, 0x5, 0x0, '\x00', [{0x7, 0x7fff, 0x5, 0xffff, 0x8, 0x401}, {0x9, 0x81, 0xfffe00000000, 0x1000, 0x2}], ['\x00', '\x00', '\x00', '\x00', '\x00']}) io_uring_enter(r5, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$FIGETBSZ(r5, 0x2, &(0x7f0000000240)) 20:21:57 executing program 4: madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x12) mlock(&(0x7f0000ffb000/0x1000)=nil, 0x1000) fork() (fail_nth: 21) 20:21:57 executing program 6: sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3}}, 0x0, 0x1, 0xffffffffffffffff, 0x8) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x48, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x2c, 0xe, {@with_ht={{{}, {}, @broadcast, @broadcast, @random="dd0b7470fe16"}}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}]]}, 0x48}}, 0x0) sendmsg$NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x20, r1, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x4, 0x29}}}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4000010}, 0x2000c040) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x0, 0x0) pidfd_send_signal(0xffffffffffffffff, 0x3b, &(0x7f0000000040)={0xb, 0x5, 0x2000000}, 0x0) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file2\x00', 0x40080, 0x127) socket$inet6_udp(0xa, 0x2, 0x0) mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file2\x00', &(0x7f0000000200), 0x1, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, 0x0, 0x800, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x1f}}}}, [@NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0xfffffffe}]}, 0x30}, 0x1, 0x0, 0x0, 0x20048000}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="0641699309727b1018cd1f000000"], 0x10) 20:21:57 executing program 3: statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f0000000200)=0x6, 0x4) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000340)=ANY=[@ANYBLOB="01080000011270c839284f30e054da4374340020000000000000", @ANYRES32, @ANYBLOB="ffa22106351700002e2f661c696c653000"]) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) pread64(0xffffffffffffffff, &(0x7f0000000400)=""/255, 0xff, 0x7eb9) dup(0xffffffffffffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0), 0x9) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="140000000a0000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) [ 3070.562412] create_object.isra.0+0x3a/0xa20 [ 3070.563590] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3070.564811] kmem_cache_alloc+0x159/0x310 [ 3070.565815] ? _raw_spin_unlock+0x1a/0x30 [ 3070.566812] copy_process+0x1add/0x7800 [ 3070.567770] ? __lock_acquire+0xbb1/0x5b00 [ 3070.568832] ? __cleanup_sighand+0xb0/0xb0 [ 3070.569872] ? lock_acquire+0x197/0x470 [ 3070.570755] ? find_held_lock+0x2c/0x110 [ 3070.571626] kernel_clone+0xe7/0x980 [ 3070.572425] ? lock_downgrade+0x6d0/0x6d0 [ 3070.573306] ? find_held_lock+0x2c/0x110 [ 3070.574170] ? create_io_thread+0xf0/0xf0 [ 3070.575051] ? ksys_write+0x12d/0x260 [ 3070.575862] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3070.576892] __do_sys_fork+0x8a/0xc0 [ 3070.577690] ? kernel_thread+0xf0/0xf0 [ 3070.578543] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3070.579659] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3070.580752] ? trace_hardirqs_on+0x5b/0x180 [ 3070.581690] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3070.582790] do_syscall_64+0x33/0x40 [ 3070.583594] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 3070.584679] RIP: 0033:0x7f4ded6f8b19 [ 3070.585487] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3070.589367] RSP: 002b:00007f4deac6e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 3070.590994] RAX: ffffffffffffffda RBX: 00007f4ded80bf60 RCX: 00007f4ded6f8b19 [ 3070.592514] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 3070.594042] RBP: 00007f4deac6e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3070.595571] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3070.597089] R13: 00007ffdd13eda0f R14: 00007f4deac6e300 R15: 0000000000022000 20:21:57 executing program 0: creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) pread64(0xffffffffffffffff, &(0x7f0000000400)=""/255, 0xff, 0x7eb9) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="140e0000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) 20:21:57 executing program 7: creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000100000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) 20:21:57 executing program 3: statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f0000000200)=0x6, 0x4) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000340)=ANY=[@ANYBLOB="01080000011270c839284f30e054da4374340020000000000000", @ANYRES32, @ANYBLOB="ffa22106351700002e2f661c696c653000"]) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) pread64(0xffffffffffffffff, &(0x7f0000000400)=""/255, 0xff, 0x7eb9) dup(0xffffffffffffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0), 0x9) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="140000030d0000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) 20:21:57 executing program 2: sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x0, 0x0) pidfd_send_signal(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xb, 0x5, 0x2000000}, 0x0) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file2\x00', 0x0, 0x127) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, 0x0, 0x800, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x1f}}}}, [@NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x20048000}, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r0, &(0x7f0000000440)={0x60000019}) syz_genetlink_get_family_id$tipc(&(0x7f0000000140), r0) 20:21:57 executing program 7: creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000200000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) 20:21:57 executing program 5: r0 = creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) open_by_handle_at(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="5000000000000004000000"], 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f0000000200)=0x6, 0x4) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000100000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) 20:21:57 executing program 0: creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) pread64(0xffffffffffffffff, &(0x7f0000000400)=""/255, 0xff, 0x7eb9) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14600000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) 20:21:57 executing program 1: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x46842, 0x0) io_setup(0x5, &(0x7f0000000080)) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x8800000) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x5, r3, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x4c, 0x100, 0xb91}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f00000001c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7}}, './file1\x00'}) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) r5 = syz_io_uring_setup(0x3de4, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000180), &(0x7f0000002a40)) ioctl$BLKTRACESTART(r4, 0x1274, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x882c2, 0x0) fsync(r6) ioctl$FS_IOC_GETFSMAP(r6, 0xc0c0583b, &(0x7f0000000440)={0x0, 0x0, 0x5, 0x0, '\x00', [{0x7, 0x7fff, 0x5, 0xffff, 0x8, 0x401}, {0x9, 0x81, 0xfffe00000000, 0x1000, 0x2}], ['\x00', '\x00', '\x00', '\x00', '\x00']}) io_uring_enter(r5, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$FIGETBSZ(r5, 0x2, &(0x7f0000000240)) 20:22:10 executing program 6: sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x8) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x0, 0x0) pidfd_send_signal(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xb, 0x5, 0x2000000}, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f00000002c0)='./file2\x00', 0x40080, 0x127) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, 0x0, 0x800, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x1f}}}}, [@NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0xfffffffe}]}, 0x30}, 0x1, 0x0, 0x0, 0x20048000}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) write$P9_RREADLINK(r0, &(0x7f00000001c0)=ANY=[@ANYRESHEX], 0x10) 20:22:10 executing program 3: statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f0000000200)=0x6, 0x4) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000340)=ANY=[@ANYBLOB="01080000011270c839284f30e054da4374340020000000000000", @ANYRES32, @ANYBLOB="ffa22106351700002e2f661c696c653000"]) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) pread64(0xffffffffffffffff, &(0x7f0000000400)=""/255, 0xff, 0x7eb9) dup(0xffffffffffffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0), 0x9) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="140000000e0000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) 20:22:10 executing program 2: sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6}}, './file2\x00'}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x40, r1, 0x200, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x8, 0x64}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x4800) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x0, 0x0) pidfd_send_signal(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xb, 0x5, 0x2000000}, 0x0) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file2\x00', 0x0, 0x127) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = dup(r5) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x28, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000004c0)={&(0x7f0000000380)={0x30, 0x0, 0x800, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x0, 0x1f}}}}, [@NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x20048000}, 0x0) r8 = creat(&(0x7f0000000080)='./file0\x00', 0x0) epoll_ctl$EPOLL_CTL_MOD(r8, 0x3, r8, &(0x7f0000000440)={0x60000019}) syz_genetlink_get_family_id$tipc(&(0x7f0000000140), r8) 20:22:10 executing program 4: madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x12) mlock(&(0x7f0000ffb000/0x1000)=nil, 0x1000) fork() (fail_nth: 22) 20:22:10 executing program 1: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x46842, 0x0) io_setup(0x5, &(0x7f0000000080)) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x8800000) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x5, r3, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x68, 0x100, 0xb91}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f00000001c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7}}, './file1\x00'}) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) r5 = syz_io_uring_setup(0x3de4, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000180), &(0x7f0000002a40)) ioctl$BLKTRACESTART(r4, 0x1274, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x882c2, 0x0) fsync(r6) ioctl$FS_IOC_GETFSMAP(r6, 0xc0c0583b, &(0x7f0000000440)={0x0, 0x0, 0x5, 0x0, '\x00', [{0x7, 0x7fff, 0x5, 0xffff, 0x8, 0x401}, {0x9, 0x81, 0xfffe00000000, 0x1000, 0x2}], ['\x00', '\x00', '\x00', '\x00', '\x00']}) io_uring_enter(r5, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$FIGETBSZ(r5, 0x2, &(0x7f0000000240)) 20:22:10 executing program 0: creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) pread64(0xffffffffffffffff, &(0x7f0000000400)=""/255, 0xff, 0x7eb9) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14fd0000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) 20:22:10 executing program 5: r0 = creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) open_by_handle_at(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="5000000000000004000000"], 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f0000000200)=0x6, 0x4) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000200000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) 20:22:10 executing program 7: creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000300000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) [ 3083.929694] FAULT_INJECTION: forcing a failure. [ 3083.929694] name failslab, interval 1, probability 0, space 0, times 0 [ 3083.932021] CPU: 1 PID: 16209 Comm: syz-executor.4 Not tainted 5.10.194 #1 [ 3083.933434] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3083.935110] Call Trace: [ 3083.935657] dump_stack+0x107/0x167 [ 3083.936399] should_fail.cold+0x5/0xa [ 3083.937178] ? copy_process+0x1c5b/0x7800 [ 3083.938068] should_failslab+0x5/0x20 [ 3083.938836] kmem_cache_alloc+0x5b/0x310 [ 3083.939660] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3083.940727] copy_process+0x1c5b/0x7800 [ 3083.941550] ? __lock_acquire+0xbb1/0x5b00 [ 3083.942432] ? __cleanup_sighand+0xb0/0xb0 [ 3083.943303] ? lock_acquire+0x197/0x470 [ 3083.944117] ? find_held_lock+0x2c/0x110 [ 3083.944945] kernel_clone+0xe7/0x980 [ 3083.945706] ? lock_downgrade+0x6d0/0x6d0 [ 3083.946537] ? find_held_lock+0x2c/0x110 [ 3083.947361] ? create_io_thread+0xf0/0xf0 [ 3083.948201] ? ksys_write+0x12d/0x260 [ 3083.948983] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3083.949990] __do_sys_fork+0x8a/0xc0 [ 3083.950738] ? kernel_thread+0xf0/0xf0 [ 3083.951527] ? copy_kernel_to_fpregs+0x9e/0xe0 [ 3083.952471] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3083.953562] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3083.954597] ? trace_hardirqs_on+0x5b/0x180 [ 3083.955469] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3083.956514] do_syscall_64+0x33/0x40 [ 3083.957278] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 3083.958314] RIP: 0033:0x7f4ded6f8b19 [ 3083.959090] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3083.962819] RSP: 002b:00007f4deac6e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 3083.964357] RAX: ffffffffffffffda RBX: 00007f4ded80bf60 RCX: 00007f4ded6f8b19 [ 3083.965801] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 3083.967241] RBP: 00007f4deac6e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3083.968690] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3083.970140] R13: 00007ffdd13eda0f R14: 00007f4deac6e300 R15: 0000000000022000 20:22:10 executing program 7: creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000400000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) 20:22:10 executing program 0: creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) pread64(0xffffffffffffffff, &(0x7f0000000400)=""/255, 0xff, 0x7eb9) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14f40100000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) 20:22:10 executing program 3: statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f0000000200)=0x6, 0x4) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000340)=ANY=[@ANYBLOB="01080000011270c839284f30e054da4374340020000000000000", @ANYRES32, @ANYBLOB="ffa22106351700002e2f661c696c653000"]) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) pread64(0xffffffffffffffff, &(0x7f0000000400)=""/255, 0xff, 0x7eb9) dup(0xffffffffffffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0), 0x9) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000600000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) 20:22:10 executing program 5: r0 = creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) open_by_handle_at(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="5000000000000004000000"], 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f0000000200)=0x6, 0x4) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000300000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) 20:22:10 executing program 6: sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x8) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x0, 0x0) pidfd_send_signal(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xb, 0x5, 0x2000000}, 0x0) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file2\x00', 0x40080, 0x127) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, 0x0, 0x800, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x1f}}}}, [@NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0xfffffffe}]}, 0x30}, 0x1, 0x0, 0x0, 0x20048000}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="b02b67794d4c0d7cc90b3b4c72a3f0659892914173ed252278cf8d"], 0x10) 20:22:10 executing program 1: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x46842, 0x0) io_setup(0x5, &(0x7f0000000080)) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x8800000) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x5, r3, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x6c, 0x100, 0xb91}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f00000001c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7}}, './file1\x00'}) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) r5 = syz_io_uring_setup(0x3de4, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000180), &(0x7f0000002a40)) ioctl$BLKTRACESTART(r4, 0x1274, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x882c2, 0x0) fsync(r6) ioctl$FS_IOC_GETFSMAP(r6, 0xc0c0583b, &(0x7f0000000440)={0x0, 0x0, 0x5, 0x0, '\x00', [{0x7, 0x7fff, 0x5, 0xffff, 0x8, 0x401}, {0x9, 0x81, 0xfffe00000000, 0x1000, 0x2}], ['\x00', '\x00', '\x00', '\x00', '\x00']}) io_uring_enter(r5, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$FIGETBSZ(r5, 0x2, &(0x7f0000000240)) 20:22:10 executing program 7: creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000a00000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) 20:22:10 executing program 4: madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x12) mlock(&(0x7f0000ffb000/0x1000)=nil, 0x1000) fork() (fail_nth: 23) [ 3084.285163] FAULT_INJECTION: forcing a failure. [ 3084.285163] name failslab, interval 1, probability 0, space 0, times 0 [ 3084.287575] CPU: 1 PID: 16244 Comm: syz-executor.4 Not tainted 5.10.194 #1 [ 3084.288968] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3084.290654] Call Trace: [ 3084.291200] dump_stack+0x107/0x167 [ 3084.291944] should_fail.cold+0x5/0xa [ 3084.292713] ? create_object.isra.0+0x3a/0xa20 [ 3084.293663] should_failslab+0x5/0x20 [ 3084.294431] kmem_cache_alloc+0x5b/0x310 [ 3084.295270] create_object.isra.0+0x3a/0xa20 [ 3084.296159] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3084.297179] kmem_cache_alloc+0x159/0x310 [ 3084.298024] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3084.299080] copy_process+0x1c5b/0x7800 [ 3084.299882] ? __lock_acquire+0xbb1/0x5b00 [ 3084.300761] ? __cleanup_sighand+0xb0/0xb0 [ 3084.301637] ? lock_acquire+0x197/0x470 [ 3084.302447] ? find_held_lock+0x2c/0x110 [ 3084.303271] kernel_clone+0xe7/0x980 [ 3084.304026] ? lock_downgrade+0x6d0/0x6d0 [ 3084.304853] ? find_held_lock+0x2c/0x110 [ 3084.305683] ? create_io_thread+0xf0/0xf0 [ 3084.306525] ? ksys_write+0x12d/0x260 [ 3084.307302] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3084.308276] __do_sys_fork+0x8a/0xc0 [ 3084.309035] ? kernel_thread+0xf0/0xf0 [ 3084.309846] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3084.310894] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3084.311915] ? trace_hardirqs_on+0x5b/0x180 [ 3084.312780] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3084.313835] do_syscall_64+0x33/0x40 [ 3084.314587] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 3084.315615] RIP: 0033:0x7f4ded6f8b19 [ 3084.316368] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3084.320080] RSP: 002b:00007f4deac6e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 3084.321624] RAX: ffffffffffffffda RBX: 00007f4ded80bf60 RCX: 00007f4ded6f8b19 [ 3084.323061] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 3084.324496] RBP: 00007f4deac6e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3084.325945] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3084.327380] R13: 00007ffdd13eda0f R14: 00007f4deac6e300 R15: 0000000000022000 20:22:24 executing program 4: madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x12) mlock(&(0x7f0000ffb000/0x1000)=nil, 0x1000) fork() (fail_nth: 24) 20:22:24 executing program 3: statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f0000000200)=0x6, 0x4) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000340)=ANY=[@ANYBLOB="01080000011270c839284f30e054da4374340020000000000000", @ANYRES32, @ANYBLOB="ffa22106351700002e2f661c696c653000"]) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) pread64(0xffffffffffffffff, &(0x7f0000000400)=""/255, 0xff, 0x7eb9) dup(0xffffffffffffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0), 0x9) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14ffffff970000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) 20:22:24 executing program 1: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x46842, 0x0) io_setup(0x5, &(0x7f0000000080)) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x8800000) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x5, r3, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x74, 0x100, 0xb91}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f00000001c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7}}, './file1\x00'}) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) r5 = syz_io_uring_setup(0x3de4, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000180), &(0x7f0000002a40)) ioctl$BLKTRACESTART(r4, 0x1274, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x882c2, 0x0) fsync(r6) ioctl$FS_IOC_GETFSMAP(r6, 0xc0c0583b, &(0x7f0000000440)={0x0, 0x0, 0x5, 0x0, '\x00', [{0x7, 0x7fff, 0x5, 0xffff, 0x8, 0x401}, {0x9, 0x81, 0xfffe00000000, 0x1000, 0x2}], ['\x00', '\x00', '\x00', '\x00', '\x00']}) io_uring_enter(r5, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$FIGETBSZ(r5, 0x2, &(0x7f0000000240)) 20:22:24 executing program 5: r0 = creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) open_by_handle_at(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="5000000000000004000000"], 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f0000000200)=0x6, 0x4) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000400000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) 20:22:24 executing program 0: creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) pread64(0xffffffffffffffff, &(0x7f0000000400)=""/255, 0xff, 0x7eb9) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14e70200000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) 20:22:24 executing program 2: sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x0, 0x0) pidfd_send_signal(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xb, 0x5, 0x2000000}, 0x0) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file2\x00', 0x0, 0x127) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x100000001) sendfile(r0, r2, 0x0, 0x8) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000825bd7000ffdbdf254400000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900000d0000020000"], 0x30}, 0x1, 0x0, 0x0, 0x20048000}, 0x0) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r3, &(0x7f0000000440)={0x60000019}) syz_genetlink_get_family_id$tipc(&(0x7f0000000140), r3) 20:22:24 executing program 6: sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x8) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x0, 0x0) pidfd_send_signal(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xb, 0x5, 0x2000000}, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f00000002c0)='./file2\x00', 0x40080, 0x127) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, 0x0, 0x800, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x1f}}}}, [@NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0xfffffffe}]}, 0x30}, 0x1, 0x0, 0x0, 0x20048000}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) r1 = fsmount(r0, 0x0, 0x80) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000540)={0x258, r2, 0x800, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TX_RATES={0x9c, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x98, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x0, 0x6, 0x400, 0x101, 0xffff, 0x6, 0x6]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x40, 0x5858, 0x0, 0x1f, 0x0, 0x40, 0x4]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0xb0b, 0xffff, 0xfff, 0x3f, 0x3ff, 0x1, 0x5e3f]}}, @NL80211_TXRATE_HT={0x32, 0x2, [{0x1, 0x5}, {0x2, 0x8}, {0x4, 0x9}, {0x1}, {0x4}, {0x5, 0xa}, {0x6, 0x9}, {0x0, 0x3}, {0x3, 0x8}, {0x0, 0x9}, {0x5, 0x3}, {0x1, 0x1}, {0x3, 0x6}, {0x0, 0x6}, {0x1, 0x7}, {0x0, 0x4}, {0x6, 0x3}, {0x3, 0x1}, {0x3, 0x6}, {0x1, 0x9}, {0x0, 0x8}, {0x0, 0x5}, {0x4, 0x2}, {0x2, 0x3}, {0x1, 0x4}, {0x4, 0x8}, {0x7, 0xa}, {0x7, 0x5}, {0x5, 0x3}, {0x3, 0x1}, {0x0, 0x6}, {0x0, 0x8}, {0x7, 0x3}, {}, {0x4}, {0x1, 0x4}, {0x4, 0x1}, {0x1, 0x7}, {0x5, 0x7}, {0x1, 0x9}, {0x6, 0x2}, {0x5, 0x6}, {0x1, 0xa}, {0x4, 0x9}, {0x5, 0x5}, {0x0, 0x2}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x6, 0xc77, 0x100, 0x9, 0xa77, 0x3, 0x1]}}]}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x7fff}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_MESH_SETUP={0x174, 0x70, [@NL80211_MESH_SETUP_IE={0xc5, 0x3, "e017c5f4a45012166419748f8cd2f2f7dbf123b5ab9bb38242f30fcbe3229611c3f7cf80ca0a5764bd6b117a43e850f2d660e82fd0c34e0a59e284d5bfc07843edfa34d5e214675611b27b6c771473c9b3cea26914612dcf71e0eebb8cdd9102fe26edd86ab795807522043af821d46d4de2172623ccfe755d3c2734b94d4f2a251baa466605b9fbcf7670ce00e04a041357543af4676820577a07705caa55beaf897f7144e7428e9d8514f1b4003d4f9ad623c96e29240aec94346c30ad02c27d"}, @NL80211_MESH_SETUP_IE={0xa5, 0x3, "cf6fb9820a300cb11b037c60a77fc695b9bd409f112e6b380d7a4f13d2feacffd16e7cc6aec086bd7d3e9da325a8617dc107a96c0785deb3747e3a761abba139a434528c22be51aa6aae0a0f5e54e9c8c11611cf9db9091aa7fa05353b870afca1301d44e79b9f17291118bc2d37a72ee4a94b31138eed5a84b2afaae9c2de6687edd96c499f84dd2f02129b090bc34007d7e7ecd1def233853d3972a7dad6eef3"}]}]}, 0x258}}, 0x40000) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="1000000017010007002e2f664169"], 0x10) 20:22:24 executing program 7: creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000030d00000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) [ 3097.941165] FAULT_INJECTION: forcing a failure. [ 3097.941165] name failslab, interval 1, probability 0, space 0, times 0 [ 3097.943540] CPU: 1 PID: 16272 Comm: syz-executor.4 Not tainted 5.10.194 #1 [ 3097.944943] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3097.946636] Call Trace: [ 3097.947180] dump_stack+0x107/0x167 [ 3097.947929] should_fail.cold+0x5/0xa [ 3097.948708] ? copy_process+0x24f5/0x7800 [ 3097.949574] should_failslab+0x5/0x20 [ 3097.950353] kmem_cache_alloc+0x5b/0x310 [ 3097.951186] copy_process+0x24f5/0x7800 [ 3097.952001] ? __lock_acquire+0xbb1/0x5b00 [ 3097.952891] ? __cleanup_sighand+0xb0/0xb0 [ 3097.953766] ? lock_acquire+0x197/0x470 [ 3097.954584] ? find_held_lock+0x2c/0x110 [ 3097.955417] kernel_clone+0xe7/0x980 [ 3097.956180] ? lock_downgrade+0x6d0/0x6d0 [ 3097.957020] ? find_held_lock+0x2c/0x110 [ 3097.957855] ? create_io_thread+0xf0/0xf0 [ 3097.958697] ? ksys_write+0x12d/0x260 [ 3097.959673] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3097.960853] __do_sys_fork+0x8a/0xc0 [ 3097.961622] ? kernel_thread+0xf0/0xf0 [ 3097.962424] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3097.963485] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3097.964529] ? trace_hardirqs_on+0x5b/0x180 [ 3097.965417] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3097.966470] do_syscall_64+0x33/0x40 [ 3097.967225] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 3097.968260] RIP: 0033:0x7f4ded6f8b19 [ 3097.969018] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3097.972763] RSP: 002b:00007f4deac6e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 3097.974306] RAX: ffffffffffffffda RBX: 00007f4ded80bf60 RCX: 00007f4ded6f8b19 [ 3097.975746] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 3097.977182] RBP: 00007f4deac6e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3097.978637] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3097.980071] R13: 00007ffdd13eda0f R14: 00007f4deac6e300 R15: 0000000000022000 20:22:24 executing program 7: creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000e00000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) 20:22:24 executing program 3: statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f0000000200)=0x6, 0x4) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000340)=ANY=[@ANYBLOB="01080000011270c839284f30e054da4374340020000000000000", @ANYRES32, @ANYBLOB="ffa22106351700002e2f661c696c653000"]) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) pread64(0xffffffffffffffff, &(0x7f0000000400)=""/255, 0xff, 0x7eb9) dup(0xffffffffffffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0), 0x9) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000005c00000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) 20:22:24 executing program 0: creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) pread64(0xffffffffffffffff, &(0x7f0000000400)=""/255, 0xff, 0x7eb9) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000300000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) 20:22:24 executing program 1: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x46842, 0x0) io_setup(0x5, &(0x7f0000000080)) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x8800000) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x5, r3, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x7a, 0x100, 0xb91}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f00000001c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7}}, './file1\x00'}) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) r5 = syz_io_uring_setup(0x3de4, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000180), &(0x7f0000002a40)) ioctl$BLKTRACESTART(r4, 0x1274, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x882c2, 0x0) fsync(r6) ioctl$FS_IOC_GETFSMAP(r6, 0xc0c0583b, &(0x7f0000000440)={0x0, 0x0, 0x5, 0x0, '\x00', [{0x7, 0x7fff, 0x5, 0xffff, 0x8, 0x401}, {0x9, 0x81, 0xfffe00000000, 0x1000, 0x2}], ['\x00', '\x00', '\x00', '\x00', '\x00']}) io_uring_enter(r5, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$FIGETBSZ(r5, 0x2, &(0x7f0000000240)) 20:22:24 executing program 5: r0 = creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) open_by_handle_at(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="5000000000000004000000"], 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f0000000200)=0x6, 0x4) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000a00000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) 20:22:24 executing program 6: sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x90300, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x0, 0x0) pidfd_send_signal(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xb, 0x5, 0x2000000}, 0x0) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file2\x00', 0x40080, 0x127) socket$inet6_udp(0xa, 0x2, 0x0) umount2(&(0x7f0000001580)='./file2\x00', 0xe) openat(r0, &(0x7f0000001540)='./file2\x00', 0x204000, 0x32) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000340)='./file2\x00', 0xff, 0x3, &(0x7f00000003c0)=[{&(0x7f0000000540)="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", 0x1000, 0x7}, {&(0x7f0000001e00)="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", 0x1000, 0x4}, {&(0x7f0000000380)="d175073e7d70f9da29138c2a2b6390ebac7846398a9eac141e94", 0x1a, 0xdd}], 0x100000, &(0x7f0000000480)={[{@uni_xlateno}, {@utf8no}], [{@smackfsdef={'smackfsdef', 0x3d, '${\'%\xd1'}}, {@smackfsfloor={'smackfsfloor', 0x3d, '],](!%$}&'}}]}) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000825bd7000ffdbdf254400000008000300", @ANYRES32=0x0, @ANYBLOB="46bd47c77779a3d1ea0f7661ef1d438e5931e78d553f8c976eb8a85c115e986d6f30a0c953ca3ea5f96c6ff074a75f0a"], 0x30}, 0x1, 0x0, 0x0, 0x20048000}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="1000000013010007022e2f666169357749ef96bf2c984dadc5dfa4bb501583fa4e63a05b763ef69e82af82abaa15ce649e381c580000000000000072b8aa3a922bf4ae98a3729a26aea2ece976139bf8c81efdf7913af07a10b82983c6b609079ed68823e1c6a18819345be3dd31668acc710b0f1d68f0dd5725dddbd9342f8b9d83a85f0e94d97c805ee5f9b5540ed20bba69f758ec6bcde7249cc5ec37d653f9c793dd8e7c806c9f"], 0x10) 20:22:24 executing program 7: creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000006000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) 20:22:24 executing program 4: madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x12) mlock(&(0x7f0000ffb000/0x1000)=nil, 0x1000) fork() (fail_nth: 25) 20:22:24 executing program 3: statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f0000000200)=0x6, 0x4) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000340)=ANY=[@ANYBLOB="01080000011270c839284f30e054da4374340020000000000000", @ANYRES32, @ANYBLOB="ffa22106351700002e2f661c696c653000"]) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) pread64(0xffffffffffffffff, &(0x7f0000000400)=""/255, 0xff, 0x7eb9) dup(0xffffffffffffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0), 0x9) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000005e60000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) [ 3098.382292] FAULT_INJECTION: forcing a failure. [ 3098.382292] name failslab, interval 1, probability 0, space 0, times 0 [ 3098.384818] CPU: 1 PID: 16311 Comm: syz-executor.4 Not tainted 5.10.194 #1 [ 3098.386344] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3098.388213] Call Trace: [ 3098.388855] dump_stack+0x107/0x167 [ 3098.389651] should_fail.cold+0x5/0xa [ 3098.390421] ? create_object.isra.0+0x3a/0xa20 [ 3098.391348] should_failslab+0x5/0x20 [ 3098.392123] kmem_cache_alloc+0x5b/0x310 [ 3098.392956] create_object.isra.0+0x3a/0xa20 [ 3098.393861] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3098.395003] kmem_cache_alloc+0x159/0x310 [ 3098.395861] copy_process+0x24f5/0x7800 [ 3098.396670] ? __lock_acquire+0xbb1/0x5b00 [ 3098.397584] ? __cleanup_sighand+0xb0/0xb0 [ 3098.398440] ? lock_acquire+0x197/0x470 [ 3098.399357] ? find_held_lock+0x2c/0x110 [ 3098.400411] kernel_clone+0xe7/0x980 [ 3098.401242] ? lock_downgrade+0x6d0/0x6d0 [ 3098.402102] ? find_held_lock+0x2c/0x110 [ 3098.402940] ? create_io_thread+0xf0/0xf0 [ 3098.403789] ? ksys_write+0x12d/0x260 [ 3098.404574] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3098.405571] __do_sys_fork+0x8a/0xc0 [ 3098.406329] ? kernel_thread+0xf0/0xf0 [ 3098.407146] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3098.408215] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3098.409269] ? trace_hardirqs_on+0x5b/0x180 [ 3098.410261] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3098.411305] do_syscall_64+0x33/0x40 [ 3098.412158] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 3098.413206] RIP: 0033:0x7f4ded6f8b19 [ 3098.413978] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3098.417755] RSP: 002b:00007f4deac6e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 3098.419553] RAX: ffffffffffffffda RBX: 00007f4ded80bf60 RCX: 00007f4ded6f8b19 [ 3098.421007] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 3098.422456] RBP: 00007f4deac6e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3098.423901] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3098.425352] R13: 00007ffdd13eda0f R14: 00007f4deac6e300 R15: 0000000000022000 20:22:38 executing program 5: r0 = creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) open_by_handle_at(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="5000000000000004000000"], 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f0000000200)=0x6, 0x4) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000030d00000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) 20:22:38 executing program 0: creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) pread64(0xffffffffffffffff, &(0x7f0000000400)=""/255, 0xff, 0x7eb9) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="140d0300000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) 20:22:38 executing program 2: sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000380)='cpuacct.usage_user\x00', 0x0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r1, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x40, 0x2, 0x8, 0x5, 0x0, 0x0, {0x7, 0x0, 0x8}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xd}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x8044) r2 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x0, 0x0) pidfd_send_signal(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xb, 0x5, 0x2000000}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0}, &(0x7f0000000280)=0xc) r4 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x100000001) fcntl$dupfd(r2, 0x0, r5) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x40, 0x0, 0x1f, 0x1, 0x0, 0xfff, 0x10000, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1f, 0x4, @perf_bp={&(0x7f0000000180)}, 0x1201, 0x5, 0x5, 0x7, 0x2, 0x3, 0x8, 0x0, 0x5, 0x0, 0x1}, r3, 0xd, 0xffffffffffffffff, 0x3) fsetxattr$trusted_overlay_upper(r1, &(0x7f0000000580), &(0x7f00000005c0)={0x0, 0xfb, 0xfc, 0x6, 0x20, "38b933171cdf7c8854cf6114e6ad818e", "5d422532929b338c11abbea45f1d0d3dcdfca5d491eb369d670cbc1aab3d37d1a0c3796acd757b1894ca35b553e9aa71542c93a6e09b1b4d36a934db24eb58b7b759412e530b7051538b0ae4762a77027bc6c0bd57891cd614feb6f06522ddc0e56c799f3f515a6c8146fd74b081e4ead8518d38524c3e397be8d3be993047f885026f5349087f41b27388d7a06ae23443e852dc9195e85cbcb63eeeeda161646b3c44b2361435d25a019e6c9fa68813815bd28892cc22159410bb7f2402a879c1c94187fd0ea98978192058bf2a89e5b518aeeb4e0379f00824abeab72168fdf52060bef27efe"}, 0xfc, 0x2) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file2\x00', 0x0, 0x127) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x9}, 0xc, &(0x7f00000004c0)={&(0x7f0000000780)=ANY=[@ANYRESDEC, @ANYRES16=0x0, @ANYRES64, @ANYRES32=r0, @ANYBLOB="0c009900000000001f000000080000000041973f194e3e5031f407b6a3123daa5c622593dbc6db0984f94bc60dc9c09ad102fabf3f843fcb5f6b42a12b633c8de3f4c2eed043e3cca4580b7bf3ac779fa03b08cd884b9825f74d2fea538689bc9b4f17"], 0x30}, 0x1, 0x0, 0x0, 0x20048000}, 0x40) r6 = creat(&(0x7f0000000080)='./file0\x00', 0x0) epoll_ctl$EPOLL_CTL_MOD(r6, 0x3, r6, &(0x7f0000000440)={0x60000019}) syz_genetlink_get_family_id$tipc(&(0x7f0000000140), r6) 20:22:38 executing program 4: madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x12) mlock(&(0x7f0000ffb000/0x1000)=nil, 0x1000) fork() (fail_nth: 26) 20:22:38 executing program 1: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x46842, 0x0) io_setup(0x5, &(0x7f0000000080)) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x8800000) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x5, r3, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x2ba, 0x100, 0xb91}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f00000001c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7}}, './file1\x00'}) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) r5 = syz_io_uring_setup(0x3de4, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000180), &(0x7f0000002a40)) ioctl$BLKTRACESTART(r4, 0x1274, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x882c2, 0x0) fsync(r6) ioctl$FS_IOC_GETFSMAP(r6, 0xc0c0583b, &(0x7f0000000440)={0x0, 0x0, 0x5, 0x0, '\x00', [{0x7, 0x7fff, 0x5, 0xffff, 0x8, 0x401}, {0x9, 0x81, 0xfffe00000000, 0x1000, 0x2}], ['\x00', '\x00', '\x00', '\x00', '\x00']}) io_uring_enter(r5, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$FIGETBSZ(r5, 0x2, &(0x7f0000000240)) 20:22:38 executing program 6: sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x8) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x0, 0x0) pidfd_send_signal(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xb, 0x5, 0x2000000}, 0x0) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file2\x00', 0x40080, 0x127) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, 0x0, 0x800, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x1f}}}}, [@NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0xfffffffe}]}, 0x30}, 0x1, 0x0, 0x0, 0x22048905}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) open_by_handle_at(r1, &(0x7f0000000180)=@FILEID_NILFS_WITHOUT_PARENT={0x20, 0x61, {0xffffffff80000000, 0x8, 0x9, 0x9, 0x5}}, 0x0) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="1000000017010007002e2f664169"], 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r1) sendmsg$TIPC_NL_NAME_TABLE_GET(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000540)={0x18c, r2, 0x300, 0x70bd29, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2cd}]}, @TIPC_NLA_LINK={0x4c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x40}]}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x12}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5cf38ff5}]}, @TIPC_NLA_NET={0x6c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x24c5}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x847d}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x346}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x10001}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8000000000}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x100}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x30000}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xfff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}]}]}, 0x18c}, 0x1, 0x0, 0x0, 0x45}, 0x400) 20:22:38 executing program 3: statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f0000000200)=0x6, 0x4) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000340)=ANY=[@ANYBLOB="01080000011270c839284f30e054da4374340020000000000000", @ANYRES32, @ANYBLOB="ffa22106351700002e2f661c696c653000"]) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) pread64(0xffffffffffffffff, &(0x7f0000000400)=""/255, 0xff, 0x7eb9) dup(0xffffffffffffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0), 0x9) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000002e70000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) 20:22:38 executing program 7: creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="1400ffffff9700000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) [ 3111.733282] FAULT_INJECTION: forcing a failure. [ 3111.733282] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 3111.735057] CPU: 0 PID: 16337 Comm: syz-executor.4 Not tainted 5.10.194 #1 [ 3111.736033] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3111.737201] Call Trace: [ 3111.737590] dump_stack+0x107/0x167 [ 3111.738118] should_fail.cold+0x5/0xa [ 3111.738664] __alloc_pages_nodemask+0x182/0x600 [ 3111.739346] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3111.740128] ? __alloc_pages_slowpath.constprop.0+0x2130/0x2130 [ 3111.741018] alloc_pages_current+0x187/0x280 [ 3111.741687] __get_free_pages+0xc/0xa0 [ 3111.742258] pgd_alloc+0x84/0x4e0 [ 3111.742779] ? pgd_page_get_mm+0x40/0x40 [ 3111.743361] ? lockdep_init_map_type+0x2c7/0x780 [ 3111.744034] ? lockdep_init_map_type+0x2c7/0x780 [ 3111.744726] mm_init+0x670/0xab0 [ 3111.745208] copy_process+0x254d/0x7800 [ 3111.745777] ? __lock_acquire+0xbb1/0x5b00 [ 3111.746394] ? __cleanup_sighand+0xb0/0xb0 [ 3111.746995] ? lock_acquire+0x197/0x470 [ 3111.747577] ? find_held_lock+0x2c/0x110 [ 3111.748148] kernel_clone+0xe7/0x980 [ 3111.748675] ? lock_downgrade+0x6d0/0x6d0 [ 3111.749275] ? find_held_lock+0x2c/0x110 [ 3111.749855] ? create_io_thread+0xf0/0xf0 [ 3111.750445] ? ksys_write+0x12d/0x260 [ 3111.750997] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3111.751684] __do_sys_fork+0x8a/0xc0 [ 3111.752221] ? kernel_thread+0xf0/0xf0 [ 3111.752788] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3111.753519] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3111.754259] ? trace_hardirqs_on+0x5b/0x180 [ 3111.754866] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3111.755597] do_syscall_64+0x33/0x40 [ 3111.756124] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 3111.756840] RIP: 0033:0x7f4ded6f8b19 [ 3111.757364] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3111.759939] RSP: 002b:00007f4deac6e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 3111.761003] RAX: ffffffffffffffda RBX: 00007f4ded80bf60 RCX: 00007f4ded6f8b19 [ 3111.762013] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 3111.763016] RBP: 00007f4deac6e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3111.764018] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3111.765020] R13: 00007ffdd13eda0f R14: 00007f4deac6e300 R15: 0000000000022000 20:22:38 executing program 3: statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f0000000200)=0x6, 0x4) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000340)=ANY=[@ANYBLOB="01080000011270c839284f30e054da4374340020000000000000", @ANYRES32, @ANYBLOB="ffa22106351700002e2f661c696c653000"]) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) pread64(0xffffffffffffffff, &(0x7f0000000400)=""/255, 0xff, 0x7eb9) dup(0xffffffffffffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0), 0x9) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000003e80000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) 20:22:38 executing program 0: creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) pread64(0xffffffffffffffff, &(0x7f0000000400)=""/255, 0xff, 0x7eb9) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14e80300000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) 20:22:38 executing program 5: r0 = creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) open_by_handle_at(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="5000000000000004000000"], 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f0000000200)=0x6, 0x4) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000e00000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) 20:22:38 executing program 7: creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="1400000005c000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) 20:22:38 executing program 4: madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x12) mlock(&(0x7f0000ffb000/0x1000)=nil, 0x1000) fork() (fail_nth: 27) 20:22:38 executing program 3: statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f0000000200)=0x6, 0x4) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000340)=ANY=[@ANYBLOB="01080000011270c839284f30e054da4374340020000000000000", @ANYRES32, @ANYBLOB="ffa22106351700002e2f661c696c653000"]) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) pread64(0xffffffffffffffff, &(0x7f0000000400)=""/255, 0xff, 0x7eb9) dup(0xffffffffffffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0), 0x9) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000001f40000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) 20:22:38 executing program 7: creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="1400000005e600000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) [ 3112.063376] FAULT_INJECTION: forcing a failure. [ 3112.063376] name failslab, interval 1, probability 0, space 0, times 0 [ 3112.066324] CPU: 1 PID: 16379 Comm: syz-executor.4 Not tainted 5.10.194 #1 [ 3112.067840] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3112.069669] Call Trace: [ 3112.070257] dump_stack+0x107/0x167 [ 3112.071062] should_fail.cold+0x5/0xa [ 3112.071899] ? vm_area_dup+0x78/0x290 [ 3112.072741] should_failslab+0x5/0x20 [ 3112.073593] kmem_cache_alloc+0x5b/0x310 [ 3112.074512] vm_area_dup+0x78/0x290 [ 3112.075341] ? __lock_acquire+0xbb1/0x5b00 [ 3112.076311] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3112.077460] ? SOFTIRQ_verbose+0x10/0x10 [ 3112.078386] ? lock_acquire+0x197/0x470 [ 3112.079248] ? copy_process+0x25d6/0x7800 [ 3112.080184] ? vm_area_alloc+0x110/0x110 [ 3112.081064] ? find_held_lock+0x2c/0x110 [ 3112.081987] ? get_mm_exe_file+0x139/0x310 [ 3112.082910] ? lock_downgrade+0x6d0/0x6d0 [ 3112.083838] ? down_write_nested+0xe4/0x160 [ 3112.084773] ? rwsem_down_write_slowpath+0xc30/0xc30 [ 3112.085913] ? get_mm_exe_file+0x162/0x310 [ 3112.086828] copy_process+0x291b/0x7800 [ 3112.087716] ? __lock_acquire+0xbb1/0x5b00 [ 3112.088661] ? __cleanup_sighand+0xb0/0xb0 [ 3112.089635] ? lock_acquire+0x197/0x470 [ 3112.090506] ? find_held_lock+0x2c/0x110 [ 3112.091393] kernel_clone+0xe7/0x980 [ 3112.092211] ? lock_downgrade+0x6d0/0x6d0 [ 3112.093107] ? find_held_lock+0x2c/0x110 [ 3112.094005] ? create_io_thread+0xf0/0xf0 [ 3112.094910] ? ksys_write+0x12d/0x260 [ 3112.095761] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3112.096813] __do_sys_fork+0x8a/0xc0 [ 3112.097642] ? kernel_thread+0xf0/0xf0 [ 3112.098518] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3112.099675] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3112.100813] ? trace_hardirqs_on+0x5b/0x180 [ 3112.101794] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3112.102933] do_syscall_64+0x33/0x40 [ 3112.103767] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 3112.104882] RIP: 0033:0x7f4ded6f8b19 [ 3112.105715] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3112.109772] RSP: 002b:00007f4deac6e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 3112.111440] RAX: ffffffffffffffda RBX: 00007f4ded80bf60 RCX: 00007f4ded6f8b19 [ 3112.113011] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 3112.114610] RBP: 00007f4deac6e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3112.116162] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3112.117735] R13: 00007ffdd13eda0f R14: 00007f4deac6e300 R15: 0000000000022000 20:22:38 executing program 3: statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f0000000200)=0x6, 0x4) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000340)=ANY=[@ANYBLOB="01080000011270c839284f30e054da4374340020000000000000", @ANYRES32, @ANYBLOB="ffa22106351700002e2f661c696c653000"]) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) pread64(0xffffffffffffffff, &(0x7f0000000400)=""/255, 0xff, 0x7eb9) dup(0xffffffffffffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0), 0x9) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000fd0000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) 20:22:38 executing program 7: creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="1400000002e700000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) 20:22:53 executing program 1: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x46842, 0x0) io_setup(0x5, &(0x7f0000000080)) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x8800000) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x5, r3, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0xa00, 0x100, 0xb91}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f00000001c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7}}, './file1\x00'}) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) r5 = syz_io_uring_setup(0x3de4, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000180), &(0x7f0000002a40)) ioctl$BLKTRACESTART(r4, 0x1274, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x882c2, 0x0) fsync(r6) ioctl$FS_IOC_GETFSMAP(r6, 0xc0c0583b, &(0x7f0000000440)={0x0, 0x0, 0x5, 0x0, '\x00', [{0x7, 0x7fff, 0x5, 0xffff, 0x8, 0x401}, {0x9, 0x81, 0xfffe00000000, 0x1000, 0x2}], ['\x00', '\x00', '\x00', '\x00', '\x00']}) io_uring_enter(r5, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$FIGETBSZ(r5, 0x2, &(0x7f0000000240)) 20:22:53 executing program 0: creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) pread64(0xffffffffffffffff, &(0x7f0000000400)=""/255, 0xff, 0x7eb9) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14c00500000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) 20:22:53 executing program 3: statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f0000000200)=0x6, 0x4) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000340)=ANY=[@ANYBLOB="01080000011270c839284f30e054da4374340020000000000000", @ANYRES32, @ANYBLOB="ffa22106351700002e2f661c696c653000"]) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) pread64(0xffffffffffffffff, &(0x7f0000000400)=""/255, 0xff, 0x7eb9) dup(0xffffffffffffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0), 0x9) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="1497ffffff0000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) 20:22:53 executing program 5: r0 = creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) open_by_handle_at(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="5000000000000004000000"], 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f0000000200)=0x6, 0x4) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000002000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) 20:22:53 executing program 7: creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="1400000003e800000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) 20:22:53 executing program 6: sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x4, 0x80, 0x6a, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x0, 0x0) pidfd_send_signal(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xb, 0x5, 0x2000000}, 0x0) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file2\x00', 0x40080, 0x127) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, 0x0, 0x800, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x1f}}}}, [@NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0xfffffffe}]}, 0x30}, 0x1, 0x0, 0x0, 0x20048000}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="1000000017010007002e2f664169"], 0x10) 20:22:53 executing program 4: madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x12) mlock(&(0x7f0000ffb000/0x1000)=nil, 0x1000) fork() (fail_nth: 28) 20:22:53 executing program 2: sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x0, 0x0) pidfd_send_signal(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xb, 0x5, 0x2000000}, 0x0) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file2\x00', 0x0, 0x127) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, 0x0, 0x800, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x1f}}}}, [@NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x20048000}, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r0, &(0x7f0000000440)={0x60000019}) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x100000001) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), r0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x30, r3, 0x800, 0x70bd27, 0x25dfdbfb, {{}, {}, {0x14, 0x19, {0x3ff, 0x5, 0x97c, 0x7}}}, [""]}, 0x30}, 0x1, 0x0, 0x0, 0x60041}, 0x40) syz_genetlink_get_family_id$tipc(&(0x7f0000000140), r0) [ 3126.982930] FAULT_INJECTION: forcing a failure. [ 3126.982930] name failslab, interval 1, probability 0, space 0, times 0 [ 3126.985503] CPU: 0 PID: 16409 Comm: syz-executor.4 Not tainted 5.10.194 #1 [ 3126.987069] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3126.988931] Call Trace: [ 3126.989541] dump_stack+0x107/0x167 [ 3126.990381] should_fail.cold+0x5/0xa [ 3126.991233] ? create_object.isra.0+0x3a/0xa20 [ 3126.992249] should_failslab+0x5/0x20 [ 3126.993097] kmem_cache_alloc+0x5b/0x310 [ 3126.994026] create_object.isra.0+0x3a/0xa20 [ 3126.995006] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3126.996141] kmem_cache_alloc+0x159/0x310 [ 3126.997074] vm_area_dup+0x78/0x290 [ 3126.997912] ? __lock_acquire+0xbb1/0x5b00 [ 3126.998878] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3127.000044] ? SOFTIRQ_verbose+0x10/0x10 [ 3127.000950] ? lock_acquire+0x197/0x470 [ 3127.001854] ? copy_process+0x25d6/0x7800 [ 3127.002785] ? vm_area_alloc+0x110/0x110 [ 3127.003685] ? find_held_lock+0x2c/0x110 [ 3127.004595] ? get_mm_exe_file+0x139/0x310 [ 3127.005537] ? lock_downgrade+0x6d0/0x6d0 [ 3127.006471] ? down_write_nested+0xe4/0x160 [ 3127.007426] ? rwsem_down_write_slowpath+0xc30/0xc30 [ 3127.008556] ? get_mm_exe_file+0x162/0x310 [ 3127.009495] copy_process+0x291b/0x7800 [ 3127.010387] ? __lock_acquire+0xbb1/0x5b00 [ 3127.011359] ? __cleanup_sighand+0xb0/0xb0 [ 3127.012304] ? lock_acquire+0x197/0x470 [ 3127.013194] ? find_held_lock+0x2c/0x110 [ 3127.014118] kernel_clone+0xe7/0x980 [ 3127.014946] ? lock_downgrade+0x6d0/0x6d0 [ 3127.015863] ? find_held_lock+0x2c/0x110 [ 3127.016763] ? create_io_thread+0xf0/0xf0 [ 3127.017693] ? ksys_write+0x12d/0x260 [ 3127.018564] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3127.019657] __do_sys_fork+0x8a/0xc0 [ 3127.020494] ? kernel_thread+0xf0/0xf0 [ 3127.021391] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3127.022586] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3127.023743] ? trace_hardirqs_on+0x5b/0x180 [ 3127.024719] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3127.025896] do_syscall_64+0x33/0x40 [ 3127.026743] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 3127.027898] RIP: 0033:0x7f4ded6f8b19 [ 3127.028741] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3127.032937] RSP: 002b:00007f4deac6e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 3127.034680] RAX: ffffffffffffffda RBX: 00007f4ded80bf60 RCX: 00007f4ded6f8b19 [ 3127.036316] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 3127.037963] RBP: 00007f4deac6e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3127.039606] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3127.041244] R13: 00007ffdd13eda0f R14: 00007f4deac6e300 R15: 0000000000022000 20:22:53 executing program 3: statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f0000000200)=0x6, 0x4) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000340)=ANY=[@ANYBLOB="01080000011270c839284f30e054da4374340020000000000000", @ANYRES32, @ANYBLOB="ffa22106351700002e2f661c696c653000"]) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) pread64(0xffffffffffffffff, &(0x7f0000000400)=""/255, 0xff, 0x7eb9) dup(0xffffffffffffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0), 0x9) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000080000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) 20:22:53 executing program 6: sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x8) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x0, 0x0) pidfd_send_signal(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xb, 0x5, 0x2000000}, 0x0) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file2\x00', 0x40080, 0x127) socket$inet6_udp(0xa, 0x2, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x100000001) openat(r2, &(0x7f00000001c0)='./file1\x00', 0x2b00, 0x28) sendfile(r0, r1, 0x0, 0x100000001) signalfd4(r0, &(0x7f0000000180), 0x8, 0xc0400) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, 0x0, 0x800, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x1f}}}}, [@NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0xfffffffe}]}, 0x30}, 0x1, 0x0, 0x0, 0x20048000}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="1000000017010007002e2f664169"], 0x10) 20:22:53 executing program 7: creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="1400000001f400000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) 20:22:53 executing program 0: creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) pread64(0xffffffffffffffff, &(0x7f0000000400)=""/255, 0xff, 0x7eb9) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14e60500000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) 20:23:07 executing program 6: sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xd086}, 0x0, 0xb, 0xffffffffffffffff, 0x8) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x0, 0x0) pidfd_send_signal(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xb, 0x5, 0x2000000}, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f00000002c0)='./file2\x00', 0x40080, 0x127) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000825bd05000000df1a4400e9c06f36000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900000000001f00000008000d00feffffff"], 0x30}, 0x1, 0x0, 0x0, 0x20048000}, 0x0) getsockname$unix(r0, &(0x7f0000000340), &(0x7f00000003c0)=0x6e) syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x34, 0x0, 0x2, 0x70bd2d, 0x25dfdbfc, {}, [@ETHTOOL_A_COALESCE_TX_MAX_FRAMES={0x8, 0x7, 0x1}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_RX={0x5}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_IRQ={0x8, 0x9, 0x7}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_HIGH={0x8, 0x16, 0x140000}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f00000001c0)={@remote}, 0x14) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="1000000017010007002e2f664169"], 0x10) 20:23:07 executing program 2: sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x0, 0x0) pidfd_send_signal(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xb, 0x5, 0x2000000}, 0x0) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file2\x00', 0x0, 0x127) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, 0x0, 0x800, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x1f}}}}, [@NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x20048000}, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) creat(&(0x7f0000000280)='./file2\x00', 0x1) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r0, &(0x7f0000000440)={0x60000019}) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r1, 0x0) setxattr$system_posix_acl(&(0x7f0000000180)='./file2\x00', &(0x7f00000001c0)='system.posix_acl_default\x00', &(0x7f0000000200)={{}, {0x1, 0x6}, [{0x2, 0x0, 0xee00}, {0x2, 0x2, r1}, {0x2, 0x3, 0xee00}, {0x2, 0x5, 0xee00}], {0x4, 0x2}, [{0x8, 0x2, 0xee01}, {0x8, 0x1}], {}, {0x20, 0x3}}, 0x54, 0x2) syz_genetlink_get_family_id$tipc(&(0x7f0000000140), r0) 20:23:07 executing program 4: madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x12) mlock(&(0x7f0000ffb000/0x1000)=nil, 0x1000) fork() (fail_nth: 29) 20:23:07 executing program 1: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x46842, 0x0) io_setup(0x5, &(0x7f0000000080)) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x8800000) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x5, r3, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0xb91, 0x100, 0xb91}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f00000001c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7}}, './file1\x00'}) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) r5 = syz_io_uring_setup(0x3de4, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000180), &(0x7f0000002a40)) ioctl$BLKTRACESTART(r4, 0x1274, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x882c2, 0x0) fsync(r6) ioctl$FS_IOC_GETFSMAP(r6, 0xc0c0583b, &(0x7f0000000440)={0x0, 0x0, 0x5, 0x0, '\x00', [{0x7, 0x7fff, 0x5, 0xffff, 0x8, 0x401}, {0x9, 0x81, 0xfffe00000000, 0x1000, 0x2}], ['\x00', '\x00', '\x00', '\x00', '\x00']}) io_uring_enter(r5, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$FIGETBSZ(r5, 0x2, &(0x7f0000000240)) 20:23:07 executing program 3: statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f0000000200)=0x6, 0x4) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000340)=ANY=[@ANYBLOB="01080000011270c839284f30e054da4374340020000000000000", @ANYRES32, @ANYBLOB="ffa22106351700002e2f661c696c653000"]) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) pread64(0xffffffffffffffff, &(0x7f0000000400)=""/255, 0xff, 0x7eb9) dup(0xffffffffffffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0), 0x9) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000100000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) 20:23:07 executing program 5: r0 = creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) open_by_handle_at(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="5000000000000004000000"], 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f0000000200)=0x6, 0x4) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000006000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) 20:23:07 executing program 7: creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="1400000000fd00000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) 20:23:07 executing program 0: creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) pread64(0xffffffffffffffff, &(0x7f0000000400)=""/255, 0xff, 0x7eb9) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000a00000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) [ 3141.059562] FAULT_INJECTION: forcing a failure. [ 3141.059562] name failslab, interval 1, probability 0, space 0, times 0 [ 3141.062078] CPU: 1 PID: 16469 Comm: syz-executor.4 Not tainted 5.10.194 #1 [ 3141.063563] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3141.065336] Call Trace: [ 3141.065911] dump_stack+0x107/0x167 [ 3141.066707] should_fail.cold+0x5/0xa [ 3141.067532] ? vm_area_dup+0x78/0x290 [ 3141.068359] should_failslab+0x5/0x20 [ 3141.069180] kmem_cache_alloc+0x5b/0x310 [ 3141.070073] vm_area_dup+0x78/0x290 [ 3141.070874] ? avc_has_perm_noaudit+0x1c9/0x3e0 [ 3141.071876] ? lock_downgrade+0x6d0/0x6d0 [ 3141.072757] ? copy_page_range+0x24e9/0x3810 [ 3141.073722] ? avc_has_perm_noaudit+0x1f7/0x3e0 [ 3141.074753] ? avc_has_extended_perms+0xf40/0xf40 [ 3141.075808] ? vm_area_alloc+0x110/0x110 [ 3141.076682] ? find_held_lock+0x2c/0x110 [ 3141.077571] ? selinux_vm_enough_memory+0x114/0x180 [ 3141.078654] ? selinux_sb_statfs+0x250/0x250 [ 3141.079610] ? percpu_counter_add_batch+0x8b/0x140 [ 3141.080672] ? __vm_enough_memory+0x184/0x360 [ 3141.081640] ? security_vm_enough_memory_mm+0x8b/0xc0 [ 3141.082764] copy_process+0x291b/0x7800 [ 3141.083663] ? __cleanup_sighand+0xb0/0xb0 [ 3141.084586] ? lock_acquire+0x197/0x470 [ 3141.085452] ? find_held_lock+0x2c/0x110 [ 3141.086353] kernel_clone+0xe7/0x980 [ 3141.087158] ? lock_downgrade+0x6d0/0x6d0 [ 3141.088053] ? find_held_lock+0x2c/0x110 [ 3141.088926] ? create_io_thread+0xf0/0xf0 [ 3141.089827] ? ksys_write+0x12d/0x260 [ 3141.090668] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3141.091719] __do_sys_fork+0x8a/0xc0 [ 3141.092517] ? kernel_thread+0xf0/0xf0 [ 3141.093363] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3141.094490] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3141.095591] ? trace_hardirqs_on+0x5b/0x180 [ 3141.096514] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3141.097615] do_syscall_64+0x33/0x40 [ 3141.098429] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 3141.099523] RIP: 0033:0x7f4ded6f8b19 [ 3141.100320] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3141.104221] RSP: 002b:00007f4deac6e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 3141.105844] RAX: ffffffffffffffda RBX: 00007f4ded80bf60 RCX: 00007f4ded6f8b19 [ 3141.107360] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 3141.108876] RBP: 00007f4deac6e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3141.110403] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3141.111919] R13: 00007ffdd13eda0f R14: 00007f4deac6e300 R15: 0000000000022000 20:23:07 executing program 7: creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="140097ffffff00000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) 20:23:07 executing program 5: r0 = creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) open_by_handle_at(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="5000000000000004000000"], 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f0000000200)=0x6, 0x4) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="1400000000ffffff9700000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) 20:23:07 executing program 3: statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f0000000200)=0x6, 0x4) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000340)=ANY=[@ANYBLOB="01080000011270c839284f30e054da4374340020000000000000", @ANYRES32, @ANYBLOB="ffa22106351700002e2f661c696c653000"]) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) pread64(0xffffffffffffffff, &(0x7f0000000400)=""/255, 0xff, 0x7eb9) dup(0xffffffffffffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0), 0x9) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000200000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) 20:23:07 executing program 7: creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000800000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) 20:23:07 executing program 5: r0 = creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) open_by_handle_at(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="5000000000000004000000"], 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f0000000200)=0x6, 0x4) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="1400000000000005c000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) 20:23:07 executing program 4: madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x12) mlock(&(0x7f0000ffb000/0x1000)=nil, 0x1000) fork() (fail_nth: 30) 20:23:07 executing program 6: sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x8) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x0, 0x0) pidfd_send_signal(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xb, 0x5, 0x2000000}, 0x0) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file2\x00', 0x40080, 0x127) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, 0x0, 0x800, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x1f}}}}, [@NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0xfffffffe}]}, 0x30}, 0x1, 0x0, 0x0, 0x20048000}, 0x0) socketpair(0x1, 0x4, 0x80000000, &(0x7f0000000180)={0xffffffffffffffff}) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f00000001c0)={@local, 0xd}) syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="100000001701ffffffff00000000"], 0x10) 20:23:07 executing program 0: creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) pread64(0xffffffffffffffff, &(0x7f0000000400)=""/255, 0xff, 0x7eb9) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14030d00000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) [ 3141.287609] FAULT_INJECTION: forcing a failure. [ 3141.287609] name failslab, interval 1, probability 0, space 0, times 0 [ 3141.289010] CPU: 0 PID: 16499 Comm: syz-executor.4 Not tainted 5.10.194 #1 [ 3141.289766] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3141.290681] Call Trace: [ 3141.290987] dump_stack+0x107/0x167 [ 3141.291391] should_fail.cold+0x5/0xa [ 3141.291818] ? create_object.isra.0+0x3a/0xa20 [ 3141.292323] should_failslab+0x5/0x20 [ 3141.292743] kmem_cache_alloc+0x5b/0x310 [ 3141.293181] create_object.isra.0+0x3a/0xa20 [ 3141.293667] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3141.294279] kmem_cache_alloc+0x159/0x310 [ 3141.294742] vm_area_dup+0x78/0x290 [ 3141.295149] ? __lock_acquire+0xbb1/0x5b00 [ 3141.295610] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3141.296185] ? SOFTIRQ_verbose+0x10/0x10 [ 3141.296617] ? lock_acquire+0x197/0x470 [ 3141.297052] ? copy_process+0x25d6/0x7800 [ 3141.297494] ? vm_area_alloc+0x110/0x110 [ 3141.297937] ? find_held_lock+0x2c/0x110 [ 3141.298384] ? get_mm_exe_file+0x139/0x310 [ 3141.298852] ? lock_downgrade+0x6d0/0x6d0 [ 3141.299292] ? down_write_nested+0xe4/0x160 [ 3141.299773] ? rwsem_down_write_slowpath+0xc30/0xc30 [ 3141.300332] ? get_mm_exe_file+0x162/0x310 [ 3141.300798] copy_process+0x291b/0x7800 [ 3141.301234] ? __lock_acquire+0xbb1/0x5b00 [ 3141.301719] ? __cleanup_sighand+0xb0/0xb0 [ 3141.302188] ? lock_acquire+0x197/0x470 [ 3141.302632] ? find_held_lock+0x2c/0x110 [ 3141.303071] kernel_clone+0xe7/0x980 [ 3141.303483] ? lock_downgrade+0x6d0/0x6d0 [ 3141.303924] ? find_held_lock+0x2c/0x110 [ 3141.304367] ? create_io_thread+0xf0/0xf0 [ 3141.304818] ? ksys_write+0x12d/0x260 [ 3141.305242] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3141.305757] __do_sys_fork+0x8a/0xc0 [ 3141.306174] ? kernel_thread+0xf0/0xf0 [ 3141.306601] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3141.307181] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3141.307730] ? trace_hardirqs_on+0x5b/0x180 [ 3141.308207] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3141.308750] do_syscall_64+0x33/0x40 [ 3141.309162] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 3141.309705] RIP: 0033:0x7f4ded6f8b19 [ 3141.310135] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3141.312154] RSP: 002b:00007f4deac6e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 3141.312965] RAX: ffffffffffffffda RBX: 00007f4ded80bf60 RCX: 00007f4ded6f8b19 [ 3141.313741] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 3141.314532] RBP: 00007f4deac6e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3141.315310] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3141.316092] R13: 00007ffdd13eda0f R14: 00007f4deac6e300 R15: 0000000000022000 20:23:07 executing program 7: creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000001000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) 20:23:07 executing program 1: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x46842, 0x0) io_setup(0x5, &(0x7f0000000080)) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x8800000) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x5, r3, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x2000, 0x100, 0xb91}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f00000001c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7}}, './file1\x00'}) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) r5 = syz_io_uring_setup(0x3de4, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000180), &(0x7f0000002a40)) ioctl$BLKTRACESTART(r4, 0x1274, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x882c2, 0x0) fsync(r6) ioctl$FS_IOC_GETFSMAP(r6, 0xc0c0583b, &(0x7f0000000440)={0x0, 0x0, 0x5, 0x0, '\x00', [{0x7, 0x7fff, 0x5, 0xffff, 0x8, 0x401}, {0x9, 0x81, 0xfffe00000000, 0x1000, 0x2}], ['\x00', '\x00', '\x00', '\x00', '\x00']}) io_uring_enter(r5, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$FIGETBSZ(r5, 0x2, &(0x7f0000000240)) 20:23:07 executing program 3: statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f0000000200)=0x6, 0x4) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000340)=ANY=[@ANYBLOB="01080000011270c839284f30e054da4374340020000000000000", @ANYRES32, @ANYBLOB="ffa22106351700002e2f661c696c653000"]) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) pread64(0xffffffffffffffff, &(0x7f0000000400)=""/255, 0xff, 0x7eb9) dup(0xffffffffffffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0), 0x9) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000300000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) 20:23:21 executing program 1: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x46842, 0x0) io_setup(0x5, &(0x7f0000000080)) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x8800000) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x5, r3, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x4000, 0x100, 0xb91}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f00000001c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7}}, './file1\x00'}) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) r5 = syz_io_uring_setup(0x3de4, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000180), &(0x7f0000002a40)) ioctl$BLKTRACESTART(r4, 0x1274, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x882c2, 0x0) fsync(r6) ioctl$FS_IOC_GETFSMAP(r6, 0xc0c0583b, &(0x7f0000000440)={0x0, 0x0, 0x5, 0x0, '\x00', [{0x7, 0x7fff, 0x5, 0xffff, 0x8, 0x401}, {0x9, 0x81, 0xfffe00000000, 0x1000, 0x2}], ['\x00', '\x00', '\x00', '\x00', '\x00']}) io_uring_enter(r5, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$FIGETBSZ(r5, 0x2, &(0x7f0000000240)) 20:23:21 executing program 2: sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x0, 0x0) pidfd_send_signal(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xb, 0x5, 0x2000000}, 0x0) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file2\x00', 0x0, 0x127) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = dup(r2) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="feff00002784c82adfd13177d55525b187988db5201fcb6859433142f882d4af033d941ec7bd3ec76409d4ba379f7e7a3775b215c71b493d8c065bd2a4f5034eac87bbdc3cbb9a21ec16834733d77478b483aa338ba58c7cecbb2a3f0853d781ca7d4ce02beb6bdc927d8c4f7ca2cda453cab93eb1570287e2a82455e7fd47d86a1d8c3de4b48007889e808230ef51985bd2862f85d7a097", @ANYRES16=0x0, @ANYBLOB="000825bd7000ffdbdf25440000000c009900000000001f00000008000d0000000000"], 0x28}, 0x1, 0x0, 0x0, 0x20048000}, 0x0) r5 = creat(&(0x7f0000000080)='./file0\x00', 0x0) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r5, &(0x7f0000000440)={0x60000019}) syz_genetlink_get_family_id$tipc(&(0x7f0000000140), r5) [ 3154.982324] FAULT_INJECTION: forcing a failure. [ 3154.982324] name failslab, interval 1, probability 0, space 0, times 0 [ 3154.984892] CPU: 1 PID: 16533 Comm: syz-executor.4 Not tainted 5.10.194 #1 [ 3154.986465] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3154.988294] Call Trace: 20:23:21 executing program 3: statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f0000000200)=0x6, 0x4) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000340)=ANY=[@ANYBLOB="01080000011270c839284f30e054da4374340020000000000000", @ANYRES32, @ANYBLOB="ffa22106351700002e2f661c696c653000"]) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) pread64(0xffffffffffffffff, &(0x7f0000000400)=""/255, 0xff, 0x7eb9) dup(0xffffffffffffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0), 0x9) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000400000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) 20:23:21 executing program 5: r0 = creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) open_by_handle_at(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="5000000000000004000000"], 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f0000000200)=0x6, 0x4) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="1400000000000005e600000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) 20:23:21 executing program 0: creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) pread64(0xffffffffffffffff, &(0x7f0000000400)=""/255, 0xff, 0x7eb9) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000e00000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) 20:23:21 executing program 4: madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x12) mlock(&(0x7f0000ffb000/0x1000)=nil, 0x1000) fork() (fail_nth: 31) 20:23:21 executing program 7: creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000002000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) [ 3154.988894] dump_stack+0x107/0x167 [ 3154.989986] should_fail.cold+0x5/0xa [ 3154.990842] ? vm_area_dup+0x78/0x290 [ 3154.991688] should_failslab+0x5/0x20 [ 3154.992531] kmem_cache_alloc+0x5b/0x310 [ 3154.993441] vm_area_dup+0x78/0x290 [ 3154.994266] ? avc_has_perm_noaudit+0x1c9/0x3e0 [ 3154.995303] ? lock_downgrade+0x6d0/0x6d0 [ 3154.996220] ? copy_page_range+0x24e9/0x3810 [ 3154.997225] ? avc_has_perm_noaudit+0x1f7/0x3e0 20:23:21 executing program 6: sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x1e114, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0x14}, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x0, 0x0) pidfd_send_signal(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xb, 0x5, 0x2000000}, 0x0) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file2\x00', 0x40080, 0x127) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, 0x0, 0x800, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x1f}}}}, [@NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0xfffffffe}]}, 0x30}, 0x1, 0x0, 0x0, 0x20048000}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="1000000017010007002e2f664169"], 0x10) [ 3154.998269] ? avc_has_extended_perms+0xf40/0xf40 [ 3154.999436] ? vm_area_alloc+0x110/0x110 [ 3155.000335] ? find_held_lock+0x2c/0x110 [ 3155.001239] ? selinux_vm_enough_memory+0x114/0x180 [ 3155.002366] ? selinux_sb_statfs+0x250/0x250 [ 3155.003345] ? percpu_counter_add_batch+0x8b/0x140 [ 3155.004442] ? __vm_enough_memory+0x184/0x360 [ 3155.005431] ? security_vm_enough_memory_mm+0x8b/0xc0 [ 3155.006591] copy_process+0x291b/0x7800 [ 3155.007512] ? __cleanup_sighand+0xb0/0xb0 [ 3155.008458] ? lock_acquire+0x197/0x470 [ 3155.009344] ? find_held_lock+0x2c/0x110 [ 3155.010258] kernel_clone+0xe7/0x980 [ 3155.011081] ? lock_downgrade+0x6d0/0x6d0 [ 3155.011994] ? find_held_lock+0x2c/0x110 [ 3155.012890] ? create_io_thread+0xf0/0xf0 [ 3155.013812] ? ksys_write+0x12d/0x260 [ 3155.014679] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3155.015749] __do_sys_fork+0x8a/0xc0 [ 3155.016560] ? kernel_thread+0xf0/0xf0 [ 3155.017435] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3155.018583] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3155.019714] ? trace_hardirqs_on+0x5b/0x180 [ 3155.020655] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3155.021790] do_syscall_64+0x33/0x40 [ 3155.022613] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 3155.023734] RIP: 0033:0x7f4ded6f8b19 [ 3155.024547] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3155.028569] RSP: 002b:00007f4deac6e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 3155.030232] RAX: ffffffffffffffda RBX: 00007f4ded80bf60 RCX: 00007f4ded6f8b19 [ 3155.031792] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 3155.033345] RBP: 00007f4deac6e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3155.034908] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3155.036458] R13: 00007ffdd13eda0f R14: 00007f4deac6e300 R15: 0000000000022000 20:23:21 executing program 2: creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) pread64(0xffffffffffffffff, &(0x7f0000000400)=""/255, 0xff, 0x7eb9) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14e80300000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) 20:23:21 executing program 7: creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000003000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) 20:23:21 executing program 5: r0 = creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) open_by_handle_at(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="5000000000000004000000"], 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f0000000200)=0x6, 0x4) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="1400000000000002e700000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) 20:23:21 executing program 3: statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f0000000200)=0x6, 0x4) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000340)=ANY=[@ANYBLOB="01080000011270c839284f30e054da4374340020000000000000", @ANYRES32, @ANYBLOB="ffa22106351700002e2f661c696c653000"]) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) pread64(0xffffffffffffffff, &(0x7f0000000400)=""/255, 0xff, 0x7eb9) dup(0xffffffffffffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0), 0x9) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000a00000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) 20:23:21 executing program 0: creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) pread64(0xffffffffffffffff, &(0x7f0000000400)=""/255, 0xff, 0x7eb9) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14002000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) 20:23:21 executing program 6: sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mknod$loop(&(0x7f0000000180)='./file0\x00', 0xcc1b, 0x0) r1 = openat(r0, &(0x7f00000001c0)='./file2\x00', 0x10000, 0x4) io_submit(0x0, 0x2, &(0x7f00000003c0)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x6, 0x3ff, r1, &(0x7f0000000200)="b0d253020acbbf881ff2de9ef7b4dbd40c297d7d0e6db1f9d83236863219f84144f70103e673be73973a88d337c5630093676672502a3216d50728dfb98f69f15b3d5a2895f0ebf772", 0x49, 0xfffffffffffffff8, 0x0, 0x2}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x2, 0x8, 0xffffffffffffffff, &(0x7f0000000300)="3f0814754ebd4801e6ee13cf238869ec119dc6993ca6f55a33fa8dfc59d600cf1610bb10224b75f1ced22be6239f0d8be60fd35148536bba54d0f41552c69c967ae68243944d26e27619bdfb", 0x4c, 0x8}]) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x0, 0x0) pidfd_send_signal(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xb, 0x5, 0x2000000}, 0x0) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file2\x00', 0x40080, 0x127) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, 0x0, 0x800, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x1f}}}}, [@NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0xfffffffe}]}, 0x30}, 0x1, 0x0, 0x0, 0x20048000}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="1000000017010007002e2f664169"], 0x10) 20:23:35 executing program 4: madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x12) mlock(&(0x7f0000ffb000/0x1000)=nil, 0x1000) fork() (fail_nth: 32) 20:23:35 executing program 7: creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000004000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) 20:23:35 executing program 6: sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x0, 0x0) stat(&(0x7f0000000540)='./file1\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000600)={{{@in=@dev, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@local}}, &(0x7f0000000700)=0xe8) mount$9p_xen(&(0x7f0000000280), &(0x7f00000003c0)='./file2\x00', &(0x7f0000000400), 0x80800, &(0x7f0000000740)={'trans=xen,', {[{@dfltuid={'dfltuid', 0x3d, r0}}, {@posixacl}, {@uname={'uname', 0x3d, '('}}], [{@obj_user={'obj_user', 0x3d, '^\xb8[@]+]\\,&#:+,({'}}, {@uid_gt={'uid>', r1}}, {@obj_type={'obj_type', 0x3d, 'TIPC\x00'}}]}}) pidfd_send_signal(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xb, 0x5, 0x2000000}, 0x0) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file2\x00', 0x40080, 0x127) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, 0x0, 0x800, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x1f}}}}, [@NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0xfffffffe}]}, 0x30}, 0x1, 0x0, 0x0, 0x20048000}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x100000001) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r2, 0x80286722, &(0x7f0000000240)={&(0x7f0000000300)=""/148, 0x94, 0xaa45, 0x800}) syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="1000000017010007002e2f664169e29139419e678adb8dc1b0ee7e14dd33d158353365aecfa86963e76e5c94af171b79cbc3ca854c354165a11f7d3a447f6bd0334fdbc253e005cb728873293e94942d4573ec00d16571d1d34a400781ba118379755da2f0b1ef8914c704d9b2057d6f83812de76bcfb691c2758b752b00b9b9ff2f7d4c1f9194aaaf4e"], 0x10) 20:23:35 executing program 5: r0 = creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) open_by_handle_at(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="5000000000000004000000"], 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f0000000200)=0x6, 0x4) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="1400000000000003e800000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) [ 3169.132041] FAULT_INJECTION: forcing a failure. [ 3169.132041] name failslab, interval 1, probability 0, space 0, times 0 [ 3169.133343] CPU: 0 PID: 16582 Comm: syz-executor.4 Not tainted 5.10.194 #1 [ 3169.134066] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3169.134959] Call Trace: [ 3169.135248] dump_stack+0x107/0x167 [ 3169.135635] should_fail.cold+0x5/0xa [ 3169.136044] ? create_object.isra.0+0x3a/0xa20 [ 3169.136536] should_failslab+0x5/0x20 [ 3169.136950] kmem_cache_alloc+0x5b/0x310 [ 3169.137385] create_object.isra.0+0x3a/0xa20 [ 3169.137854] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3169.138403] kmem_cache_alloc+0x159/0x310 [ 3169.138844] vm_area_dup+0x78/0x290 [ 3169.139232] ? avc_has_perm_noaudit+0x1c9/0x3e0 [ 3169.139730] ? lock_downgrade+0x6d0/0x6d0 [ 3169.140167] ? copy_page_range+0x24e9/0x3810 [ 3169.140639] ? avc_has_perm_noaudit+0x1f7/0x3e0 [ 3169.141134] ? avc_has_extended_perms+0xf40/0xf40 [ 3169.141652] ? vm_area_alloc+0x110/0x110 [ 3169.142079] ? find_held_lock+0x2c/0x110 [ 3169.142536] ? selinux_vm_enough_memory+0x114/0x180 [ 3169.143078] ? selinux_sb_statfs+0x250/0x250 [ 3169.143557] ? percpu_counter_add_batch+0x8b/0x140 [ 3169.144084] ? __vm_enough_memory+0x184/0x360 [ 3169.144563] ? security_vm_enough_memory_mm+0x8b/0xc0 [ 3169.145119] copy_process+0x291b/0x7800 [ 3169.145562] ? __cleanup_sighand+0xb0/0xb0 [ 3169.146015] ? lock_acquire+0x197/0x470 [ 3169.146448] ? find_held_lock+0x2c/0x110 [ 3169.146879] kernel_clone+0xe7/0x980 [ 3169.147274] ? lock_downgrade+0x6d0/0x6d0 [ 3169.147715] ? find_held_lock+0x2c/0x110 [ 3169.148155] ? create_io_thread+0xf0/0xf0 [ 3169.148597] ? ksys_write+0x12d/0x260 [ 3169.149011] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3169.149525] __do_sys_fork+0x8a/0xc0 [ 3169.149923] ? kernel_thread+0xf0/0xf0 [ 3169.150354] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3169.150911] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3169.151459] ? trace_hardirqs_on+0x5b/0x180 [ 3169.151916] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3169.152473] do_syscall_64+0x33/0x40 [ 3169.152868] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 3169.153412] RIP: 0033:0x7f4ded6f8b19 [ 3169.153808] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3169.155755] RSP: 002b:00007f4deac6e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 3169.156566] RAX: ffffffffffffffda RBX: 00007f4ded80bf60 RCX: 00007f4ded6f8b19 [ 3169.157327] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 3169.158085] RBP: 00007f4deac6e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3169.158844] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3169.159604] R13: 00007ffdd13eda0f R14: 00007f4deac6e300 R15: 0000000000022000 20:23:35 executing program 1: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x46842, 0x0) io_setup(0x5, &(0x7f0000000080)) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x8800000) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x5, r3, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x4800, 0x100, 0xb91}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f00000001c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7}}, './file1\x00'}) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) r5 = syz_io_uring_setup(0x3de4, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000180), &(0x7f0000002a40)) ioctl$BLKTRACESTART(r4, 0x1274, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x882c2, 0x0) fsync(r6) ioctl$FS_IOC_GETFSMAP(r6, 0xc0c0583b, &(0x7f0000000440)={0x0, 0x0, 0x5, 0x0, '\x00', [{0x7, 0x7fff, 0x5, 0xffff, 0x8, 0x401}, {0x9, 0x81, 0xfffe00000000, 0x1000, 0x2}], ['\x00', '\x00', '\x00', '\x00', '\x00']}) io_uring_enter(r5, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$FIGETBSZ(r5, 0x2, &(0x7f0000000240)) 20:23:35 executing program 3: statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f0000000200)=0x6, 0x4) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000340)=ANY=[@ANYBLOB="01080000011270c839284f30e054da4374340020000000000000", @ANYRES32, @ANYBLOB="ffa22106351700002e2f661c696c653000"]) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) pread64(0xffffffffffffffff, &(0x7f0000000400)=""/255, 0xff, 0x7eb9) dup(0xffffffffffffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0), 0x9) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000030d00000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) 20:23:35 executing program 0: creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) pread64(0xffffffffffffffff, &(0x7f0000000400)=""/255, 0xff, 0x7eb9) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14006000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) 20:23:35 executing program 2: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x46842, 0x0) io_setup(0x5, &(0x7f0000000080)) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x8800000) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x5, r3, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0xa, 0x100, 0xb91}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f00000001c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7}}, './file1\x00'}) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) r5 = syz_io_uring_setup(0x3de4, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000180), &(0x7f0000002a40)) ioctl$BLKTRACESTART(r4, 0x1274, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x882c2, 0x0) fsync(r6) ioctl$FS_IOC_GETFSMAP(r6, 0xc0c0583b, &(0x7f0000000440)={0x0, 0x0, 0x5, 0x0, '\x00', [{0x7, 0x7fff, 0x5, 0xffff, 0x8, 0x401}, {0x9, 0x81, 0xfffe00000000, 0x1000, 0x2}], ['\x00', '\x00', '\x00', '\x00', '\x00']}) io_uring_enter(r5, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$FIGETBSZ(r5, 0x2, &(0x7f0000000240)) 20:23:35 executing program 7: creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="1400000000000000000a000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) 20:23:35 executing program 2: sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x0, 0x0) pidfd_send_signal(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xb, 0x5, 0x2000000}, 0x0) clock_gettime(0x0, &(0x7f0000001d40)={0x0, 0x0}) recvmmsg(0xffffffffffffffff, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000540)=""/4096, 0x1000}, {&(0x7f0000000180)=""/108, 0x6c}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000000200)=""/145, 0x91}, {&(0x7f0000000300)=""/114, 0x72}, {&(0x7f0000002e00)=""/4096, 0x1000}, {&(0x7f0000003e00)=""/4096, 0x1000}], 0x7, &(0x7f0000004e00)=""/4096, 0x1000}, 0x2}, {{&(0x7f0000001540)=@nfc_llcp, 0x80, &(0x7f0000001800)=[{&(0x7f00000015c0)=""/131, 0x83}, {&(0x7f0000001680)=""/243, 0xf3}, {&(0x7f0000001780)=""/122, 0x7a}, {&(0x7f0000000400)=""/41, 0x29}, {&(0x7f0000005e00)=""/4096, 0x1000}, {&(0x7f0000006e00)=""/4096, 0x1000}], 0x6, &(0x7f0000001880)=""/236, 0xec}, 0x1}, {{&(0x7f0000001980)=@un=@abs, 0x80, &(0x7f0000001a00), 0x0, &(0x7f0000001a40)=""/67, 0x43}, 0x80000001}, {{&(0x7f0000001ac0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000001b40)=[{&(0x7f0000007e00)=""/4096, 0x1000}, {&(0x7f0000008e00)=""/4096, 0x1000}], 0x2, &(0x7f0000001b80)=""/174, 0xae}, 0x20}], 0x4, 0x0, &(0x7f0000009e00)={r0, r1+10000000}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x48, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x2c, 0xe, {@with_ht={{{}, {}, @broadcast, @broadcast, @random="dd0b7470fe16"}}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}]]}, 0x48}}, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000009f80)={&(0x7f0000009e40)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000009f40)={&(0x7f0000009fc0)=ANY=[@ANYBLOB="94000000", @ANYRES16=r4, @ANYBLOB="100029bd7000fedbdf251300000008000300", @ANYRES32=0x0, @ANYBLOB="06001401000000000600ab00020000001b001300898b8c3009a41b1685821b9b89b06c3b0c6c000500e4000000000006001a01030000003c0081000500020006000000051bcb000100010000000500010005000000050001009f0000000500010003000000050001000800000005000100060000000000000000"], 0x94}, 0x1, 0x0, 0x0, 0x20008001}, 0x10044800) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file2\x00', 0x0, 0x127) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, 0x0, 0x800, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x1f}}}}, [@NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x20048000}, 0x0) r5 = creat(&(0x7f0000000080)='./file0\x00', 0x0) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r5, &(0x7f0000000440)={0x60000019}) syz_genetlink_get_family_id$tipc(&(0x7f0000000140), r5) 20:23:35 executing program 3: statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f0000000200)=0x6, 0x4) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000340)=ANY=[@ANYBLOB="01080000011270c839284f30e054da4374340020000000000000", @ANYRES32, @ANYBLOB="ffa22106351700002e2f661c696c653000"]) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) pread64(0xffffffffffffffff, &(0x7f0000000400)=""/255, 0xff, 0x7eb9) dup(0xffffffffffffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0), 0x9) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000e00000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) 20:23:35 executing program 0: creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) pread64(0xffffffffffffffff, &(0x7f0000000400)=""/255, 0xff, 0x7eb9) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="1405c000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) 20:23:35 executing program 5: r0 = creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) open_by_handle_at(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="5000000000000004000000"], 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f0000000200)=0x6, 0x4) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="1400000000000001f400000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) 20:23:35 executing program 3: statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f0000000200)=0x6, 0x4) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000340)=ANY=[@ANYBLOB="01080000011270c839284f30e054da4374340020000000000000", @ANYRES32, @ANYBLOB="ffa22106351700002e2f661c696c653000"]) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) pread64(0xffffffffffffffff, &(0x7f0000000400)=""/255, 0xff, 0x7eb9) dup(0xffffffffffffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0), 0x9) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000006000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) 20:23:35 executing program 4: madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x12) mlock(&(0x7f0000ffb000/0x1000)=nil, 0x1000) fork() (fail_nth: 33) 20:23:36 executing program 2: writev(0xffffffffffffffff, &(0x7f0000000380)=[{&(0x7f0000000300)="01184e78cc97f15aad3d80941e1f3121e226ca358271d7422c897508679aac6abda535a0c6a22b5ba8e1eb27c01dd5a1e0481629361bafa40aea31fb071f149cd75b62d18c3f7f4d6e406314", 0x4c}, {&(0x7f0000000480)="95058cbcf89b31ecf2bf1243cbbd87f82291663c737c4d226f55049d20e1a265718424d3a931a688620e1e4f19478e118b855bec3558dcdaffc9a523d06e25aa6136d2a68d9d343e9fcac8a23d6ef7c2575754f993da5c2469aaaf5f23", 0x5d}], 0x2) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) inotify_init1(0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_submit(0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0xf7, &(0x7f0000000000)=0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f00000003c0)=ANY=[@ANYBLOB="20c2721600b1b5d70efa603176ff28b7934978e4e847b7e46e590736e8f80208db97d15d1c3d68fb4e4fc6bb00000000000000ae3eaeacaef75449dad350bb5e6dfb687bca8c7e03547038876c9c4d1b6990dd55d0db2c90778277a3b02c670080a19efd7de0e0848c6e2f782c8f1fe62eccc6619046bc16315a46b7f5c376ec846ffaed84339b7c7729fbffe6243e403cca706d59189b68e9f997e67c2b056b43f781cc9037640adaf4f1d942acc89900000000", @ANYRES32=r2, @ANYRES16]) openat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x163a90252fc78a1b, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000040)=""/55, 0x37, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000580)={r5, r4, "66811f68e0c440bba4bcf609493241b2512dbb6769ef1fdb21219441b9d2937255c56ea8b443729c72bc47cf6386f73b7ce88432ac6f99b63a93b89e7443b46a773671dded77dc24ba79debef1df5ffcd9e2222930e25f8b7e1873aae1853d7d55b7b3b64a43657809e8ea816519bc0c7323593b9e24a473e537db27b2a3ba9b30d958d7ff8d4867d47df99ca9958a196ce0c3c2c20e2a72af42aafe94c107a043d58527121953dfabf2d3ba6f3e7b2f09c47a4a55c3f5a3e68724037035d781567270a828be9bbe626a85ac9fe77bfa461f8903fcd4986a3dcc6fa6ec88fc174630b23dd02e3cf61e2117f78c9d99aa7daf6f8a7d6c4a01ad17f50051be2848", "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"}) r6 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r6, r7, 0x0, 0x100000001) io_submit(r3, 0x2, &(0x7f0000000080)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x1000000}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x7, 0x1, r0, 0x0, 0x0, 0x4}]) [ 3169.440907] FAULT_INJECTION: forcing a failure. [ 3169.440907] name failslab, interval 1, probability 0, space 0, times 0 [ 3169.443567] CPU: 1 PID: 16622 Comm: syz-executor.4 Not tainted 5.10.194 #1 [ 3169.445043] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3169.446826] Call Trace: [ 3169.447409] dump_stack+0x107/0x167 [ 3169.448198] should_fail.cold+0x5/0xa [ 3169.449021] ? vm_area_dup+0x78/0x290 [ 3169.449846] should_failslab+0x5/0x20 [ 3169.450671] kmem_cache_alloc+0x5b/0x310 [ 3169.451551] vm_area_dup+0x78/0x290 [ 3169.452343] ? avc_has_perm_noaudit+0x1c9/0x3e0 [ 3169.453345] ? lock_downgrade+0x6d0/0x6d0 [ 3169.454255] ? avc_has_perm_noaudit+0x1f7/0x3e0 [ 3169.455265] ? avc_has_extended_perms+0xf40/0xf40 [ 3169.456317] ? vm_area_alloc+0x110/0x110 [ 3169.457187] ? find_held_lock+0x2c/0x110 [ 3169.458068] ? selinux_vm_enough_memory+0x114/0x180 [ 3169.459163] ? selinux_sb_statfs+0x250/0x250 [ 3169.460119] ? percpu_counter_add_batch+0x8b/0x140 [ 3169.461182] ? __vm_enough_memory+0x184/0x360 [ 3169.462145] ? security_vm_enough_memory_mm+0x8b/0xc0 [ 3169.463264] copy_process+0x291b/0x7800 [ 3169.464159] ? __cleanup_sighand+0xb0/0xb0 [ 3169.465073] ? lock_acquire+0x197/0x470 [ 3169.465935] ? find_held_lock+0x2c/0x110 [ 3169.466829] kernel_clone+0xe7/0x980 [ 3169.467631] ? lock_downgrade+0x6d0/0x6d0 [ 3169.468518] ? find_held_lock+0x2c/0x110 [ 3169.469388] ? create_io_thread+0xf0/0xf0 [ 3169.470281] ? ksys_write+0x12d/0x260 [ 3169.471166] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3169.472256] __do_sys_fork+0x8a/0xc0 [ 3169.473094] ? kernel_thread+0xf0/0xf0 [ 3169.473990] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3169.475169] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3169.476322] ? trace_hardirqs_on+0x5b/0x180 [ 3169.477292] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3169.478456] do_syscall_64+0x33/0x40 [ 3169.479274] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 3169.480370] RIP: 0033:0x7f4ded6f8b19 [ 3169.481172] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3169.485118] RSP: 002b:00007f4deac6e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 3169.486759] RAX: ffffffffffffffda RBX: 00007f4ded80bf60 RCX: 00007f4ded6f8b19 [ 3169.488287] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 3169.489814] RBP: 00007f4deac6e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3169.491345] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3169.492870] R13: 00007ffdd13eda0f R14: 00007f4deac6e300 R15: 0000000000022000 20:23:56 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0xffe3) getsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, 0x0, &(0x7f0000001300)) futex(&(0x7f0000000000)=0x1, 0x7, 0x0, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000040), 0x18000, 0x0) lseek(r1, 0x4, 0x3) add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, 0x0) keyctl$chown(0x4, 0x0, 0xee01, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x88) execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) ioctl$BTRFS_IOC_RM_DEV(r2, 0x5000940b, &(0x7f0000000280)={{}, "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"}) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x101001, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x5206}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) write$rfkill(r3, &(0x7f00000000c0)={0x0, 0x0, 0x3, 0x1}, 0x8) 20:23:56 executing program 0: creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) pread64(0xffffffffffffffff, &(0x7f0000000400)=""/255, 0xff, 0x7eb9) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="1405e600000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) 20:23:56 executing program 3: statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f0000000200)=0x6, 0x4) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000340)=ANY=[@ANYBLOB="01080000011270c839284f30e054da4374340020000000000000", @ANYRES32, @ANYBLOB="ffa22106351700002e2f661c696c653000"]) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) pread64(0xffffffffffffffff, &(0x7f0000000400)=""/255, 0xff, 0x7eb9) dup(0xffffffffffffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0), 0x9) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="1400000000ffffff9700000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) 20:23:56 executing program 5: r0 = creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) open_by_handle_at(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="5000000000000004000000"], 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f0000000200)=0x6, 0x4) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="1400000000000000fd00000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) 20:23:56 executing program 7: creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="1400000000000000030d000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) 20:23:56 executing program 1: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x46842, 0x0) io_setup(0x5, &(0x7f0000000080)) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x8800000) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x5, r3, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x4c00, 0x100, 0xb91}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f00000001c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7}}, './file1\x00'}) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) r5 = syz_io_uring_setup(0x3de4, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000180), &(0x7f0000002a40)) ioctl$BLKTRACESTART(r4, 0x1274, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x882c2, 0x0) fsync(r6) ioctl$FS_IOC_GETFSMAP(r6, 0xc0c0583b, &(0x7f0000000440)={0x0, 0x0, 0x5, 0x0, '\x00', [{0x7, 0x7fff, 0x5, 0xffff, 0x8, 0x401}, {0x9, 0x81, 0xfffe00000000, 0x1000, 0x2}], ['\x00', '\x00', '\x00', '\x00', '\x00']}) io_uring_enter(r5, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$FIGETBSZ(r5, 0x2, &(0x7f0000000240)) 20:23:56 executing program 4: madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x12) mlock(&(0x7f0000ffb000/0x1000)=nil, 0x1000) fork() (fail_nth: 34) 20:23:56 executing program 6: sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x8) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x0, 0x0) pidfd_send_signal(0xffffffffffffffff, 0x0, &(0x7f0000000180)={0xb, 0x5, 0x2000000}, 0x0) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file2\x00', 0x40080, 0x127) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, 0x0, 0x800, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x1f}}}}, [@NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0xfffffffe}]}, 0x30}, 0x1, 0x0, 0x0, 0x20048000}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="1000000017010007002e2f664169"], 0x10) [ 3189.974199] FAULT_INJECTION: forcing a failure. [ 3189.974199] name failslab, interval 1, probability 0, space 0, times 0 [ 3189.976651] CPU: 1 PID: 16649 Comm: syz-executor.4 Not tainted 5.10.194 #1 [ 3189.978017] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3189.979674] Call Trace: [ 3189.980207] dump_stack+0x107/0x167 [ 3189.980931] should_fail.cold+0x5/0xa [ 3189.981690] ? create_object.isra.0+0x3a/0xa20 [ 3189.982617] should_failslab+0x5/0x20 [ 3189.983375] kmem_cache_alloc+0x5b/0x310 [ 3189.984178] create_object.isra.0+0x3a/0xa20 [ 3189.985036] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3189.986046] kmem_cache_alloc+0x159/0x310 [ 3189.986937] vm_area_dup+0x78/0x290 [ 3189.987663] ? avc_has_perm_noaudit+0x1c9/0x3e0 [ 3189.988579] ? lock_downgrade+0x6d0/0x6d0 [ 3189.989419] ? avc_has_perm_noaudit+0x1f7/0x3e0 [ 3189.990350] ? avc_has_extended_perms+0xf40/0xf40 [ 3189.991332] ? vm_area_alloc+0x110/0x110 [ 3189.992138] ? find_held_lock+0x2c/0x110 [ 3189.992942] ? selinux_vm_enough_memory+0x114/0x180 [ 3189.993928] ? selinux_sb_statfs+0x250/0x250 [ 3189.994851] ? percpu_counter_add_batch+0x8b/0x140 [ 3189.995831] ? __vm_enough_memory+0x184/0x360 [ 3189.996709] ? security_vm_enough_memory_mm+0x8b/0xc0 [ 3189.997725] copy_process+0x291b/0x7800 [ 3189.998539] ? __cleanup_sighand+0xb0/0xb0 [ 3189.999397] ? lock_acquire+0x197/0x470 [ 3190.000184] ? find_held_lock+0x2c/0x110 [ 3190.000984] kernel_clone+0xe7/0x980 [ 3190.001717] ? lock_downgrade+0x6d0/0x6d0 [ 3190.002522] ? find_held_lock+0x2c/0x110 [ 3190.003362] ? create_io_thread+0xf0/0xf0 [ 3190.004181] ? ksys_write+0x12d/0x260 [ 3190.004961] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3190.005923] __do_sys_fork+0x8a/0xc0 [ 3190.006661] ? kernel_thread+0xf0/0xf0 [ 3190.007450] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3190.008467] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3190.009474] ? trace_hardirqs_on+0x5b/0x180 [ 3190.010312] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3190.011336] do_syscall_64+0x33/0x40 [ 3190.012064] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 3190.013064] RIP: 0033:0x7f4ded6f8b19 [ 3190.013799] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3190.017383] RSP: 002b:00007f4deac6e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 3190.018877] RAX: ffffffffffffffda RBX: 00007f4ded80bf60 RCX: 00007f4ded6f8b19 [ 3190.020271] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 3190.021661] RBP: 00007f4deac6e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3190.023056] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3190.024442] R13: 00007ffdd13eda0f R14: 00007f4deac6e300 R15: 0000000000022000 20:23:56 executing program 0: creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) pread64(0xffffffffffffffff, &(0x7f0000000400)=""/255, 0xff, 0x7eb9) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="1402e700000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) 20:23:56 executing program 3: statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f0000000200)=0x6, 0x4) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000340)=ANY=[@ANYBLOB="01080000011270c839284f30e054da4374340020000000000000", @ANYRES32, @ANYBLOB="ffa22106351700002e2f661c696c653000"]) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) pread64(0xffffffffffffffff, &(0x7f0000000400)=""/255, 0xff, 0x7eb9) dup(0xffffffffffffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0), 0x9) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="1400000000000005c000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) 20:23:56 executing program 6: sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x8) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x0, 0x0) pidfd_send_signal(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xb, 0x5, 0x2000000}, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x54, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x1}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_GATE_ANNOUNCEMENTS={0x5}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0x6}]}, @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x11}, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f00000002c0)='./file2\x00', 0x40080, 0x127) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000500)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, 0x0, 0x800, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x76}}}}, [@NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0xfffffffe}]}, 0x30}, 0x1, 0x0, 0x0, 0x20048000}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="1000000017010007002e2f664169"], 0x10) 20:23:56 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0xffe3) getsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, 0x0, &(0x7f0000001300)) futex(&(0x7f0000000000)=0x1, 0x7, 0x0, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000040), 0x18000, 0x0) lseek(r1, 0x4, 0x3) add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, 0x0) keyctl$chown(0x4, 0x0, 0xee01, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x88) execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) ioctl$BTRFS_IOC_RM_DEV(r2, 0x5000940b, &(0x7f0000000280)={{}, "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"}) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x101001, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x5206}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) write$rfkill(r3, &(0x7f00000000c0)={0x0, 0x0, 0x3, 0x1}, 0x8) 20:23:56 executing program 1: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x46842, 0x0) io_setup(0x5, &(0x7f0000000080)) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x8800000) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x5, r3, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x6800, 0x100, 0xb91}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f00000001c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7}}, './file1\x00'}) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) r5 = syz_io_uring_setup(0x3de4, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000180), &(0x7f0000002a40)) ioctl$BLKTRACESTART(r4, 0x1274, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x882c2, 0x0) fsync(r6) ioctl$FS_IOC_GETFSMAP(r6, 0xc0c0583b, &(0x7f0000000440)={0x0, 0x0, 0x5, 0x0, '\x00', [{0x7, 0x7fff, 0x5, 0xffff, 0x8, 0x401}, {0x9, 0x81, 0xfffe00000000, 0x1000, 0x2}], ['\x00', '\x00', '\x00', '\x00', '\x00']}) io_uring_enter(r5, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$FIGETBSZ(r5, 0x2, &(0x7f0000000240)) 20:23:56 executing program 4: madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x12) mlock(&(0x7f0000ffb000/0x1000)=nil, 0x1000) fork() (fail_nth: 35) 20:23:56 executing program 0: creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) pread64(0xffffffffffffffff, &(0x7f0000000400)=""/255, 0xff, 0x7eb9) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="1403e800000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) 20:23:56 executing program 3: statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f0000000200)=0x6, 0x4) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000340)=ANY=[@ANYBLOB="01080000011270c839284f30e054da4374340020000000000000", @ANYRES32, @ANYBLOB="ffa22106351700002e2f661c696c653000"]) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) pread64(0xffffffffffffffff, &(0x7f0000000400)=""/255, 0xff, 0x7eb9) dup(0xffffffffffffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0), 0x9) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="1400000000000005e600000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) 20:23:56 executing program 7: creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="1400000000000000000e000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) 20:23:56 executing program 5: r0 = creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) open_by_handle_at(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="5000000000000004000000"], 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f0000000200)=0x6, 0x4) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="1400000000ffffffff00000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) [ 3190.403580] FAULT_INJECTION: forcing a failure. [ 3190.403580] name failslab, interval 1, probability 0, space 0, times 0 [ 3190.405904] CPU: 1 PID: 16703 Comm: syz-executor.4 Not tainted 5.10.194 #1 [ 3190.407330] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3190.409065] Call Trace: [ 3190.409726] dump_stack+0x107/0x167 [ 3190.410456] should_fail.cold+0x5/0xa [ 3190.411294] ? create_object.isra.0+0x3a/0xa20 [ 3190.412293] should_failslab+0x5/0x20 [ 3190.413229] kmem_cache_alloc+0x5b/0x310 [ 3190.414066] create_object.isra.0+0x3a/0xa20 [ 3190.414956] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3190.415975] kmem_cache_alloc+0x159/0x310 [ 3190.416878] vm_area_dup+0x78/0x290 [ 3190.417608] ? avc_has_perm_noaudit+0x1c9/0x3e0 [ 3190.418622] ? lock_downgrade+0x6d0/0x6d0 [ 3190.419619] ? copy_page_range+0x24e9/0x3810 [ 3190.420514] ? avc_has_perm_noaudit+0x1f7/0x3e0 [ 3190.421518] ? avc_has_extended_perms+0xf40/0xf40 [ 3190.422534] ? vm_area_alloc+0x110/0x110 [ 3190.423453] ? find_held_lock+0x2c/0x110 [ 3190.424405] ? selinux_vm_enough_memory+0x114/0x180 [ 3190.425432] ? selinux_sb_statfs+0x250/0x250 [ 3190.426351] ? percpu_counter_add_batch+0x8b/0x140 [ 3190.427456] ? __vm_enough_memory+0x184/0x360 [ 3190.428547] ? security_vm_enough_memory_mm+0x8b/0xc0 [ 3190.429674] copy_process+0x291b/0x7800 [ 3190.430641] ? __cleanup_sighand+0xb0/0xb0 [ 3190.431609] ? lock_acquire+0x197/0x470 [ 3190.432430] ? find_held_lock+0x2c/0x110 [ 3190.433331] kernel_clone+0xe7/0x980 [ 3190.434242] ? lock_downgrade+0x6d0/0x6d0 [ 3190.435141] ? find_held_lock+0x2c/0x110 [ 3190.436064] ? create_io_thread+0xf0/0xf0 [ 3190.436968] ? ksys_write+0x12d/0x260 [ 3190.437799] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3190.438944] __do_sys_fork+0x8a/0xc0 [ 3190.439704] ? kernel_thread+0xf0/0xf0 [ 3190.440518] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3190.441582] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3190.442631] ? trace_hardirqs_on+0x5b/0x180 [ 3190.443508] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3190.444695] do_syscall_64+0x33/0x40 [ 3190.445456] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 3190.446575] RIP: 0033:0x7f4ded6f8b19 [ 3190.447449] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3190.451330] RSP: 002b:00007f4deac6e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 3190.453133] RAX: ffffffffffffffda RBX: 00007f4ded80bf60 RCX: 00007f4ded6f8b19 [ 3190.454655] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 3190.456100] RBP: 00007f4deac6e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3190.457551] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3190.458988] R13: 00007ffdd13eda0f R14: 00007f4deac6e300 R15: 0000000000022000 20:24:13 executing program 4: madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x12) mlock(&(0x7f0000ffb000/0x1000)=nil, 0x1000) fork() (fail_nth: 36) 20:24:13 executing program 2: syz_io_uring_setup(0x52c6, &(0x7f0000000000)={0x0, 0x24e7, 0x2, 0x2, 0x3bc}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r0 = openat$incfs(0xffffffffffffffff, &(0x7f0000000100)='.log\x00', 0x50000, 0x104) getresuid(0x0, 0x0, &(0x7f0000000200)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x76ca, &(0x7f0000000140)={0x0, 0x4c86, 0x0, 0x2, 0x94, 0x0, r2}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) sendmsg$netlink(r1, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="cf04", @ANYRES32=r0, @ANYBLOB="00080000931d5dfd30dc5d6d4db2d65992d1f80377340204774f0697d27869b52a43226e06130c394e19d0083796d0914d8064c8155dad6ce904ab794b1b8b614bf2fa4d301075bdbc00000000000000aeaaa1183be3b3ddca18cea693a0f7861881a0b340f6dae6f7744e73af0f0df7d6b21d5e2b0a7be7c38993f0fd23be1e174e6fe9f854be368c56a80d43e05498f7d8d4d18b095721"], 0x18, 0x20040000}, 0x4008) ioctl$SG_GET_RESERVED_SIZE(r0, 0x2272, 0x0) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, 0x0}, 0x1) socket$netlink(0x10, 0x3, 0x1a) 20:24:13 executing program 6: sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x8) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x0, 0x0) pidfd_send_signal(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xb, 0x5, 0x2000000}, 0x0) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file2\x00', 0x40080, 0x127) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000825bd7000ffdbdf254400000008000300dc7bbc23dc708b005d06822b092278a13449525cf21c275cf1a4741d994cc13fd22d922ede044e0befa1c724398babdc9720a9ca3d578c9958e22850d1942e136e2ce3c3a0cf801334f2ddfff5f075b1e5", @ANYRES32=0x0, @ANYBLOB="0c009900000000001f00000008000d00feffffff"], 0x30}, 0x1, 0x0, 0x0, 0x20048000}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="1000000017010007002e2f664169"], 0x10) 20:24:13 executing program 0: creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) pread64(0xffffffffffffffff, &(0x7f0000000400)=""/255, 0xff, 0x7eb9) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="1401f400000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) 20:24:13 executing program 1: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x46842, 0x0) io_setup(0x5, &(0x7f0000000080)) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x8800000) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x5, r3, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x6c00, 0x100, 0xb91}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f00000001c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7}}, './file1\x00'}) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) r5 = syz_io_uring_setup(0x3de4, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000180), &(0x7f0000002a40)) ioctl$BLKTRACESTART(r4, 0x1274, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x882c2, 0x0) fsync(r6) ioctl$FS_IOC_GETFSMAP(r6, 0xc0c0583b, &(0x7f0000000440)={0x0, 0x0, 0x5, 0x0, '\x00', [{0x7, 0x7fff, 0x5, 0xffff, 0x8, 0x401}, {0x9, 0x81, 0xfffe00000000, 0x1000, 0x2}], ['\x00', '\x00', '\x00', '\x00', '\x00']}) io_uring_enter(r5, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$FIGETBSZ(r5, 0x2, &(0x7f0000000240)) 20:24:13 executing program 5: r0 = creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) open_by_handle_at(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="5000000000000004000000"], 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f0000000200)=0x6, 0x4) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000200000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) 20:24:13 executing program 3: statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f0000000200)=0x6, 0x4) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000340)=ANY=[@ANYBLOB="01080000011270c839284f30e054da4374340020000000000000", @ANYRES32, @ANYBLOB="ffa22106351700002e2f661c696c653000"]) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) pread64(0xffffffffffffffff, &(0x7f0000000400)=""/255, 0xff, 0x7eb9) dup(0xffffffffffffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0), 0x9) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="1400000000000002e700000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) 20:24:13 executing program 7: creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000060000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) 20:24:13 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0xf0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) fchmodat(0xffffffffffffffff, 0x0, 0x34) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_io_uring_submit(r2, 0x0, 0x0, 0x4) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r3, &(0x7f0000000280)=ANY=[], 0xfdef) syz_io_uring_complete(r1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x5e, 0x60d23, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, @perf_bp={&(0x7f0000000180), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x2, 0xffffffffffffffff, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8943, &(0x7f0000000140)={'lo\x00'}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, 0x0) r5 = creat(&(0x7f0000000000)='./file0\x00', 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file0/file0\x00', 0x0, 0x19b) fcntl$lock(r5, 0x7, &(0x7f0000000600)={0x1}) fstat(r4, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000001640)=ANY=[]) ioctl$BTRFS_IOC_DEV_INFO(r4, 0xd000941e, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) [ 3206.563226] FAULT_INJECTION: forcing a failure. [ 3206.563226] name failslab, interval 1, probability 0, space 0, times 0 [ 3206.565736] CPU: 0 PID: 16737 Comm: syz-executor.4 Not tainted 5.10.194 #1 [ 3206.567223] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3206.568996] Call Trace: [ 3206.569571] dump_stack+0x107/0x167 [ 3206.570357] should_fail.cold+0x5/0xa [ 3206.571190] ? create_object.isra.0+0x3a/0xa20 [ 3206.572174] should_failslab+0x5/0x20 [ 3206.572995] kmem_cache_alloc+0x5b/0x310 [ 3206.573879] create_object.isra.0+0x3a/0xa20 [ 3206.574848] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3206.575952] kmem_cache_alloc+0x159/0x310 [ 3206.576862] vm_area_dup+0x78/0x290 [ 3206.577677] ? avc_has_perm_noaudit+0x1c9/0x3e0 [ 3206.578689] ? lock_downgrade+0x6d0/0x6d0 [ 3206.579619] ? avc_has_perm_noaudit+0x1f7/0x3e0 [ 3206.580625] ? avc_has_extended_perms+0xf40/0xf40 [ 3206.581676] ? vm_area_alloc+0x110/0x110 [ 3206.582548] ? find_held_lock+0x2c/0x110 [ 3206.583456] ? selinux_vm_enough_memory+0x114/0x180 [ 3206.584537] ? selinux_sb_statfs+0x250/0x250 [ 3206.585497] ? percpu_counter_add_batch+0x8b/0x140 [ 3206.586569] ? __vm_enough_memory+0x184/0x360 [ 3206.587543] ? security_vm_enough_memory_mm+0x8b/0xc0 [ 3206.588666] copy_process+0x291b/0x7800 [ 3206.589571] ? __cleanup_sighand+0xb0/0xb0 [ 3206.590495] ? lock_acquire+0x197/0x470 [ 3206.591380] ? find_held_lock+0x2c/0x110 [ 3206.592269] kernel_clone+0xe7/0x980 [ 3206.593077] ? lock_downgrade+0x6d0/0x6d0 [ 3206.593972] ? find_held_lock+0x2c/0x110 [ 3206.594862] ? create_io_thread+0xf0/0xf0 [ 3206.595771] ? ksys_write+0x12d/0x260 [ 3206.596605] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3206.597662] __do_sys_fork+0x8a/0xc0 [ 3206.598469] ? kernel_thread+0xf0/0xf0 [ 3206.599343] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3206.600482] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3206.601593] ? trace_hardirqs_on+0x5b/0x180 [ 3206.602526] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3206.603664] do_syscall_64+0x33/0x40 [ 3206.604473] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 3206.605579] RIP: 0033:0x7f4ded6f8b19 [ 3206.606383] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3206.610345] RSP: 002b:00007f4deac6e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 3206.611980] RAX: ffffffffffffffda RBX: 00007f4ded80bf60 RCX: 00007f4ded6f8b19 [ 3206.613524] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 3206.615073] RBP: 00007f4deac6e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3206.616613] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3206.618135] R13: 00007ffdd13eda0f R14: 00007f4deac6e300 R15: 0000000000022000 20:24:13 executing program 1: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x46842, 0x0) io_setup(0x5, &(0x7f0000000080)) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x8800000) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x5, r3, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x7400, 0x100, 0xb91}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f00000001c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7}}, './file1\x00'}) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) r5 = syz_io_uring_setup(0x3de4, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000180), &(0x7f0000002a40)) ioctl$BLKTRACESTART(r4, 0x1274, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x882c2, 0x0) fsync(r6) ioctl$FS_IOC_GETFSMAP(r6, 0xc0c0583b, &(0x7f0000000440)={0x0, 0x0, 0x5, 0x0, '\x00', [{0x7, 0x7fff, 0x5, 0xffff, 0x8, 0x401}, {0x9, 0x81, 0xfffe00000000, 0x1000, 0x2}], ['\x00', '\x00', '\x00', '\x00', '\x00']}) io_uring_enter(r5, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$FIGETBSZ(r5, 0x2, &(0x7f0000000240)) 20:24:13 executing program 6: sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x8) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x0, 0x0) pidfd_send_signal(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xb, 0x5, 0x2000000}, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f00000002c0)='./file2\x00', 0x40080, 0x127) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, 0x0, 0x800, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x1f}}}}, [@NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0xfffffffe}]}, 0x30}, 0x1, 0x0, 0x0, 0x20048000}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x10) pidfd_send_signal(r0, 0x14, &(0x7f0000000180)={0x1c, 0xff, 0x8}, 0x0) 20:24:13 executing program 0: creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) pread64(0xffffffffffffffff, &(0x7f0000000400)=""/255, 0xff, 0x7eb9) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="1400fd00000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) 20:24:13 executing program 3: statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f0000000200)=0x6, 0x4) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000340)=ANY=[@ANYBLOB="01080000011270c839284f30e054da4374340020000000000000", @ANYRES32, @ANYBLOB="ffa22106351700002e2f661c696c653000"]) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) pread64(0xffffffffffffffff, &(0x7f0000000400)=""/255, 0xff, 0x7eb9) dup(0xffffffffffffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0), 0x9) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="1400000000000003e800000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) 20:24:13 executing program 5: r0 = creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) open_by_handle_at(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="5000000000000004000000"], 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f0000000200)=0x6, 0x4) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000300000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) 20:24:13 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x555c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x100000001) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x100000001) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'ip6tnl0\x00'}) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) open(&(0x7f00000001c0)='./file1\x00', 0x400000, 0x7d) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e23, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3}, 0x1c) r5 = openat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x4040, 0x90) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x100000001) sendfile(0xffffffffffffffff, r5, &(0x7f0000000180), 0x4) r7 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) io_uring_enter(r7, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:24:13 executing program 7: creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="140000000000ffffff97000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) 20:24:25 executing program 3: statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f0000000200)=0x6, 0x4) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000340)=ANY=[@ANYBLOB="01080000011270c839284f30e054da4374340020000000000000", @ANYRES32, @ANYBLOB="ffa22106351700002e2f661c696c653000"]) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) pread64(0xffffffffffffffff, &(0x7f0000000400)=""/255, 0xff, 0x7eb9) dup(0xffffffffffffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0), 0x9) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="1400000000000001f400000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) 20:24:25 executing program 1: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x46842, 0x0) io_setup(0x5, &(0x7f0000000080)) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x8800000) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x5, r3, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x7a00, 0x100, 0xb91}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f00000001c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7}}, './file1\x00'}) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) r5 = syz_io_uring_setup(0x3de4, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000180), &(0x7f0000002a40)) ioctl$BLKTRACESTART(r4, 0x1274, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x882c2, 0x0) fsync(r6) ioctl$FS_IOC_GETFSMAP(r6, 0xc0c0583b, &(0x7f0000000440)={0x0, 0x0, 0x5, 0x0, '\x00', [{0x7, 0x7fff, 0x5, 0xffff, 0x8, 0x401}, {0x9, 0x81, 0xfffe00000000, 0x1000, 0x2}], ['\x00', '\x00', '\x00', '\x00', '\x00']}) io_uring_enter(r5, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$FIGETBSZ(r5, 0x2, &(0x7f0000000240)) 20:24:25 executing program 0: creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) pread64(0xffffffffffffffff, &(0x7f0000000400)=""/255, 0xff, 0x7eb9) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000008000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) 20:24:25 executing program 2: add_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f00000002c0)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) ftruncate(0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8982, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) openat$incfs(r0, &(0x7f00000000c0)='.pending_reads\x00', 0x101100, 0x81) 20:24:25 executing program 6: sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x8) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x0, 0x0) pidfd_send_signal(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xb, 0x5, 0x2000000}, 0x0) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file2\x00', 0x40080, 0x127) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, 0x0, 0x800, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x1f}}}}, [@NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0xfffffffe}]}, 0x30}, 0x1, 0x0, 0x0, 0x20048000}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, 0x0, 0x100, 0x70bd2a, 0x25dfdbff, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000010}, 0x4001) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="1000000017010007002e2f664169"], 0x10) 20:24:25 executing program 5: r0 = creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) open_by_handle_at(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="5000000000000004000000"], 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f0000000200)=0x6, 0x4) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000400000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) 20:24:25 executing program 4: madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x12) mlock(&(0x7f0000ffb000/0x1000)=nil, 0x1000) fork() (fail_nth: 37) 20:24:25 executing program 7: creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="140000000000000005c0000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) [ 3219.312525] FAULT_INJECTION: forcing a failure. [ 3219.312525] name failslab, interval 1, probability 0, space 0, times 0 [ 3219.314895] CPU: 1 PID: 16793 Comm: syz-executor.4 Not tainted 5.10.194 #1 [ 3219.316329] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3219.318022] Call Trace: [ 3219.318568] dump_stack+0x107/0x167 [ 3219.319334] should_fail.cold+0x5/0xa [ 3219.320113] ? vm_area_dup+0x78/0x290 [ 3219.320894] should_failslab+0x5/0x20 [ 3219.321670] kmem_cache_alloc+0x5b/0x310 [ 3219.322507] vm_area_dup+0x78/0x290 [ 3219.323271] ? avc_has_perm_noaudit+0x1c9/0x3e0 [ 3219.324227] ? lock_downgrade+0x6d0/0x6d0 [ 3219.325095] ? avc_has_perm_noaudit+0x1f7/0x3e0 [ 3219.326050] ? avc_has_extended_perms+0xf40/0xf40 [ 3219.327059] ? vm_area_alloc+0x110/0x110 [ 3219.327883] ? find_held_lock+0x2c/0x110 [ 3219.328722] ? selinux_vm_enough_memory+0x114/0x180 [ 3219.329742] ? selinux_sb_statfs+0x250/0x250 [ 3219.330646] ? percpu_counter_add_batch+0x8b/0x140 [ 3219.331660] ? __vm_enough_memory+0x184/0x360 [ 3219.332571] ? security_vm_enough_memory_mm+0x8b/0xc0 [ 3219.333624] copy_process+0x291b/0x7800 [ 3219.334476] ? __cleanup_sighand+0xb0/0xb0 20:24:25 executing program 3: statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f0000000200)=0x6, 0x4) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000340)=ANY=[@ANYBLOB="01080000011270c839284f30e054da4374340020000000000000", @ANYRES32, @ANYBLOB="ffa22106351700002e2f661c696c653000"]) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) pread64(0xffffffffffffffff, &(0x7f0000000400)=""/255, 0xff, 0x7eb9) dup(0xffffffffffffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0), 0x9) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="1400000000000000fd00000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) [ 3219.335368] ? find_held_lock+0x2c/0x110 [ 3219.336370] kernel_clone+0xe7/0x980 [ 3219.337137] ? lock_downgrade+0x6d0/0x6d0 [ 3219.337981] ? find_held_lock+0x2c/0x110 [ 3219.338812] ? create_io_thread+0xf0/0xf0 [ 3219.339684] ? ksys_write+0x12d/0x260 [ 3219.340473] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3219.341458] __do_sys_fork+0x8a/0xc0 [ 3219.342213] ? kernel_thread+0xf0/0xf0 [ 3219.343035] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3219.344094] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3219.345136] ? trace_hardirqs_on+0x5b/0x180 [ 3219.346023] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3219.347088] do_syscall_64+0x33/0x40 [ 3219.347842] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 3219.348876] RIP: 0033:0x7f4ded6f8b19 [ 3219.349631] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3219.353359] RSP: 002b:00007f4deac6e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 3219.354900] RAX: ffffffffffffffda RBX: 00007f4ded80bf60 RCX: 00007f4ded6f8b19 [ 3219.356347] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 3219.357818] RBP: 00007f4deac6e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3219.359286] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3219.360755] R13: 00007ffdd13eda0f R14: 00007f4deac6e300 R15: 0000000000022000 20:24:26 executing program 2: setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x47e2, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(0xffffffffffffffff, 0x0, 0x806, 0xfffffffffffffffd) ftruncate(r0, 0x1000003) r2 = getpgrp(0x0) r3 = dup2(r0, r1) r4 = syz_open_dev$ptys(0xc, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x234}, 0x1, 0x0, 0x0, 0x45}, 0x4000) ioctl$AUTOFS_DEV_IOCTL_VERSION(r3, 0xc0189371, &(0x7f0000000100)={{0x1, 0x1, 0x18}, './file0\x00'}) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r4, 0x8008f512, &(0x7f00000001c0)) r5 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f0000000340)=0xffffffffffffffff) sendmsg$nl_generic(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001400)=ANY=[@ANYBLOB="f2959ce875a351031900003f86113962c30000008fb6"], 0x14}}, 0x0) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000200)={'\x00', 0x4, 0xde, 0x3, 0x1, 0x7fff, r2}) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x0, 0x13, 0xce9, 0x0, 0x2}) fsetxattr$security_capability(r0, &(0x7f0000000040), &(0x7f0000000080)=@v2, 0x14, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0xd}, 0x0, 0x0, 0x0, 0x9, 0x841}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_script(r1, &(0x7f0000000300)={'#! ', './file0'}, 0xb) 20:24:26 executing program 5: r0 = creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) open_by_handle_at(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="5000000000000004000000"], 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f0000000200)=0x6, 0x4) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000800000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) 20:24:26 executing program 0: creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) pread64(0xffffffffffffffff, &(0x7f0000000400)=""/255, 0xff, 0x7eb9) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000010000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) 20:24:26 executing program 7: creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="140000000000000005e6000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) 20:24:26 executing program 6: sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x8) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x0, 0x0) pidfd_send_signal(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xb, 0x5, 0x2000000}, 0x0) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file2\x00', 0x40080, 0x127) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000002908e4fdb3753ff8cfeabaf718e343fb2445691a10dced887fd9df94cf0531529323d4584f9fa587f7affd7a67637bbe530832fb526732be", @ANYRES16=0x0, @ANYBLOB="000825bd7000ffdbdf254400000008000300", @ANYRES32=0x0, @ANYBLOB="0c622147c442dfb43ffe23a2009900000000001f00000008000d00feffffff"], 0x30}, 0x1, 0x0, 0x0, 0x20048000}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="1000000017010007002e2f664169"], 0x10) 20:24:26 executing program 1: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x46842, 0x0) io_setup(0x5, &(0x7f0000000080)) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x8800000) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x5, r3, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x910b, 0x100, 0xb91}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f00000001c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7}}, './file1\x00'}) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) r5 = syz_io_uring_setup(0x3de4, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000180), &(0x7f0000002a40)) ioctl$BLKTRACESTART(r4, 0x1274, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x882c2, 0x0) fsync(r6) ioctl$FS_IOC_GETFSMAP(r6, 0xc0c0583b, &(0x7f0000000440)={0x0, 0x0, 0x5, 0x0, '\x00', [{0x7, 0x7fff, 0x5, 0xffff, 0x8, 0x401}, {0x9, 0x81, 0xfffe00000000, 0x1000, 0x2}], ['\x00', '\x00', '\x00', '\x00', '\x00']}) io_uring_enter(r5, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$FIGETBSZ(r5, 0x2, &(0x7f0000000240)) 20:24:26 executing program 5: r0 = creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) open_by_handle_at(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="5000000000000004000000"], 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f0000000200)=0x6, 0x4) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000a00000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) 20:24:26 executing program 3: statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f0000000200)=0x6, 0x4) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000340)=ANY=[@ANYBLOB="01080000011270c839284f30e054da4374340020000000000000", @ANYRES32, @ANYBLOB="ffa22106351700002e2f661c696c653000"]) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) pread64(0xffffffffffffffff, &(0x7f0000000400)=""/255, 0xff, 0x7eb9) dup(0xffffffffffffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0), 0x9) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="1400000000ffffffff00000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) 20:24:26 executing program 2: sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x8) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x0, 0x0) pidfd_send_signal(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xb, 0x5, 0x2000000}, 0x0) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file2\x00', 0x40080, 0x127) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, 0x0, 0x800, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x1f}}}}, [@NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0xfffffffe}]}, 0x30}, 0x1, 0x0, 0x0, 0x20048000}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, 0x0, 0x100, 0x70bd2a, 0x25dfdbff, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000010}, 0x4001) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="1000000017010007002e2f664169"], 0x10) 20:24:41 executing program 0: creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) pread64(0xffffffffffffffff, &(0x7f0000000400)=""/255, 0xff, 0x7eb9) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000020000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) 20:24:41 executing program 3: statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f0000000200)=0x6, 0x4) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000340)=ANY=[@ANYBLOB="01080000011270c839284f30e054da4374340020000000000000", @ANYRES32, @ANYBLOB="ffa22106351700002e2f661c696c653000"]) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) pread64(0xffffffffffffffff, &(0x7f0000000400)=""/255, 0xff, 0x7eb9) dup(0xffffffffffffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0), 0x9) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000200000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) 20:24:41 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000140)={[{@noacl}]}) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r0, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f0000000180)='./file0\x00', 0x2, 0x4, &(0x7f00000005c0)=[{&(0x7f00000001c0)="0e254dc0525650de745416ef6f8f01f0ec9bb0c9995554228d9e17dd48492c99046ac8b93628a1bd06787c53605b7cd82506784a4b63e5c6222cce80482f1fb68dbec8f40b8e8c585d1314afbadad5439f01c16bfdf1967653c82ffaae4da31e34f0f4e0ad8d08e159b327a082a4aa2bf95cfb995511c1cd4193107eebdbe592cdd2152b88f9a1ef5c6e92f6a3ad5e09c96216d3ee2c53811af1a4e55a3652138e558b0fd72d39eb3bc302236d3a8404cc0274da898aa0c6031692db1ece5a518a828c14710189b12ccbffe249f68f35c2d731d7ea6f81902acfa1", 0xdb, 0xffffffff}, {&(0x7f00000002c0)="424d819931d183d7fc51d01252c7a29c9367502f7116f01c49c3d0284eec8ab723f9795f35851102c193956ddaf4281a7b74cb08beaee8415f57fac209381999ad85a3b0b9ef68fcded3a61814361ba182dc2a488b59cbef810ef6af3a8a31f9b6717bdc7da68253e58dc55c07ad7e865bee8df0c5373bf3c2142ba1855f86c0a15ecea6218be8ccfc4ec47359217a2d5dc3020a4204f3a8e5544dbfedbef8660911104c3d4da60ef6c3e8dfad3ce5a7f1e4a5d0d8855596ad544018210dd186058f8fbac30ad0cdf94598c2015032f6f12131d3c5cda51759f4f6b6bb0abe12818d3b32d9c36aecea05a2ec9bfa6c1520492dbd", 0xf4, 0xb8cd}, {&(0x7f00000003c0)="fa", 0x1, 0xb6d0}, {&(0x7f00000004c0)="bfc8c99fc8ff13009e6b9bf5711151f83538e6f433dfe57d8433d379dd68058838417621f338abe854fc6fcbbb4679f5e7a1e763672facf282266e0cae8b048d0e502fc867585203ed4e8be20e7b75ba4b57cc6f274c54e65cdaef3938f14e6baab8875082be4f4a9c83c783d300b868d381556ed1ddaccc0245dc27ab83c305173c36282016f5815c443869301528e7c9dd21dab156fe810882be575303622c72c6650844c9efd733790bceee3e1679769d7631f1357d3c02e4ed3410718397df1ae278ce", 0xc5, 0xfa}], 0x2008820, &(0x7f0000000640)={[{@nouser_xattr}, {@resuid={'resuid', 0x3d, r0}}, {@errors_continue}], [{@fsname={'fsname', 0x3d, 'ext4\x00'}}, {@permit_directio}, {@obj_type={'obj_type', 0x3d, 'noacl'}}, {@fsname={'fsname', 0x3d, 'ext4\x00'}}]}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff6000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) 20:24:41 executing program 4: madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x12) mlock(&(0x7f0000ffb000/0x1000)=nil, 0x1000) fork() (fail_nth: 38) 20:24:41 executing program 7: creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="140000000000000002e7000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) [ 3235.303064] FAULT_INJECTION: forcing a failure. [ 3235.303064] name failslab, interval 1, probability 0, space 0, times 0 [ 3235.304349] CPU: 0 PID: 16859 Comm: syz-executor.4 Not tainted 5.10.194 #1 [ 3235.305114] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3235.306008] Call Trace: [ 3235.306310] dump_stack+0x107/0x167 [ 3235.306722] should_fail.cold+0x5/0xa [ 3235.307163] ? create_object.isra.0+0x3a/0xa20 [ 3235.307674] should_failslab+0x5/0x20 [ 3235.308103] kmem_cache_alloc+0x5b/0x310 [ 3235.308563] create_object.isra.0+0x3a/0xa20 [ 3235.309059] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3235.309621] kmem_cache_alloc+0x159/0x310 [ 3235.310096] vm_area_dup+0x78/0x290 [ 3235.310508] ? avc_has_perm_noaudit+0x1c9/0x3e0 [ 3235.311027] ? lock_downgrade+0x6d0/0x6d0 [ 3235.311511] ? avc_has_perm_noaudit+0x1f7/0x3e0 [ 3235.312040] ? avc_has_extended_perms+0xf40/0xf40 [ 3235.312584] ? vm_area_alloc+0x110/0x110 [ 3235.313036] ? find_held_lock+0x2c/0x110 [ 3235.313497] ? selinux_vm_enough_memory+0x114/0x180 [ 3235.314050] ? selinux_sb_statfs+0x250/0x250 [ 3235.314533] ? percpu_counter_add_batch+0x8b/0x140 [ 3235.315085] ? __vm_enough_memory+0x184/0x360 [ 3235.315597] ? security_vm_enough_memory_mm+0x8b/0xc0 [ 3235.316175] copy_process+0x291b/0x7800 [ 3235.316635] ? __cleanup_sighand+0xb0/0xb0 [ 3235.317106] ? lock_acquire+0x197/0x470 [ 3235.317557] ? find_held_lock+0x2c/0x110 [ 3235.318019] kernel_clone+0xe7/0x980 [ 3235.318440] ? lock_downgrade+0x6d0/0x6d0 [ 3235.318898] ? find_held_lock+0x2c/0x110 [ 3235.319363] ? create_io_thread+0xf0/0xf0 [ 3235.319816] ? ksys_write+0x12d/0x260 [ 3235.320337] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3235.320879] __do_sys_fork+0x8a/0xc0 [ 3235.321300] ? kernel_thread+0xf0/0xf0 [ 3235.321758] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3235.322339] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3235.322917] ? trace_hardirqs_on+0x5b/0x180 [ 3235.323393] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3235.323971] do_syscall_64+0x33/0x40 [ 3235.324384] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 3235.324954] RIP: 0033:0x7f4ded6f8b19 [ 3235.325362] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3235.327410] RSP: 002b:00007f4deac6e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 3235.328237] RAX: ffffffffffffffda RBX: 00007f4ded80bf60 RCX: 00007f4ded6f8b19 [ 3235.329031] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 3235.329810] RBP: 00007f4deac6e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3235.330519] EXT4-fs (loop2): Mount option "noacl" will be removed by 3.5 [ 3235.330519] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 3235.330519] [ 3235.330570] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3235.334621] R13: 00007ffdd13eda0f R14: 00007f4deac6e300 R15: 0000000000022000 20:24:41 executing program 1: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x46842, 0x0) io_setup(0x5, &(0x7f0000000080)) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x8800000) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x5, r3, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0xba02, 0x100, 0xb91}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f00000001c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7}}, './file1\x00'}) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) r5 = syz_io_uring_setup(0x3de4, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000180), &(0x7f0000002a40)) ioctl$BLKTRACESTART(r4, 0x1274, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x882c2, 0x0) fsync(r6) ioctl$FS_IOC_GETFSMAP(r6, 0xc0c0583b, &(0x7f0000000440)={0x0, 0x0, 0x5, 0x0, '\x00', [{0x7, 0x7fff, 0x5, 0xffff, 0x8, 0x401}, {0x9, 0x81, 0xfffe00000000, 0x1000, 0x2}], ['\x00', '\x00', '\x00', '\x00', '\x00']}) io_uring_enter(r5, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$FIGETBSZ(r5, 0x2, &(0x7f0000000240)) 20:24:41 executing program 5: r0 = creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) open_by_handle_at(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="5000000000000004000000"], 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f0000000200)=0x6, 0x4) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000e00000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) 20:24:41 executing program 6: sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x8) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/wireless\x00') r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000080)={0x0, 0xfdfdffff, 0x0, 0x0, '\x00', [{0x0, 0x0, 0xfffffffffffffffd}, {0x800, 0x0, 0x400000000000002}]}) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r1) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000300)={&(0x7f0000000780)=ANY=[@ANYBLOB="9c000000", @ANYRES16=r2, @ANYBLOB="20002cbd7000fedbdf25150000004c0009800800020001010000080002000004000008000100030000000800020006000000080001000100000008000200000000000800010008000000080001000200000008000100090000003c000680360003002971796fd37707f4fa453570ed694632d3f07c81fff3606d6055c72847575390712826aa40f1a432f1fa4c1f20828cf59fdee9bcf19dfed823fba4d000007dbc557ccb934e1792d8a7b6b3f5866abb76f54104abf7bcb0f7c7f691e38a5657081a494c7681f01a400a87efbd8103015575d0e77a97b0b1fc668b8a5f7ba69db349dc3425c74f3cbacf914ec4c4"], 0x9c}, 0x1, 0x0, 0x0, 0x41}, 0x20000880) sendmsg$TIPC_NL_LINK_RESET_STATS(r0, &(0x7f0000000280)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f0000000540)={0x204, r2, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xd8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}]}, @TIPC_NLA_NODE={0x90, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x41, 0x4, {'gcm(aes)\x00', 0x19, "615866a21567dd9b61ecf52a5fe477f16e398a7f000436d371"}}, @TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "fc8574f8c1e826a98a1866d899419acbe28d45fe"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NET={0x30, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x80000000}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xffff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xffffffffffffd835}]}, @TIPC_NLA_NODE={0xdc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x41, 0x4, {'gcm(aes)\x00', 0x19, "a619b2c39f9bd077b12cb5a5dc1d93d8547a0a91e7c121dffd"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "69451d0c5d1f608bd327aa22d339b783efbd5c8f60"}}, @TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "f96c2b12d16e6c0b5bf7e34d95aece3fc7174f4705"}}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1000}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}]}]}, 0x204}, 0x1, 0x0, 0x0, 0x1}, 0x10) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x0, 0x0) pidfd_send_signal(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xb, 0x5, 0x2000000}, 0x0) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file2\x00', 0x40080, 0x127) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, 0x0, 0x800, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x1f}}}}, [@NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0xfffffffe}]}, 0x30}, 0x1, 0x0, 0x0, 0x20048000}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="1000000017010007002e2f66ddf9059e1c4169"], 0x10) [ 3235.393054] EXT4-fs (loop2): mounted filesystem without journal. Opts: noacl,,errors=continue 20:24:41 executing program 0: creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) pread64(0xffffffffffffffff, &(0x7f0000000400)=""/255, 0xff, 0x7eb9) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000030000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) 20:24:42 executing program 3: statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f0000000200)=0x6, 0x4) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000340)=ANY=[@ANYBLOB="01080000011270c839284f30e054da4374340020000000000000", @ANYRES32, @ANYBLOB="ffa22106351700002e2f661c696c653000"]) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) pread64(0xffffffffffffffff, &(0x7f0000000400)=""/255, 0xff, 0x7eb9) dup(0xffffffffffffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0), 0x9) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000300000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) 20:24:42 executing program 5: r0 = creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) open_by_handle_at(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="5000000000000004000000"], 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f0000000200)=0x6, 0x4) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14006000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) 20:24:42 executing program 3: statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f0000000200)=0x6, 0x4) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000340)=ANY=[@ANYBLOB="01080000011270c839284f30e054da4374340020000000000000", @ANYRES32, @ANYBLOB="ffa22106351700002e2f661c696c653000"]) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) pread64(0xffffffffffffffff, &(0x7f0000000400)=""/255, 0xff, 0x7eb9) dup(0xffffffffffffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0), 0x9) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000400000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) 20:24:42 executing program 7: creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="140000000000000003e8000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) 20:24:42 executing program 1: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x46842, 0x0) io_setup(0x5, &(0x7f0000000080)) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x8800000) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x5, r3, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x3, 0xb91}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f00000001c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7}}, './file1\x00'}) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) r5 = syz_io_uring_setup(0x3de4, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000180), &(0x7f0000002a40)) ioctl$BLKTRACESTART(r4, 0x1274, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x882c2, 0x0) fsync(r6) ioctl$FS_IOC_GETFSMAP(r6, 0xc0c0583b, &(0x7f0000000440)={0x0, 0x0, 0x5, 0x0, '\x00', [{0x7, 0x7fff, 0x5, 0xffff, 0x8, 0x401}, {0x9, 0x81, 0xfffe00000000, 0x1000, 0x2}], ['\x00', '\x00', '\x00', '\x00', '\x00']}) io_uring_enter(r5, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$FIGETBSZ(r5, 0x2, &(0x7f0000000240)) 20:24:42 executing program 0: creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) pread64(0xffffffffffffffff, &(0x7f0000000400)=""/255, 0xff, 0x7eb9) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000040000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) 20:24:42 executing program 3: statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f0000000200)=0x6, 0x4) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000340)=ANY=[@ANYBLOB="01080000011270c839284f30e054da4374340020000000000000", @ANYRES32, @ANYBLOB="ffa22106351700002e2f661c696c653000"]) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) pread64(0xffffffffffffffff, &(0x7f0000000400)=""/255, 0xff, 0x7eb9) dup(0xffffffffffffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0), 0x9) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000800000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) 20:24:42 executing program 4: madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x12) mlock(&(0x7f0000ffb000/0x1000)=nil, 0x1000) fork() (fail_nth: 39) [ 3235.675658] FAULT_INJECTION: forcing a failure. [ 3235.675658] name failslab, interval 1, probability 0, space 0, times 0 [ 3235.676946] CPU: 0 PID: 16916 Comm: syz-executor.4 Not tainted 5.10.194 #1 [ 3235.677688] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3235.678568] Call Trace: [ 3235.678865] dump_stack+0x107/0x167 [ 3235.679270] should_fail.cold+0x5/0xa [ 3235.679685] ? vm_area_dup+0x78/0x290 [ 3235.680103] should_failslab+0x5/0x20 [ 3235.680520] kmem_cache_alloc+0x5b/0x310 [ 3235.680976] vm_area_dup+0x78/0x290 [ 3235.681388] ? copy_page_range+0x24e9/0x3810 [ 3235.681894] ? vm_area_alloc+0x110/0x110 [ 3235.682336] ? find_held_lock+0x2c/0x110 [ 3235.682807] ? vm_iomap_memory+0x190/0x190 [ 3235.683298] ? __vma_link_rb+0x540/0x700 [ 3235.683755] copy_process+0x291b/0x7800 [ 3235.684205] ? __cleanup_sighand+0xb0/0xb0 [ 3235.684666] ? lock_acquire+0x197/0x470 [ 3235.685109] ? find_held_lock+0x2c/0x110 [ 3235.685553] kernel_clone+0xe7/0x980 [ 3235.685976] ? lock_downgrade+0x6d0/0x6d0 [ 3235.686439] ? find_held_lock+0x2c/0x110 [ 3235.686888] ? create_io_thread+0xf0/0xf0 [ 3235.687342] ? ksys_write+0x12d/0x260 [ 3235.687759] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3235.688276] __do_sys_fork+0x8a/0xc0 [ 3235.688706] ? kernel_thread+0xf0/0xf0 [ 3235.689154] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3235.689733] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3235.690317] ? trace_hardirqs_on+0x5b/0x180 [ 3235.690801] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3235.691360] do_syscall_64+0x33/0x40 [ 3235.691776] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 3235.692345] RIP: 0033:0x7f4ded6f8b19 [ 3235.692763] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3235.694787] RSP: 002b:00007f4deac6e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 3235.695642] RAX: ffffffffffffffda RBX: 00007f4ded80bf60 RCX: 00007f4ded6f8b19 [ 3235.696429] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 3235.697210] RBP: 00007f4deac6e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3235.697980] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3235.698778] R13: 00007ffdd13eda0f R14: 00007f4deac6e300 R15: 0000000000022000 20:24:57 executing program 7: creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="140000000000000001f4000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) 20:24:57 executing program 6: sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000200)='./file2\x00', 0x9100) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x6, 0x80, 0xaa, 0x6, 0x0, 0x6, 0x28, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x3, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x3, 0x6}, 0x8, 0x80000000, 0x7, 0xc, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, 0x2}, 0x0, 0x0, r0, 0x8) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/timers\x00', 0x0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r1, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f0000000280)={0x38, 0x4, 0x8, 0x201, 0x0, 0x0, {0x7, 0x0, 0x6}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xa00}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}]}, 0x38}}, 0x4008091) perf_event_open(&(0x7f0000001d80)={0xef402273eba8097e, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x8) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x0, 0x0) pidfd_send_signal(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xb, 0x5, 0x2000000}, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f00000002c0)='./file2\x00', 0x40080, 0x127) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, 0x0, 0x800, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x1f}}}}, [@NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0xfffffffe}]}, 0x30}, 0x1, 0x0, 0x0, 0x20048000}, 0x0) r3 = openat$cgroup_freezer_state(r0, &(0x7f0000000340), 0x2, 0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) ftruncate(r2, 0x1617fe7f) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="1001050000002f66416900000000"], 0x10) 20:24:57 executing program 1: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x46842, 0x0) io_setup(0x5, &(0x7f0000000080)) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x8800000) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x5, r3, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x15, 0xb91}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f00000001c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7}}, './file1\x00'}) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) r5 = syz_io_uring_setup(0x3de4, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000180), &(0x7f0000002a40)) ioctl$BLKTRACESTART(r4, 0x1274, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x882c2, 0x0) fsync(r6) ioctl$FS_IOC_GETFSMAP(r6, 0xc0c0583b, &(0x7f0000000440)={0x0, 0x0, 0x5, 0x0, '\x00', [{0x7, 0x7fff, 0x5, 0xffff, 0x8, 0x401}, {0x9, 0x81, 0xfffe00000000, 0x1000, 0x2}], ['\x00', '\x00', '\x00', '\x00', '\x00']}) io_uring_enter(r5, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$FIGETBSZ(r5, 0x2, &(0x7f0000000240)) 20:24:57 executing program 0: creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) pread64(0xffffffffffffffff, &(0x7f0000000400)=""/255, 0xff, 0x7eb9) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="140000000a0000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) 20:24:57 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x24, 0x1a, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x8, 0x0, 0x0, 0x0, @fd}, @nested={0x8, 0x3, 0x0, 0x1, [@generic="02000000"]}]}, 0x24}}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x100000001) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = dup(r5) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x28, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_DEAUTHENTICATE(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x78, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x1, 0x3}}}}, [@NL80211_ATTR_IE={0x3a, 0x2a, [@ext_channel_switch={0x3c, 0x4, {0x0, 0x3, 0xa, 0xc6}}, @ht={0x2d, 0x1a, {0x400, 0x0, 0x6, 0x0, {0x0, 0x20, 0x0, 0x3f7, 0x0, 0x0, 0x1, 0x2, 0x1}, 0x6, 0x4, 0x1}}, @link_id={0x65, 0x12, {@random="accb7b9bf00f", @broadcast, @broadcast}}]}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x1}]}, 0x78}, 0x1, 0x0, 0x0, 0x24004801}, 0x4090) 20:24:57 executing program 4: madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x12) mlock(&(0x7f0000ffb000/0x1000)=nil, 0x1000) fork() (fail_nth: 40) 20:24:57 executing program 3: statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f0000000200)=0x6, 0x4) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000340)=ANY=[@ANYBLOB="01080000011270c839284f30e054da4374340020000000000000", @ANYRES32, @ANYBLOB="ffa22106351700002e2f661c696c653000"]) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) pread64(0xffffffffffffffff, &(0x7f0000000400)=""/255, 0xff, 0x7eb9) dup(0xffffffffffffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0), 0x9) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000a00000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) 20:24:57 executing program 5: r0 = creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) open_by_handle_at(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="5000000000000004000000"], 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f0000000200)=0x6, 0x4) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="1400fd00000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) [ 3250.646093] FAULT_INJECTION: forcing a failure. [ 3250.646093] name failslab, interval 1, probability 0, space 0, times 0 [ 3250.648784] CPU: 0 PID: 16939 Comm: syz-executor.4 Not tainted 5.10.194 #1 [ 3250.650360] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3250.652223] Call Trace: [ 3250.652833] dump_stack+0x107/0x167 [ 3250.653666] should_fail.cold+0x5/0xa [ 3250.654538] ? create_object.isra.0+0x3a/0xa20 [ 3250.655598] should_failslab+0x5/0x20 [ 3250.656469] kmem_cache_alloc+0x5b/0x310 [ 3250.657402] create_object.isra.0+0x3a/0xa20 [ 3250.658403] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3250.659570] kmem_cache_alloc+0x159/0x310 [ 3250.660524] vm_area_dup+0x78/0x290 [ 3250.661367] ? copy_page_range+0x24e9/0x3810 [ 3250.662411] ? vm_area_alloc+0x110/0x110 [ 3250.663342] ? find_held_lock+0x2c/0x110 [ 3250.664276] ? vm_iomap_memory+0x190/0x190 [ 3250.665259] ? __vma_link_rb+0x540/0x700 [ 3250.666195] copy_process+0x291b/0x7800 [ 3250.667144] ? __cleanup_sighand+0xb0/0xb0 [ 3250.668134] ? lock_acquire+0x197/0x470 [ 3250.669047] ? find_held_lock+0x2c/0x110 [ 3250.669974] kernel_clone+0xe7/0x980 [ 3250.670819] ? lock_downgrade+0x6d0/0x6d0 [ 3250.671760] ? find_held_lock+0x2c/0x110 [ 3250.672681] ? create_io_thread+0xf0/0xf0 [ 3250.673629] ? ksys_write+0x12d/0x260 [ 3250.674516] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3250.675650] __do_sys_fork+0x8a/0xc0 [ 3250.676506] ? kernel_thread+0xf0/0xf0 [ 3250.677422] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3250.678621] ? syscall_enter_from_user_mode+0x1d/0x50 20:24:57 executing program 5: r0 = creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) open_by_handle_at(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="5000000000000004000000"], 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f0000000200)=0x6, 0x4) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="1400f401000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) [ 3250.679808] ? trace_hardirqs_on+0x5b/0x180 [ 3250.680902] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3250.682089] do_syscall_64+0x33/0x40 [ 3250.682952] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 3250.684146] RIP: 0033:0x7f4ded6f8b19 [ 3250.684998] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3250.689212] RSP: 002b:00007f4deac6e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 3250.690948] RAX: ffffffffffffffda RBX: 00007f4ded80bf60 RCX: 00007f4ded6f8b19 [ 3250.692588] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 3250.694217] RBP: 00007f4deac6e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3250.695864] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3250.697492] R13: 00007ffdd13eda0f R14: 00007f4deac6e300 R15: 0000000000022000 20:24:57 executing program 7: creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="140000000000000000fd000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) 20:24:57 executing program 0: creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) pread64(0xffffffffffffffff, &(0x7f0000000400)=""/255, 0xff, 0x7eb9) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="140000030d0000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) 20:25:11 executing program 3: statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f0000000200)=0x6, 0x4) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000340)=ANY=[@ANYBLOB="01080000011270c839284f30e054da4374340020000000000000", @ANYRES32, @ANYBLOB="ffa22106351700002e2f661c696c653000"]) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) pread64(0xffffffffffffffff, &(0x7f0000000400)=""/255, 0xff, 0x7eb9) dup(0xffffffffffffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0), 0x9) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000e00000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) 20:25:11 executing program 7: creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="140000000000ffffffff000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) 20:25:11 executing program 2: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$VT_SETMODE(r0, 0x5602, &(0x7f0000000240)={0x0, 0x3f, 0xe34, 0x51}) r1 = syz_mount_image$ext4(&(0x7f0000000180)='ext3\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x10000}], 0x295c43c, &(0x7f0000000000)=ANY=[@ANYRESHEX, @ANYRESDEC]) futimesat(r1, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={{0x0, 0xea60}}) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) openat(r2, &(0x7f0000000080)='./file0\x00', 0x10000, 0x140) r3 = openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)={0x40, 0x0, 0x2}, 0x18) openat(r3, &(0x7f00000001c0)='./file0\x00', 0x0, 0x21) 20:25:11 executing program 5: r0 = creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) open_by_handle_at(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="5000000000000004000000"], 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f0000000200)=0x6, 0x4) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="1400e702000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) 20:25:11 executing program 1: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x46842, 0x0) io_setup(0x5, &(0x7f0000000080)) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x8800000) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x5, r3, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x16, 0xb91}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f00000001c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7}}, './file1\x00'}) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) r5 = syz_io_uring_setup(0x3de4, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000180), &(0x7f0000002a40)) ioctl$BLKTRACESTART(r4, 0x1274, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x882c2, 0x0) fsync(r6) ioctl$FS_IOC_GETFSMAP(r6, 0xc0c0583b, &(0x7f0000000440)={0x0, 0x0, 0x5, 0x0, '\x00', [{0x7, 0x7fff, 0x5, 0xffff, 0x8, 0x401}, {0x9, 0x81, 0xfffe00000000, 0x1000, 0x2}], ['\x00', '\x00', '\x00', '\x00', '\x00']}) io_uring_enter(r5, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$FIGETBSZ(r5, 0x2, &(0x7f0000000240)) 20:25:11 executing program 4: madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x12) mlock(&(0x7f0000ffb000/0x1000)=nil, 0x1000) fork() (fail_nth: 41) 20:25:11 executing program 6: sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x0, 0x0) pidfd_send_signal(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xb, 0x5, 0x2000000}, 0x0) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file2\x00', 0x40080, 0x127) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, 0x0, 0x800, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x1f}}}}, [@NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0xfffffffe}]}, 0x30}, 0x1, 0x0, 0x0, 0x20048000}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x10) openat(r0, &(0x7f0000000180)='./file0\x00', 0x800, 0x1b0) 20:25:11 executing program 0: creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) pread64(0xffffffffffffffff, &(0x7f0000000400)=""/255, 0xff, 0x7eb9) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="140000000e0000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) [ 3264.673118] FAULT_INJECTION: forcing a failure. [ 3264.673118] name failslab, interval 1, probability 0, space 0, times 0 [ 3264.675565] CPU: 1 PID: 16982 Comm: syz-executor.4 Not tainted 5.10.194 #1 [ 3264.677010] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3264.678719] Call Trace: [ 3264.679268] dump_stack+0x107/0x167 [ 3264.680031] should_fail.cold+0x5/0xa [ 3264.680824] ? vm_area_dup+0x78/0x290 [ 3264.681618] should_failslab+0x5/0x20 [ 3264.682409] kmem_cache_alloc+0x5b/0x310 [ 3264.683252] vm_area_dup+0x78/0x290 [ 3264.684029] ? copy_page_range+0x24e9/0x3810 [ 3264.684977] ? vm_area_alloc+0x110/0x110 [ 3264.685809] ? find_held_lock+0x2c/0x110 [ 3264.686655] ? vm_iomap_memory+0x190/0x190 [ 3264.687548] ? __vma_link_rb+0x540/0x700 [ 3264.688396] copy_process+0x291b/0x7800 [ 3264.689261] ? __cleanup_sighand+0xb0/0xb0 [ 3264.690133] ? lock_acquire+0x197/0x470 [ 3264.690974] ? find_held_lock+0x2c/0x110 [ 3264.691827] kernel_clone+0xe7/0x980 [ 3264.692589] ? lock_downgrade+0x6d0/0x6d0 [ 3264.693431] ? find_held_lock+0x2c/0x110 [ 3264.694259] ? create_io_thread+0xf0/0xf0 [ 3264.695111] ? ksys_write+0x12d/0x260 [ 3264.695922] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3264.696925] __do_sys_fork+0x8a/0xc0 [ 3264.697682] ? kernel_thread+0xf0/0xf0 [ 3264.698497] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3264.699577] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3264.700623] ? trace_hardirqs_on+0x5b/0x180 [ 3264.701514] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3264.702566] do_syscall_64+0x33/0x40 20:25:11 executing program 5: r0 = creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) open_by_handle_at(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="5000000000000004000000"], 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f0000000200)=0x6, 0x4) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000003000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) [ 3264.703340] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 3264.704527] RIP: 0033:0x7f4ded6f8b19 [ 3264.705292] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3264.709044] RSP: 002b:00007f4deac6e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 20:25:11 executing program 3: statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f0000000200)=0x6, 0x4) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000340)=ANY=[@ANYBLOB="01080000011270c839284f30e054da4374340020000000000000", @ANYRES32, @ANYBLOB="ffa22106351700002e2f661c696c653000"]) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) pread64(0xffffffffffffffff, &(0x7f0000000400)=""/255, 0xff, 0x7eb9) dup(0xffffffffffffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0), 0x9) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14006000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) [ 3264.710665] RAX: ffffffffffffffda RBX: 00007f4ded80bf60 RCX: 00007f4ded6f8b19 [ 3264.712141] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 3264.713619] RBP: 00007f4deac6e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3264.715070] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3264.716547] R13: 00007ffdd13eda0f R14: 00007f4deac6e300 R15: 0000000000022000 20:25:11 executing program 0: creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) pread64(0xffffffffffffffff, &(0x7f0000000400)=""/255, 0xff, 0x7eb9) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000200000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) 20:25:11 executing program 4: madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x12) mlock(&(0x7f0000ffb000/0x1000)=nil, 0x1000) fork() (fail_nth: 42) 20:25:11 executing program 2: r0 = syz_open_dev$vcsn(0x0, 0x0, 0x0) r1 = syz_io_uring_setup(0x3ed4, &(0x7f00000001c0)={0x0, 0xf831, 0x4, 0x2}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000002a40)) syz_io_uring_submit(r2, 0x0, 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000000)={0x5, 0x3, 0xfc01, 0x40, 0x77, 0x3}, 0xc) socket$inet6_udp(0xa, 0x2, 0x0) r3 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10088, 0x0, 0xfffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bond0\x00'}) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x4) fchdir(r1) r4 = creat(0x0, 0x0) fcntl$lock(r4, 0x7, &(0x7f0000000600)={0x1, 0x0, 0x7e32, 0xb1fcdcc}) renameat2(0xffffffffffffffff, &(0x7f0000000540)='./file1\x00', r4, &(0x7f0000000580)='./file0\x00', 0x3) signalfd4(r4, &(0x7f0000000140)={[0xfffffffffffffffc]}, 0x8, 0xc0800) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x2}, 0xc04}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x180, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x2400, 0x101) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000980)="b97fde46f4c1142b22e0b28b0056dc58332f9ca3504e8e3208bbe3f9f970330bf905de724ecb7c89d5", 0x29) pread64(0xffffffffffffffff, &(0x7f0000000240)=""/253, 0xfd, 0x2) ioctl$LOOP_CTL_ADD(r5, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) 20:25:11 executing program 7: creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000002000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) [ 3264.857209] FAULT_INJECTION: forcing a failure. [ 3264.857209] name failslab, interval 1, probability 0, space 0, times 0 [ 3264.858925] CPU: 0 PID: 17007 Comm: syz-executor.4 Not tainted 5.10.194 #1 [ 3264.859937] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3264.861142] Call Trace: [ 3264.861536] dump_stack+0x107/0x167 [ 3264.862070] should_fail.cold+0x5/0xa [ 3264.862636] ? create_object.isra.0+0x3a/0xa20 [ 3264.863322] should_failslab+0x5/0x20 [ 3264.863885] kmem_cache_alloc+0x5b/0x310 [ 3264.864474] create_object.isra.0+0x3a/0xa20 [ 3264.865130] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3264.865883] kmem_cache_alloc+0x159/0x310 [ 3264.866506] vm_area_dup+0x78/0x290 [ 3264.867055] ? copy_page_range+0x24e9/0x3810 [ 3264.867733] ? vm_area_alloc+0x110/0x110 [ 3264.868329] ? find_held_lock+0x2c/0x110 [ 3264.868924] ? vm_iomap_memory+0x190/0x190 [ 3264.869543] ? __vma_link_rb+0x540/0x700 [ 3264.870166] copy_process+0x291b/0x7800 [ 3264.870794] ? __cleanup_sighand+0xb0/0xb0 [ 3264.871425] ? lock_acquire+0x197/0x470 [ 3264.872033] ? find_held_lock+0x2c/0x110 [ 3264.872653] kernel_clone+0xe7/0x980 [ 3264.873201] ? lock_downgrade+0x6d0/0x6d0 [ 3264.873792] ? find_held_lock+0x2c/0x110 [ 3264.874387] ? create_io_thread+0xf0/0xf0 [ 3264.874986] ? ksys_write+0x12d/0x260 [ 3264.875546] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3264.876245] __do_sys_fork+0x8a/0xc0 [ 3264.876790] ? kernel_thread+0xf0/0xf0 [ 3264.877369] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3264.878117] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3264.878857] ? trace_hardirqs_on+0x5b/0x180 [ 3264.879474] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3264.880235] do_syscall_64+0x33/0x40 [ 3264.880785] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 3264.881511] RIP: 0033:0x7f4ded6f8b19 [ 3264.882040] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3264.884641] RSP: 002b:00007f4deac6e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 3264.885724] RAX: ffffffffffffffda RBX: 00007f4ded80bf60 RCX: 00007f4ded6f8b19 [ 3264.886736] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 3264.887752] RBP: 00007f4deac6e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3264.888756] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3264.889763] R13: 00007ffdd13eda0f R14: 00007f4deac6e300 R15: 0000000000022000 20:25:11 executing program 5: r0 = creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) open_by_handle_at(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="5000000000000004000000"], 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f0000000200)=0x6, 0x4) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000d03000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) 20:25:11 executing program 3: statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f0000000200)=0x6, 0x4) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000340)=ANY=[@ANYBLOB="01080000011270c839284f30e054da4374340020000000000000", @ANYRES32, @ANYBLOB="ffa22106351700002e2f661c696c653000"]) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) pread64(0xffffffffffffffff, &(0x7f0000000400)=""/255, 0xff, 0x7eb9) dup(0xffffffffffffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0), 0x9) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="1400fd00000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) 20:25:11 executing program 1: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x46842, 0x0) io_setup(0x5, &(0x7f0000000080)) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x8800000) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x5, r3, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x102, 0xb91}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f00000001c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7}}, './file1\x00'}) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) r5 = syz_io_uring_setup(0x3de4, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000180), &(0x7f0000002a40)) ioctl$BLKTRACESTART(r4, 0x1274, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x882c2, 0x0) fsync(r6) ioctl$FS_IOC_GETFSMAP(r6, 0xc0c0583b, &(0x7f0000000440)={0x0, 0x0, 0x5, 0x0, '\x00', [{0x7, 0x7fff, 0x5, 0xffff, 0x8, 0x401}, {0x9, 0x81, 0xfffe00000000, 0x1000, 0x2}], ['\x00', '\x00', '\x00', '\x00', '\x00']}) io_uring_enter(r5, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$FIGETBSZ(r5, 0x2, &(0x7f0000000240)) 20:25:11 executing program 0: creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) pread64(0xffffffffffffffff, &(0x7f0000000400)=""/255, 0xff, 0x7eb9) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000600000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) 20:25:11 executing program 3: statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f0000000200)=0x6, 0x4) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000340)=ANY=[@ANYBLOB="01080000011270c839284f30e054da4374340020000000000000", @ANYRES32, @ANYBLOB="ffa22106351700002e2f661c696c653000"]) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) pread64(0xffffffffffffffff, &(0x7f0000000400)=""/255, 0xff, 0x7eb9) dup(0xffffffffffffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0), 0x9) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="1400f401000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) 20:25:11 executing program 7: creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000003000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) 20:25:11 executing program 5: r0 = creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) open_by_handle_at(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="5000000000000004000000"], 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f0000000200)=0x6, 0x4) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="1400e803000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) 20:25:11 executing program 6: sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x8) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x48, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x2c, 0xe, {@with_ht={{{}, {}, @broadcast, @broadcast, @random="dd0b7470fe16"}}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}]]}, 0x48}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = dup(r4) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x28, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)={0x3b0, r1, 0x100, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x3, 0x33}}}}, [@NL80211_ATTR_TX_RATES={0x370, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x9c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x8000, 0xfff, 0x9, 0x20, 0x5, 0x5, 0x7f5]}}, @NL80211_TXRATE_HT={0x21, 0x2, [{0x0, 0x4}, {0x3, 0x4}, {0x7, 0x1}, {0x5, 0x6}, {0x6, 0x8}, {0x3, 0x9}, {0x7, 0x9}, {0x3, 0x6}, {0x5, 0x3}, {0x6, 0x6}, {0x7, 0x1}, {0x4, 0x2}, {0x5, 0x4}, {0x2, 0x3}, {0x5, 0x3}, {0x0, 0x2}, {0x4}, {}, {0x4, 0x8}, {0x3, 0x2}, {0x4, 0x4}, {0x2}, {0x2, 0x8}, {0x0, 0x9}, {0x4, 0x7}, {0x3, 0x3}, {0x0, 0x9}, {0x5, 0x3}, {0x1, 0x6}]}, @NL80211_TXRATE_HT={0x37, 0x2, [{0x1, 0x6}, {0x2, 0x1}, {0x0, 0xa}, {0x7}, {0x6, 0x9}, {0x1, 0xa}, {0x4, 0x4}, {0x0, 0x5}, {0x2, 0x6}, {0x3, 0x1}, {0x2, 0x9}, {0x3, 0xa}, {0x3, 0x3}, {0x0, 0x5}, {0x5, 0x9}, {0x1, 0x9}, {0x1, 0x4}, {0x6, 0x5}, {0x0, 0x1}, {0x0, 0x9}, {0x4}, {0x2, 0x1}, {0x4, 0x6}, {0x6, 0x2}, {0x7, 0x3}, {0x4, 0x2}, {0x5, 0x8}, {0x0, 0x8}, {0x3, 0x3}, {0x3, 0x6}, {0x5, 0x4}, {0x0, 0x9}, {0x1, 0x7}, {0x7, 0x6}, {0x1, 0x4}, {0x1, 0xa}, {0x0, 0x2}, {0x1, 0x4}, {0x3, 0x4}, {0x1, 0x3}, {0x0, 0x4}, {0x5}, {0x1, 0x5}, {0x0, 0x8}, {0x7, 0x7}, {0x5, 0x5}, {}, {0x6, 0x4}, {0x5, 0x3}, {0x3, 0x6}, {0x4, 0x5}]}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x6, 0x7}, {0x6, 0x6}, {0x1, 0x3}, {0x1}, {0x2}, {0x6, 0x9}, {0x1, 0x9}, {0x4, 0x5}, {0x3, 0x5}, {0x0, 0xa}, {0x5, 0x5}, {0x7, 0x2}, {0x3, 0x6}, {0x5, 0x8}, {0x1, 0xa}, {0x4, 0x6}, {0x5, 0x4}, {0x3, 0x7}, {0x1}, {0x7, 0x9}, {0x7, 0x2}, {0x0, 0x4}, {0x7, 0x2}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x4}]}, @NL80211_BAND_5GHZ={0xc8, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x0, 0x1000, 0xf800, 0x0, 0x4, 0x8000, 0xd4b]}}, @NL80211_TXRATE_HT={0x49, 0x2, [{0x5, 0x6}, {0x2, 0x9}, {0x3, 0x7}, {0x7, 0x6}, {0x0, 0x8}, {0x4, 0x6}, {0x5, 0x5}, {0x3, 0x7}, {0x1, 0x1}, {0x7}, {0x6}, {0x1, 0x6}, {0x7, 0x3}, {0x2, 0x7}, {0x0, 0x9}, {0x2}, {0x2}, {0x0, 0x3}, {0x7, 0x7}, {0x2, 0x1}, {0x1, 0x9}, {0x6, 0x9}, {0x0, 0x4}, {0x6, 0x9}, {0x3, 0x7}, {0x1, 0x6}, {0x6, 0x6}, {0x1}, {0x3}, {0x3, 0x4}, {0x2, 0x1}, {0x0, 0x8}, {0x3, 0xa}, {0x3, 0x4}, {0x3, 0x4}, {0x4, 0x3}, {0x1, 0x2}, {0x0, 0x3}, {0x6, 0x1}, {0x0, 0x9}, {0x2, 0x4}, {0x3, 0x4}, {0x2, 0x3}, {0x0, 0x1}, {0x4, 0x4}, {0x7, 0x3}, {0x3, 0xa}, {0x2, 0x5}, {0x7, 0x9}, {0x1, 0x6}, {0x5, 0x9}, {0x1, 0xa}, {0x1, 0x3}, {0x0, 0x5}, {0x3, 0x4}, {0x3, 0xa}, {0x4, 0x4}, {0x6, 0x1}, {}, {0x2, 0x8}, {0x4, 0xa}, {0x1, 0x3}, {0x7, 0x2}, {0x0, 0x8}, {0x6, 0x1}, {}, {0x6, 0x5}, {0x7, 0xa}, {0x7, 0x2}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x30, 0xc, 0x0, 0x24, 0x18, 0x9, 0x6c, 0x1b, 0x0, 0xb, 0x6, 0x1b, 0x1, 0x22, 0x18, 0x78cb3086d493bff2, 0x0, 0x24, 0x6, 0x43, 0x2, 0x4, 0x60, 0x6c, 0x18, 0x9, 0xc]}, @NL80211_TXRATE_HT={0x2b, 0x2, [{0x6, 0x7}, {0x1, 0x8}, {0x1, 0xa}, {0x0, 0x5}, {0x7, 0x2}, {0x2, 0x9}, {0x4, 0xa}, {0x4, 0x3}, {0x0, 0x7}, {0x3, 0x12}, {0x0, 0xa}, {0x3, 0x4}, {0x2, 0x4}, {}, {0x4, 0x4}, {0x0, 0x7}, {0x5}, {0x7, 0xa}, {0x4, 0x6}, {0x3, 0x7}, {0x5, 0x3}, {0x1, 0x4}, {0x4, 0x3}, {0x4, 0xa}, {0x0, 0x4}, {0x5}, {0x3, 0x9}, {0x5, 0x3}, {0x1, 0x3}, {0x1, 0x5}, {0x2, 0x1}, {0x5, 0xa}, {0x7}, {0x0, 0x1}, {0x6, 0x4}, {0x1, 0x9}, {0x7, 0x3}, {0x0, 0x8}, {0x3, 0x7}]}, @NL80211_TXRATE_HT={0xf, 0x2, [{0x6, 0x2}, {0x5, 0xa}, {0x1, 0x4}, {0x1, 0x6}, {}, {0x0, 0x6}, {0x1, 0x9}, {0x1, 0xa}, {0x1, 0xa}, {0x2, 0x8}, {0x1, 0x3}]}]}, @NL80211_BAND_60GHZ={0x18, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x3, 0x1ab, 0x9, 0x8, 0x4, 0x7fff, 0x6]}}]}, @NL80211_BAND_60GHZ={0x24, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x1, 0x18, 0x24, 0x6, 0x12, 0x24, 0x6c, 0x18, 0x24, 0x60, 0x4, 0x5, 0x5, 0x19, 0x47a223d525f39398, 0x16, 0xc, 0x1b, 0x48, 0x6, 0x4, 0x12, 0x6c, 0x36, 0x12]}]}, @NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x14, 0x1, [0x60, 0xc, 0x30, 0x1, 0xb, 0x16, 0x2, 0xc, 0x60, 0x2, 0x5, 0x12, 0x4, 0x18, 0x18, 0x60]}]}, @NL80211_BAND_5GHZ={0xa0, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x9, 0xb, 0x41, 0x4, 0x1, 0xb, 0x36, 0x36, 0x24, 0x4, 0x4, 0x4, 0x48, 0x48, 0x16, 0xb, 0x2, 0x18, 0x5, 0x48, 0x36, 0xb, 0x48, 0x2, 0x0, 0x9, 0x24]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0x12, 0xc, 0x30, 0x4, 0x6c, 0x1, 0x4, 0x9, 0x24, 0x1e, 0x48, 0x48, 0x36, 0x2, 0x48, 0x4]}, @NL80211_TXRATE_HT={0xa, 0x2, [{}, {0x3, 0x6}, {0x4, 0x6}, {0x6, 0x5}, {0x3, 0xa}, {0x2, 0x8}]}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x9, 0x48, 0x36, 0xb, 0x0, 0x36]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x30, 0x2, [{0x5}, {0x0, 0x4}, {0x7, 0x5}, {0x0, 0x2}, {0x5, 0x9}, {0x3}, {0x0, 0x8}, {0x3, 0xa}, {0x0, 0x2}, {0x0, 0x1}, {0x1, 0x4}, {0x3, 0x7}, {0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x6}, {0x2, 0x7}, {0x6, 0x5}, {0x2, 0x7}, {0x6, 0xa}, {0x7, 0xa}, {}, {0x1, 0xa}, {0x1, 0x3}, {0x4, 0x2}, {0x6, 0xa}, {0x3, 0x3}, {0x6, 0x7}, {0x6}, {0x5}, {0x0, 0x3}, {0x4, 0x8}, {0x6, 0x6}, {0x5, 0x9}, {0x7, 0x2}, {0x1, 0x4}, {0x4, 0x7}, {0x1, 0x1c}, {0x2, 0x6}, {0x1, 0x4}, {0x5, 0x6}, {0x3, 0x1}, {0x1, 0x3}]}]}, @NL80211_BAND_60GHZ={0x60, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x4, 0x1, 0x2, 0x0, 0x24, 0xb, 0x4, 0x24, 0x1, 0xb, 0x24, 0x60, 0x6c, 0x18, 0x30, 0xc, 0x24, 0xb, 0x48, 0x48, 0x1b, 0x6, 0xb]}, @NL80211_TXRATE_HT={0xd, 0x2, [{0x1, 0x8}, {0x3, 0x7}, {0x3, 0x6}, {0x5, 0x2}, {0x0, 0x9}, {0x6, 0x3}, {0x7, 0x2}, {0x4, 0x3}, {0x0, 0x3}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1ad, 0x1f, 0x7, 0x6, 0x6, 0x9, 0x4, 0x1ff]}}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0xb, 0x3, 0x30, 0x5a, 0x4, 0x15, 0x16, 0xc, 0x4, 0x3, 0xc, 0x6c, 0x1b, 0xc5e84d85826945a2, 0x0, 0x35, 0x1, 0x35, 0x7f, 0x9, 0x18, 0x6c, 0x3, 0x24]}]}, @NL80211_BAND_5GHZ={0xa4, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4f, 0x2, [{0x3, 0x4}, {0x0, 0x9}, {0x7, 0x3}, {0x7, 0x6}, {0x3, 0xa}, {0x7, 0xa}, {0x4, 0x6}, {0x2, 0x4}, {0x5, 0x1}, {0x6, 0x6}, {0x4, 0x6}, {0x2}, {0x5, 0x1}, {0x2, 0x3}, {0x5, 0x3}, {0x1, 0x1}, {0x0, 0x3}, {0x1, 0xa}, {0x0, 0x3}, {0x2, 0x8}, {0x7, 0x6}, {0x6, 0x7}, {}, {0x5, 0x6}, {0x3, 0x3}, {0x3, 0x7}, {0x1, 0x2}, {0x5, 0xa}, {0x1, 0xa}, {0x7, 0x4}, {0x1, 0x7}, {0x3, 0xa}, {0x7}, {0x7, 0x2}, {0x1}, {0x2, 0x6}, {0x3, 0x5}, {0x5, 0x9}, {0x6, 0x7}, {0x6, 0x2}, {0x0, 0xa}, {0x0, 0x8}, {0x5}, {}, {0x1, 0xa}, {0x0, 0xa}, {0x6, 0xa}, {0x6, 0x4}, {0x1, 0x3}, {0x4, 0xa}, {0x1, 0x6}, {0x6, 0x7}, {0x7, 0x5}, {0x0, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x5, 0x5}, {0x7, 0x2}, {0x3, 0x3}, {0x0, 0x9}, {0x3, 0x6}, {0x7, 0xa}, {0x6, 0xa}, {0x1, 0x8}, {0x2, 0x3}, {0x0, 0x9}, {}, {0x2, 0x5}, {0x0, 0xa}, {0x0, 0x1}, {0x1, 0x8}, {0x1, 0x6}, {0x7, 0xa}, {0x3, 0x8}, {0x6, 0x2}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x6c, 0x86c0fd6d58baa6a0, 0x3, 0x9, 0x5, 0x2, 0x1, 0x12, 0x12, 0x16, 0x18, 0x40, 0x24, 0x14, 0x1b, 0x1b, 0x60, 0x5, 0x24, 0x18, 0x6c, 0x12]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x21, 0x2, [{0x1, 0x5}, {0x2, 0x8}, {0x2, 0x6}, {0x7, 0x6}, {0x7, 0x4}, {0x6, 0x2}, {0x0, 0x9}, {0x1, 0x3}, {0x1, 0x7}, {0x5, 0x5}, {0x4, 0x1}, {0x2}, {0x7, 0x8}, {0x4, 0x2}, {0x0, 0x9}, {0x0, 0x5}, {0x1, 0x7}, {0x4, 0x6}, {0x1, 0x9}, {0x6, 0x3}, {0x0, 0x9}, {0x0, 0x9}, {0x4, 0xa}, {0x4}, {0x0, 0x7}, {0x0, 0x9}, {0x7, 0x8}, {0x1, 0x1}, {0x6, 0xa}]}]}, @NL80211_BAND_5GHZ={0x10, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x9, 0x1, [0xc, 0x48, 0x5, 0x48, 0xb]}]}]}, @NL80211_ATTR_MCAST_RATE={0x8}, @NL80211_ATTR_MESH_CONFIG={0x4}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x3b0}, 0x1, 0x0, 0x0, 0x90}, 0x80) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x0, 0x0) pidfd_send_signal(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xb, 0x5, 0x2000000}, 0x0) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file2\x00', 0x40080, 0x127) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000825bd7000ffdbdf254400000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900000000001f00000008000d00feffffff"], 0x30}, 0x1, 0x0, 0x0, 0x20048000}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="1000000017010007002e2f664169"], 0x10) 20:25:26 executing program 4: madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x12) mlock(&(0x7f0000ffb000/0x1000)=nil, 0x1000) fork() (fail_nth: 43) 20:25:26 executing program 1: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x46842, 0x0) io_setup(0x5, &(0x7f0000000080)) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x8800000) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x5, r3, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x10a, 0xb91}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f00000001c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7}}, './file1\x00'}) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) r5 = syz_io_uring_setup(0x3de4, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000180), &(0x7f0000002a40)) ioctl$BLKTRACESTART(r4, 0x1274, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x882c2, 0x0) fsync(r6) ioctl$FS_IOC_GETFSMAP(r6, 0xc0c0583b, &(0x7f0000000440)={0x0, 0x0, 0x5, 0x0, '\x00', [{0x7, 0x7fff, 0x5, 0xffff, 0x8, 0x401}, {0x9, 0x81, 0xfffe00000000, 0x1000, 0x2}], ['\x00', '\x00', '\x00', '\x00', '\x00']}) io_uring_enter(r5, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$FIGETBSZ(r5, 0x2, &(0x7f0000000240)) 20:25:26 executing program 6: sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x8) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x0, 0x0) pidfd_send_signal(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xb, 0x5, 0x2000000}, 0x0) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file2\x00', 0x40080, 0x127) r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, 0x0, 0x800, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x1f}}}}, [@NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0xfffffffe}]}, 0x30}, 0x1, 0x0, 0x0, 0x20048000}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYRES64=r0], 0x10) 20:25:26 executing program 7: creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000004000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) 20:25:26 executing program 0: creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) pread64(0xffffffffffffffff, &(0x7f0000000400)=""/255, 0xff, 0x7eb9) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14ffffff970000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) 20:25:26 executing program 3: statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f0000000200)=0x6, 0x4) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000340)=ANY=[@ANYBLOB="01080000011270c839284f30e054da4374340020000000000000", @ANYRES32, @ANYBLOB="ffa22106351700002e2f661c696c653000"]) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) pread64(0xffffffffffffffff, &(0x7f0000000400)=""/255, 0xff, 0x7eb9) dup(0xffffffffffffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0), 0x9) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="1400e702000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) 20:25:26 executing program 2: statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f0000000200)=0x6, 0x4) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000340)=ANY=[@ANYBLOB="01080000011270c839284f30e054da4374340020000000000000", @ANYRES32, @ANYBLOB="ffa22106351700002e2f661c696c653000"]) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) pread64(0xffffffffffffffff, &(0x7f0000000400)=""/255, 0xff, 0x7eb9) dup(0xffffffffffffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0), 0x9) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="1400f401000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) 20:25:26 executing program 5: r0 = creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) open_by_handle_at(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="5000000000000004000000"], 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f0000000200)=0x6, 0x4) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="1400c005000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) [ 3279.791969] FAULT_INJECTION: forcing a failure. [ 3279.791969] name failslab, interval 1, probability 0, space 0, times 0 [ 3279.794279] CPU: 0 PID: 17070 Comm: syz-executor.4 Not tainted 5.10.194 #1 [ 3279.795665] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3279.797343] Call Trace: [ 3279.797882] dump_stack+0x107/0x167 [ 3279.798618] should_fail.cold+0x5/0xa [ 3279.799379] ? vm_area_dup+0x78/0x290 [ 3279.800166] should_failslab+0x5/0x20 [ 3279.800931] kmem_cache_alloc+0x5b/0x310 [ 3279.801765] vm_area_dup+0x78/0x290 [ 3279.802507] ? avc_has_perm_noaudit+0x1c9/0x3e0 [ 3279.803487] ? lock_downgrade+0x6d0/0x6d0 [ 3279.804397] ? copy_page_range+0x24e9/0x3810 [ 3279.805339] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3279.806466] ? avc_has_perm_noaudit+0x1f7/0x3e0 [ 3279.807455] ? avc_has_extended_perms+0xf40/0xf40 [ 3279.808492] ? copy_process+0x2b60/0x7800 [ 3279.809374] ? vm_area_alloc+0x110/0x110 [ 3279.810231] ? find_held_lock+0x2c/0x110 [ 3279.811120] ? selinux_vm_enough_memory+0x114/0x180 [ 3279.812148] ? selinux_sb_statfs+0x250/0x250 [ 3279.813032] ? up_write+0x191/0x550 [ 3279.813770] ? percpu_counter_add_batch+0x8b/0x140 [ 3279.814779] ? __vm_enough_memory+0x184/0x360 [ 3279.815697] ? security_vm_enough_memory_mm+0x8b/0xc0 [ 3279.816739] copy_process+0x291b/0x7800 [ 3279.817583] ? __cleanup_sighand+0xb0/0xb0 [ 3279.818463] ? find_held_lock+0x2c/0x110 [ 3279.819301] kernel_clone+0xe7/0x980 [ 3279.820090] ? create_io_thread+0xf0/0xf0 [ 3279.820942] ? recalibrate_cpu_khz+0x10/0x10 [ 3279.821811] ? ktime_get+0x158/0x1f0 [ 3279.822592] ? setup_APIC_eilvt+0x2f0/0x2f0 [ 3279.823467] ? clockevents_program_event+0x131/0x360 [ 3279.824681] __do_sys_fork+0x8a/0xc0 [ 3279.825439] ? kernel_thread+0xf0/0xf0 [ 3279.826296] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3279.827564] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3279.828639] ? trace_hardirqs_on+0x5b/0x180 [ 3279.829693] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3279.830754] do_syscall_64+0x33/0x40 [ 3279.831654] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 3279.832707] RIP: 0033:0x7f4ded6f8b19 [ 3279.833611] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3279.837321] RSP: 002b:00007f4deac6e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 3279.839159] RAX: ffffffffffffffda RBX: 00007f4ded80bf60 RCX: 00007f4ded6f8b19 [ 3279.840598] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 3279.842029] RBP: 00007f4deac6e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3279.843447] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3279.844883] R13: 00007ffdd13eda0f R14: 00007f4deac6e300 R15: 0000000000022000 20:25:26 executing program 2: perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) write$bt_hci(r0, &(0x7f0000000080)={0x1, @pin_code_neg_reply={{0x40e, 0x6}}}, 0xa) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="01822fcd9806"], 0x6) ioctl$sock_bt_hci(r0, 0x400448cb, &(0x7f0000000200)="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") r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/snmp\x00') r3 = fsmount(r2, 0x0, 0x88) openat(r3, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) write$bt_hci(r3, &(0x7f0000000000)={0x1, @io_capability_reply={{0x42b, 0x9}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x3, 0x40, 0x4}}}, 0xd) copy_file_range(0xffffffffffffffff, &(0x7f0000000040)=0xf800000000000000, 0xffffffffffffffff, 0x0, 0x8f48, 0x0) write$bt_hci(0xffffffffffffffff, &(0x7f0000001200)={0x1, @le_accept_cis={{0x2066, 0x2}, {0xc9}}}, 0x6) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r1, 0x80489439, &(0x7f0000000140)) dup(0xffffffffffffffff) unshare(0x48020200) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) 20:25:26 executing program 5: r0 = creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) open_by_handle_at(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="5000000000000004000000"], 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f0000000200)=0x6, 0x4) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="1400e605000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) 20:25:26 executing program 7: creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000008000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) 20:25:40 executing program 6: sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2, 0x9}}, './file0/file0\x00'}) r1 = socket(0x2, 0x3, 0x497f) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000240)={0x1c, 0x0, 0x20, 0x70bd2d, 0x25dfdbff, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}]}, 0x1c}}, 0x800) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000540)={{{@in6=@remote, @in6=@mcast1}}, {{@in=@broadcast}, 0x0, @in6=@dev}}, &(0x7f0000000640)=0xe8) sendmsg$NFNL_MSG_ACCT_DEL(r0, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="4800000003070102000000000029c24346af5f0d5300010073797a310000000008000540000000020900010073797a31000000000c40034000000010000800054000000002d4fcdb16899a9befebd788c491ce35b95360b532"], 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x8) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x0, 0x0) pidfd_send_signal(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xb, 0x5, 0x2000000}, 0x0) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file2\x00', 0x40080, 0x127) write$P9_RREADLINK(r2, &(0x7f0000000680)={0x16, 0x17, 0x2, {0xd, './file0/file0'}}, 0x16) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, 0x0, 0x800, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x1f}}}}, [@NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0xfffffffe}]}, 0x30}, 0x1, 0x0, 0x0, 0x20040855}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="1000000017010007002e2f664169"], 0x10) 20:25:40 executing program 3: statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f0000000200)=0x6, 0x4) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000340)=ANY=[@ANYBLOB="01080000011270c839284f30e054da4374340020000000000000", @ANYRES32, @ANYBLOB="ffa22106351700002e2f661c696c653000"]) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) pread64(0xffffffffffffffff, &(0x7f0000000400)=""/255, 0xff, 0x7eb9) dup(0xffffffffffffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0), 0x9) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000003000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) 20:25:40 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)=@pptp={0x18, 0x2, {0x2, @local}}, 0x80) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000080)=0x29eb, 0x4) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000001580)={0x0, {{0xa, 0x4e23, 0x9, @private2, 0x5}}, 0x0, 0x2, [{{0xa, 0x4e20, 0x0, @remote, 0x58}}, {{0xa, 0x4e24, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}]}, 0x190) lseek(0xffffffffffffffff, 0xffffffffffff0001, 0x4) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = fork() perf_event_open(&(0x7f0000000140)={0x4, 0x80, 0x5, 0x0, 0x3, 0x6, 0x0, 0x3800000000, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x9, 0x4, @perf_config_ext={0x800, 0xf01e}, 0x140, 0x0, 0x5, 0x4, 0x9, 0x0, 0x1000, 0x0, 0x8000, 0x0, 0x1}, r2, 0xd, r1, 0x9) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x20040000) r3 = open(&(0x7f0000000000)='./file0\x00', 0x400400, 0xb) sendfile(r0, r3, &(0x7f0000000040)=0x1, 0x7fff) 20:25:40 executing program 7: creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="1400000a000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) 20:25:40 executing program 5: r0 = creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) open_by_handle_at(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="5000000000000004000000"], 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f0000000200)=0x6, 0x4) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="1400000a000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) 20:25:40 executing program 4: madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x12) mlock(&(0x7f0000ffb000/0x1000)=nil, 0x1000) fork() (fail_nth: 44) 20:25:40 executing program 1: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x46842, 0x0) io_setup(0x5, &(0x7f0000000080)) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x8800000) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x5, r3, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x148, 0xb91}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f00000001c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7}}, './file1\x00'}) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) r5 = syz_io_uring_setup(0x3de4, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000180), &(0x7f0000002a40)) ioctl$BLKTRACESTART(r4, 0x1274, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x882c2, 0x0) fsync(r6) ioctl$FS_IOC_GETFSMAP(r6, 0xc0c0583b, &(0x7f0000000440)={0x0, 0x0, 0x5, 0x0, '\x00', [{0x7, 0x7fff, 0x5, 0xffff, 0x8, 0x401}, {0x9, 0x81, 0xfffe00000000, 0x1000, 0x2}], ['\x00', '\x00', '\x00', '\x00', '\x00']}) io_uring_enter(r5, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$FIGETBSZ(r5, 0x2, &(0x7f0000000240)) 20:25:40 executing program 0: creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) pread64(0xffffffffffffffff, &(0x7f0000000400)=""/255, 0xff, 0x7eb9) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000005c00000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) [ 3293.996098] FAULT_INJECTION: forcing a failure. [ 3293.996098] name failslab, interval 1, probability 0, space 0, times 0 [ 3293.997959] CPU: 0 PID: 17107 Comm: syz-executor.4 Not tainted 5.10.194 #1 [ 3293.998970] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3294.000234] Call Trace: [ 3294.000650] dump_stack+0x107/0x167 [ 3294.001201] should_fail.cold+0x5/0xa [ 3294.001783] ? create_object.isra.0+0x3a/0xa20 [ 3294.002492] should_failslab+0x5/0x20 [ 3294.003073] kmem_cache_alloc+0x5b/0x310 [ 3294.003707] create_object.isra.0+0x3a/0xa20 [ 3294.004356] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3294.005097] kmem_cache_alloc+0x159/0x310 [ 3294.005738] vm_area_dup+0x78/0x290 [ 3294.006300] ? avc_has_perm_noaudit+0x1c9/0x3e0 [ 3294.007024] ? lock_downgrade+0x6d0/0x6d0 [ 3294.007654] ? copy_page_range+0x24e9/0x3810 [ 3294.008304] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3294.009084] ? avc_has_perm_noaudit+0x1f7/0x3e0 [ 3294.009781] ? avc_has_extended_perms+0xf40/0xf40 [ 3294.010501] ? copy_process+0x2b60/0x7800 [ 3294.011124] ? vm_area_alloc+0x110/0x110 [ 3294.011722] ? find_held_lock+0x2c/0x110 [ 3294.012343] ? selinux_vm_enough_memory+0x114/0x180 [ 3294.013082] ? selinux_sb_statfs+0x250/0x250 [ 3294.013737] ? up_write+0x191/0x550 [ 3294.014281] ? percpu_counter_add_batch+0x8b/0x140 [ 3294.015016] ? __vm_enough_memory+0x184/0x360 [ 3294.015684] ? security_vm_enough_memory_mm+0x8b/0xc0 [ 3294.016448] copy_process+0x291b/0x7800 [ 3294.017081] ? __cleanup_sighand+0xb0/0xb0 [ 3294.017712] ? lock_acquire+0x197/0x470 [ 3294.018311] ? find_held_lock+0x2c/0x110 [ 3294.018913] kernel_clone+0xe7/0x980 [ 3294.019471] ? lock_downgrade+0x6d0/0x6d0 [ 3294.020087] ? find_held_lock+0x2c/0x110 [ 3294.020689] ? create_io_thread+0xf0/0xf0 [ 3294.021305] ? ksys_write+0x12d/0x260 [ 3294.021879] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3294.022597] __do_sys_fork+0x8a/0xc0 [ 3294.023147] ? kernel_thread+0xf0/0xf0 [ 3294.023733] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3294.024511] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3294.025269] ? trace_hardirqs_on+0x5b/0x180 [ 3294.025913] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3294.026683] do_syscall_64+0x33/0x40 [ 3294.027240] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 3294.027991] RIP: 0033:0x7f4ded6f8b19 [ 3294.028550] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3294.031281] RSP: 002b:00007f4deac6e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 3294.032416] RAX: ffffffffffffffda RBX: 00007f4ded80bf60 RCX: 00007f4ded6f8b19 [ 3294.033472] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 3294.034540] RBP: 00007f4deac6e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3294.035589] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3294.036645] R13: 00007ffdd13eda0f R14: 00007f4deac6e300 R15: 0000000000022000 20:25:40 executing program 7: creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="1400000e000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) 20:25:40 executing program 5: r0 = creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) open_by_handle_at(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="5000000000000004000000"], 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f0000000200)=0x6, 0x4) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="1400030d000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) 20:25:40 executing program 3: statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f0000000200)=0x6, 0x4) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000340)=ANY=[@ANYBLOB="01080000011270c839284f30e054da4374340020000000000000", @ANYRES32, @ANYBLOB="ffa22106351700002e2f661c696c653000"]) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) pread64(0xffffffffffffffff, &(0x7f0000000400)=""/255, 0xff, 0x7eb9) dup(0xffffffffffffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0), 0x9) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000d03000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) 20:25:40 executing program 0: creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) pread64(0xffffffffffffffff, &(0x7f0000000400)=""/255, 0xff, 0x7eb9) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000005e60000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) 20:25:40 executing program 6: sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x400a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x0, 0x0, 0xffffffffffffffff, 0xa) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x0, 0x0) pidfd_send_signal(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xb, 0x5, 0x2000000}, 0x0) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file2\x00', 0x40080, 0x127) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, 0x0, 0x800, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x1f}}}}, [@NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0xfffffffe}]}, 0x30}, 0x1, 0x0, 0x0, 0x20048000}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="1000000017010007002e2f664169"], 0x10) 20:25:40 executing program 7: creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000060000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) 20:25:40 executing program 1: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x46842, 0x0) io_setup(0x5, &(0x7f0000000080)) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x8800000) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x5, r3, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x14c, 0xb91}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f00000001c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7}}, './file1\x00'}) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) r5 = syz_io_uring_setup(0x3de4, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000180), &(0x7f0000002a40)) ioctl$BLKTRACESTART(r4, 0x1274, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x882c2, 0x0) fsync(r6) ioctl$FS_IOC_GETFSMAP(r6, 0xc0c0583b, &(0x7f0000000440)={0x0, 0x0, 0x5, 0x0, '\x00', [{0x7, 0x7fff, 0x5, 0xffff, 0x8, 0x401}, {0x9, 0x81, 0xfffe00000000, 0x1000, 0x2}], ['\x00', '\x00', '\x00', '\x00', '\x00']}) io_uring_enter(r5, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$FIGETBSZ(r5, 0x2, &(0x7f0000000240)) 20:25:54 executing program 3: statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f0000000200)=0x6, 0x4) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000340)=ANY=[@ANYBLOB="01080000011270c839284f30e054da4374340020000000000000", @ANYRES32, @ANYBLOB="ffa22106351700002e2f661c696c653000"]) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) pread64(0xffffffffffffffff, &(0x7f0000000400)=""/255, 0xff, 0x7eb9) dup(0xffffffffffffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0), 0x9) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="1400e803000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) 20:25:54 executing program 5: r0 = creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) open_by_handle_at(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="5000000000000004000000"], 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f0000000200)=0x6, 0x4) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="1400000e000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) [ 3307.458346] FAULT_INJECTION: forcing a failure. [ 3307.458346] name failslab, interval 1, probability 0, space 0, times 0 [ 3307.459756] CPU: 0 PID: 17170 Comm: syz-executor.4 Not tainted 5.10.194 #1 [ 3307.460593] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3307.461582] Call Trace: [ 3307.461935] dump_stack+0x107/0x167 [ 3307.462379] should_fail.cold+0x5/0xa [ 3307.462841] ? anon_vma_clone+0xdc/0x590 [ 3307.463332] should_failslab+0x5/0x20 [ 3307.463792] kmem_cache_alloc+0x5b/0x310 [ 3307.464298] anon_vma_clone+0xdc/0x590 [ 3307.464775] anon_vma_fork+0x82/0x640 [ 3307.465235] ? __vm_enough_memory+0x184/0x360 [ 3307.465825] copy_process+0x7218/0x7800 [ 3307.466329] ? __cleanup_sighand+0xb0/0xb0 [ 3307.466843] ? lock_acquire+0x197/0x470 [ 3307.467327] ? find_held_lock+0x2c/0x110 [ 3307.467818] kernel_clone+0xe7/0x980 [ 3307.468271] ? lock_downgrade+0x6d0/0x6d0 [ 3307.468809] ? find_held_lock+0x2c/0x110 [ 3307.469296] ? create_io_thread+0xf0/0xf0 [ 3307.469796] ? ksys_write+0x12d/0x260 [ 3307.470260] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3307.470841] __do_sys_fork+0x8a/0xc0 [ 3307.471321] ? kernel_thread+0xf0/0xf0 [ 3307.471800] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3307.472435] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3307.473045] ? trace_hardirqs_on+0x5b/0x180 [ 3307.473755] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3307.474371] do_syscall_64+0x33/0x40 [ 3307.474819] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 3307.475427] RIP: 0033:0x7f4ded6f8b19 [ 3307.475916] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3307.478263] RSP: 002b:00007f4deac6e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 3307.479243] RAX: ffffffffffffffda RBX: 00007f4ded80bf60 RCX: 00007f4ded6f8b19 [ 3307.480161] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 3307.481080] RBP: 00007f4deac6e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3307.481995] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3307.482908] R13: 00007ffdd13eda0f R14: 00007f4deac6e300 R15: 0000000000022000 20:25:54 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000280)=0x1000000, 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x100000001) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000100)=0x0) fcntl$setown(r1, 0x8, r3) r4 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x100000001) bind$packet(r4, &(0x7f0000000000)={0x11, 0xf8, 0x0, 0x1, 0x8, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x14) r6 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r6, r7, 0x0, 0x100000001) sendmsg(r7, &(0x7f0000000140)={&(0x7f0000000040)=@tipc=@id={0x1e, 0x3, 0x3, {0x4e21}}, 0x80, &(0x7f00000000c0)=[{&(0x7f00000003c0)="828743ff93fea2bfdcad43c3c820c43d95856686f50aee178874d566f8ac5d236a31e822ce9793e746acd75dd4805e3726d9b82b1636e296eaceda6272427ae1cfaf3506b47e4f185b387a59075d511170f041a99331459992dbb7c2ca4b2df12573f601b6417173180e84cf850b956b9ed36b0d8f679eba1f232a0ab7204a1b98fb45d32f7988cf151e3af51fb1acc08f00924ba9da72b282c9c69eb8d0e2c246de8d576909be35a572ab697452754a57ed943e35fe51de9d98f3401afe118ae388cebf4dcd131c1650bb2122b412b993464eb507a18446d86f13ee15d97852040ed525d05304d929aae11ec3a87bb3923950d0196949cf6009", 0xfa}, {&(0x7f00000004c0)="70e9d60319b5b6e35f421e21591b6f1a0788939f8770cbb25a624525e4b8ea295d27797d867e0419e4617407430e79d3e9795430146bc670fc72bbc3931c94c9531258a91fb11604a12d9bcc528432eed3e6c2eb0bc338058120b8046d588620f96f220ffe7e5482ba32a9829da3b485a451a7732d81b9c55ba584242d1cceee1ea05382050d3e61fd34c1f168a4bcc9572a28f7c63faa6740087bb0f017de3df814a88cb080bbfaecfec63a601509cdef8ded4dc9a515ec3cfb8df36ab93fed3935801055d307c7835509e83da636155cca9d4edc335e84166a4431ce9f6a3481986256e4af24c8dcad25aeeb05d9", 0xef}], 0x2, &(0x7f0000001680)=ANY=[@ANYBLOB="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"], 0x1010}, 0x200020d0) sendmsg(r0, &(0x7f0000000240)={&(0x7f00000001c0)=@nfc_llcp={0x27, 0x2, 0x0, 0x4, 0x4, 0xf9, "473d7fcc5089a8e3eef4ada46207000062ea0b5e364eee0def00001742ea967601003d90df0000000100000000000000000000000000000000000800", 0x2e}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000180)="48040000eec0e872a91832", 0xb}], 0x1}, 0x48000) r8 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r8, r9, 0x0, 0x100000001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TEE={0x21, 0x5, 0x0, @fd_index, 0x0, 0x0, 0x7, 0x0, 0x0, {0x0, 0x0, r9}}, 0x8001) 20:25:54 executing program 1: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x46842, 0x0) io_setup(0x5, &(0x7f0000000080)) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x8800000) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x5, r3, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x168, 0xb91}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f00000001c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7}}, './file1\x00'}) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) r5 = syz_io_uring_setup(0x3de4, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000180), &(0x7f0000002a40)) ioctl$BLKTRACESTART(r4, 0x1274, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x882c2, 0x0) fsync(r6) ioctl$FS_IOC_GETFSMAP(r6, 0xc0c0583b, &(0x7f0000000440)={0x0, 0x0, 0x5, 0x0, '\x00', [{0x7, 0x7fff, 0x5, 0xffff, 0x8, 0x401}, {0x9, 0x81, 0xfffe00000000, 0x1000, 0x2}], ['\x00', '\x00', '\x00', '\x00', '\x00']}) io_uring_enter(r5, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$FIGETBSZ(r5, 0x2, &(0x7f0000000240)) 20:25:54 executing program 7: creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="140000fd000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) 20:25:54 executing program 0: creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) pread64(0xffffffffffffffff, &(0x7f0000000400)=""/255, 0xff, 0x7eb9) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000002e70000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) 20:25:54 executing program 6: sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0x3f, 0xffffffffffffffff, 0x8) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x0, 0x0) pidfd_send_signal(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xb, 0x5, 0x2000000}, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f00000002c0)='./file2\x00', 0x40080, 0x127) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket(0x9, 0x2, 0x7fffffff) mkdirat(r1, &(0x7f0000000280)='./file0\x00', 0x6) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, 0x0, 0x800, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x1f}}}}, [@NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0xfffffffe}]}, 0x30}, 0x1, 0x0, 0x0, 0x20048000}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="1021000017010007002e2f664169"], 0x10) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000180)) 20:25:54 executing program 4: madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x12) mlock(&(0x7f0000ffb000/0x1000)=nil, 0x1000) fork() (fail_nth: 45) 20:25:54 executing program 0: creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) pread64(0xffffffffffffffff, &(0x7f0000000400)=""/255, 0xff, 0x7eb9) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000003e80000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) 20:25:54 executing program 3: statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f0000000200)=0x6, 0x4) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000340)=ANY=[@ANYBLOB="01080000011270c839284f30e054da4374340020000000000000", @ANYRES32, @ANYBLOB="ffa22106351700002e2f661c696c653000"]) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) pread64(0xffffffffffffffff, &(0x7f0000000400)=""/255, 0xff, 0x7eb9) dup(0xffffffffffffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0), 0x9) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="1400c005000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) 20:25:54 executing program 5: r0 = creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) open_by_handle_at(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="5000000000000004000000"], 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f0000000200)=0x6, 0x4) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000020000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) 20:25:54 executing program 7: creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="140000f4010000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) 20:25:54 executing program 4: madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x12) mlock(&(0x7f0000ffb000/0x1000)=nil, 0x1000) fork() (fail_nth: 46) 20:25:54 executing program 5: r0 = creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) open_by_handle_at(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="5000000000000004000000"], 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f0000000200)=0x6, 0x4) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000060000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) [ 3307.784819] FAULT_INJECTION: forcing a failure. [ 3307.784819] name failslab, interval 1, probability 0, space 0, times 0 [ 3307.787214] CPU: 1 PID: 17213 Comm: syz-executor.4 Not tainted 5.10.194 #1 [ 3307.788637] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3307.790356] Call Trace: [ 3307.790906] dump_stack+0x107/0x167 [ 3307.791665] should_fail.cold+0x5/0xa [ 3307.792470] ? vm_area_dup+0x78/0x290 [ 3307.793254] should_failslab+0x5/0x20 [ 3307.794035] kmem_cache_alloc+0x5b/0x310 [ 3307.794876] vm_area_dup+0x78/0x290 [ 3307.795637] ? avc_has_perm_noaudit+0x1c9/0x3e0 [ 3307.796612] ? lock_downgrade+0x6d0/0x6d0 [ 3307.797459] ? copy_page_range+0x24e9/0x3810 [ 3307.798360] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3307.799443] ? avc_has_perm_noaudit+0x1f7/0x3e0 [ 3307.800406] ? avc_has_extended_perms+0xf40/0xf40 [ 3307.801393] ? copy_process+0x2b60/0x7800 [ 3307.802250] ? vm_area_alloc+0x110/0x110 [ 3307.803086] ? find_held_lock+0x2c/0x110 [ 3307.803930] ? selinux_vm_enough_memory+0x114/0x180 [ 3307.804974] ? selinux_sb_statfs+0x250/0x250 [ 3307.805875] ? up_write+0x191/0x550 [ 3307.806639] ? percpu_counter_add_batch+0x8b/0x140 [ 3307.807667] ? __vm_enough_memory+0x184/0x360 [ 3307.808608] ? security_vm_enough_memory_mm+0x8b/0xc0 [ 3307.809668] copy_process+0x291b/0x7800 [ 3307.810520] ? __cleanup_sighand+0xb0/0xb0 [ 3307.811412] ? lock_acquire+0x197/0x470 [ 3307.812235] ? find_held_lock+0x2c/0x110 [ 3307.813064] kernel_clone+0xe7/0x980 [ 3307.813825] ? lock_downgrade+0x6d0/0x6d0 [ 3307.814663] ? find_held_lock+0x2c/0x110 [ 3307.815490] ? create_io_thread+0xf0/0xf0 [ 3307.816360] ? ksys_write+0x12d/0x260 [ 3307.817147] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3307.818142] __do_sys_fork+0x8a/0xc0 [ 3307.818899] ? kernel_thread+0xf0/0xf0 [ 3307.819728] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3307.820799] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3307.821853] ? trace_hardirqs_on+0x5b/0x180 [ 3307.822729] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3307.823794] do_syscall_64+0x33/0x40 [ 3307.824574] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 3307.825613] RIP: 0033:0x7f4ded6f8b19 [ 3307.826373] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3307.830130] RSP: 002b:00007f4deac6e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 3307.831689] RAX: ffffffffffffffda RBX: 00007f4ded80bf60 RCX: 00007f4ded6f8b19 [ 3307.833152] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 3307.834606] RBP: 00007f4deac6e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3307.836077] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3307.837515] R13: 00007ffdd13eda0f R14: 00007f4deac6e300 R15: 0000000000022000 20:25:54 executing program 0: creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) pread64(0xffffffffffffffff, &(0x7f0000000400)=""/255, 0xff, 0x7eb9) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000001f40000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) 20:25:54 executing program 3: statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f0000000200)=0x6, 0x4) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000340)=ANY=[@ANYBLOB="01080000011270c839284f30e054da4374340020000000000000", @ANYRES32, @ANYBLOB="ffa22106351700002e2f661c696c653000"]) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) pread64(0xffffffffffffffff, &(0x7f0000000400)=""/255, 0xff, 0x7eb9) dup(0xffffffffffffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0), 0x9) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="1400e605000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) 20:25:54 executing program 4: madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x12) mlock(&(0x7f0000ffb000/0x1000)=nil, 0x1000) fork() (fail_nth: 47) 20:25:54 executing program 6: sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, 0x0, 0x4c000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x8) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x0, 0x0) pidfd_send_signal(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xb, 0x5, 0x2000000}, 0x0) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file2\x00', 0x40080, 0x127) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, 0x0, 0x800, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x1f}}}}, [@NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0xfffffffe}]}, 0x30}, 0x1, 0x0, 0x0, 0x20048000}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="1000000017010007002e2f664169"], 0x10) [ 3308.056770] FAULT_INJECTION: forcing a failure. [ 3308.056770] name failslab, interval 1, probability 0, space 0, times 0 [ 3308.059234] CPU: 0 PID: 17228 Comm: syz-executor.4 Not tainted 5.10.194 #1 [ 3308.060733] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3308.062431] Call Trace: [ 3308.062984] dump_stack+0x107/0x167 [ 3308.063736] should_fail.cold+0x5/0xa [ 3308.064533] ? create_object.isra.0+0x3a/0xa20 [ 3308.065478] should_failslab+0x5/0x20 [ 3308.066250] kmem_cache_alloc+0x5b/0x310 [ 3308.067080] create_object.isra.0+0x3a/0xa20 [ 3308.067968] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3308.069016] kmem_cache_alloc+0x159/0x310 [ 3308.069866] vm_area_dup+0x78/0x290 [ 3308.070616] ? avc_has_perm_noaudit+0x1c9/0x3e0 [ 3308.071557] ? lock_downgrade+0x6d0/0x6d0 [ 3308.072407] ? copy_page_range+0x24e9/0x3810 [ 3308.073300] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3308.074373] ? avc_has_perm_noaudit+0x1f7/0x3e0 [ 3308.075317] ? avc_has_extended_perms+0xf40/0xf40 [ 3308.076312] ? copy_process+0x2b60/0x7800 [ 3308.077155] ? vm_area_alloc+0x110/0x110 [ 3308.077978] ? find_held_lock+0x2c/0x110 [ 3308.078817] ? selinux_vm_enough_memory+0x114/0x180 [ 3308.079831] ? selinux_sb_statfs+0x250/0x250 [ 3308.080728] ? up_write+0x191/0x550 [ 3308.081483] ? percpu_counter_add_batch+0x8b/0x140 [ 3308.082493] ? __vm_enough_memory+0x184/0x360 [ 3308.083400] ? security_vm_enough_memory_mm+0x8b/0xc0 [ 3308.084458] copy_process+0x291b/0x7800 [ 3308.085305] ? __cleanup_sighand+0xb0/0xb0 [ 3308.086169] ? lock_acquire+0x197/0x470 [ 3308.086985] ? find_held_lock+0x2c/0x110 [ 3308.087819] kernel_clone+0xe7/0x980 [ 3308.088596] ? lock_downgrade+0x6d0/0x6d0 [ 3308.089442] ? find_held_lock+0x2c/0x110 [ 3308.090270] ? create_io_thread+0xf0/0xf0 [ 3308.091120] ? ksys_write+0x12d/0x260 [ 3308.091911] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3308.092921] __do_sys_fork+0x8a/0xc0 [ 3308.093683] ? kernel_thread+0xf0/0xf0 [ 3308.094532] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3308.095591] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3308.096685] ? trace_hardirqs_on+0x5b/0x180 [ 3308.097569] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3308.098655] do_syscall_64+0x33/0x40 [ 3308.099419] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 3308.100503] RIP: 0033:0x7f4ded6f8b19 [ 3308.101276] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3308.105025] RSP: 002b:00007f4deac6e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 3308.106598] RAX: ffffffffffffffda RBX: 00007f4ded80bf60 RCX: 00007f4ded6f8b19 [ 3308.108066] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 3308.109519] RBP: 00007f4deac6e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3308.111003] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3308.112494] R13: 00007ffdd13eda0f R14: 00007f4deac6e300 R15: 0000000000022000 20:26:08 executing program 1: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x46842, 0x0) io_setup(0x5, &(0x7f0000000080)) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x8800000) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x5, r3, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x16c, 0xb91}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f00000001c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7}}, './file1\x00'}) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) r5 = syz_io_uring_setup(0x3de4, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000180), &(0x7f0000002a40)) ioctl$BLKTRACESTART(r4, 0x1274, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x882c2, 0x0) fsync(r6) ioctl$FS_IOC_GETFSMAP(r6, 0xc0c0583b, &(0x7f0000000440)={0x0, 0x0, 0x5, 0x0, '\x00', [{0x7, 0x7fff, 0x5, 0xffff, 0x8, 0x401}, {0x9, 0x81, 0xfffe00000000, 0x1000, 0x2}], ['\x00', '\x00', '\x00', '\x00', '\x00']}) io_uring_enter(r5, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$FIGETBSZ(r5, 0x2, &(0x7f0000000240)) 20:26:08 executing program 7: creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="140000e7020000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) 20:26:08 executing program 5: r0 = creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) open_by_handle_at(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="5000000000000004000000"], 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f0000000200)=0x6, 0x4) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="140005c0000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) 20:26:08 executing program 3: statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f0000000200)=0x6, 0x4) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000340)=ANY=[@ANYBLOB="01080000011270c839284f30e054da4374340020000000000000", @ANYRES32, @ANYBLOB="ffa22106351700002e2f661c696c653000"]) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) pread64(0xffffffffffffffff, &(0x7f0000000400)=""/255, 0xff, 0x7eb9) dup(0xffffffffffffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0), 0x9) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="1400000a000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) 20:26:08 executing program 0: creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) pread64(0xffffffffffffffff, &(0x7f0000000400)=""/255, 0xff, 0x7eb9) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000fd0000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) 20:26:08 executing program 4: madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x12) mlock(&(0x7f0000ffb000/0x1000)=nil, 0x1000) fork() (fail_nth: 48) 20:26:08 executing program 6: sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = dup(r2) r4 = openat$cgroup_ro(r3, &(0x7f0000000280)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000340), r2) sendmsg$DEVLINK_CMD_GET(r4, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x30, r5, 0x8, 0x70bd2c, 0x25dfdbff, {}, [@pci={{0x8}, {0x11}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4080800}, 0x20000094) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00042dbd7000fbdbdf2544ee000008000300394638cf98978be3f8000180edcf8dfe7c98e6d8b27758", @ANYRES32=r6, @ANYBLOB="08000d0001040000"], 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x8) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x0, 0x0) pidfd_send_signal(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xb, 0x5, 0x2000000}, 0x0) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file2\x00', 0x40080, 0x127) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, 0x0, 0x800, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x1f}}}}, [@NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0xfffffffe}]}, 0x30}, 0x1, 0x0, 0x0, 0x20048000}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="1000000017010007002e2f664169"], 0x10) 20:26:08 executing program 2: ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="0000000018640000"]) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bind$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random="ca73da4133fc"}, 0x14) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x8, &(0x7f0000000000)=0x74000000, 0x4) sendto(r2, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x1, @mcast1}, 0x80) getpeername$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000001c0)=0x14) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000280)={@private0, @dev={0xfe, 0x80, '\x00', 0x1d}, @remote, 0x4, 0x9, 0x1c, 0x400, 0x1b7, 0x200000, r3}) recvmmsg(r2, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x35f, 0x10062, 0x0) [ 3321.560141] FAULT_INJECTION: forcing a failure. [ 3321.560141] name failslab, interval 1, probability 0, space 0, times 0 [ 3321.563092] CPU: 0 PID: 17253 Comm: syz-executor.4 Not tainted 5.10.194 #1 [ 3321.564544] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3321.566246] Call Trace: [ 3321.566791] dump_stack+0x107/0x167 [ 3321.567562] should_fail.cold+0x5/0xa [ 3321.568378] ? create_object.isra.0+0x3a/0xa20 [ 3321.569338] should_failslab+0x5/0x20 [ 3321.570142] kmem_cache_alloc+0x5b/0x310 [ 3321.570973] create_object.isra.0+0x3a/0xa20 [ 3321.571864] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3321.572914] kmem_cache_alloc+0x159/0x310 [ 3321.573757] anon_vma_clone+0xdc/0x590 [ 3321.574552] anon_vma_fork+0x82/0x640 [ 3321.575326] ? __vm_enough_memory+0x184/0x360 [ 3321.576245] copy_process+0x7218/0x7800 [ 3321.577088] ? __cleanup_sighand+0xb0/0xb0 [ 3321.577950] ? lock_acquire+0x197/0x470 [ 3321.578788] ? find_held_lock+0x2c/0x110 [ 3321.579632] kernel_clone+0xe7/0x980 [ 3321.580406] ? lock_downgrade+0x6d0/0x6d0 [ 3321.581257] ? find_held_lock+0x2c/0x110 [ 3321.582087] ? create_io_thread+0xf0/0xf0 [ 3321.582932] ? ksys_write+0x12d/0x260 [ 3321.583720] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3321.584729] __do_sys_fork+0x8a/0xc0 [ 3321.585487] ? kernel_thread+0xf0/0xf0 [ 3321.586305] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3321.587361] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3321.588398] ? trace_hardirqs_on+0x5b/0x180 [ 3321.589264] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3321.590299] do_syscall_64+0x33/0x40 [ 3321.591063] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 3321.592090] RIP: 0033:0x7f4ded6f8b19 [ 3321.592845] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3321.596623] RSP: 002b:00007f4deac6e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 3321.598173] RAX: ffffffffffffffda RBX: 00007f4ded80bf60 RCX: 00007f4ded6f8b19 [ 3321.599615] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 3321.601065] RBP: 00007f4deac6e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3321.602513] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3321.603948] R13: 00007ffdd13eda0f R14: 00007f4deac6e300 R15: 0000000000022000 20:26:08 executing program 3: statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f0000000200)=0x6, 0x4) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000340)=ANY=[@ANYBLOB="01080000011270c839284f30e054da4374340020000000000000", @ANYRES32, @ANYBLOB="ffa22106351700002e2f661c696c653000"]) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) pread64(0xffffffffffffffff, &(0x7f0000000400)=""/255, 0xff, 0x7eb9) dup(0xffffffffffffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0), 0x9) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="1400030d000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) 20:26:08 executing program 7: creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000030000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) 20:26:08 executing program 5: r0 = creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) open_by_handle_at(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="5000000000000004000000"], 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f0000000200)=0x6, 0x4) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="140005e6000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) 20:26:08 executing program 0: creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) pread64(0xffffffffffffffff, &(0x7f0000000400)=""/255, 0xff, 0x7eb9) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="1497ffffff0000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) 20:26:08 executing program 6: sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x8) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x0, 0x0) pidfd_send_signal(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xb, 0x5, 0x2000000}, 0x0) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file2\x00', 0x40080, 0x127) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x1e}}}}, [@NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0xfffffffe}]}, 0x30}, 0x1, 0x0, 0x0, 0x20048000}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="1000000017010007002e2f664169"], 0x10) 20:26:08 executing program 2: fremovexattr(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x31) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x5}, 0x0, 0x0, 0xc00000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0x98a) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd0201000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4ffffffffffffff00000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/256]) r2 = socket$netlink(0x10, 0x3, 0x0) fcntl$dupfd(r2, 0x0, r2) fchmod(0xffffffffffffffff, 0x20) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r2) socket$netlink(0x10, 0x3, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001e00)={0x216c, 0x1c, 0x20, 0x0, 0x0, {0x7}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x9e'}, @nested={0x20a9, 0x73, 0x0, 0x1, [@generic="81c31defce684c6f74fae9f676f491934d4a2f6e34c4fbb5d4353d21ec4f8180dce560f2ad60daa32bdf022afef1218d4af0c465a00065351470775a7dfb2deae41a0335711b380b3811bddd765874ef622d1bd8d07e201b5477b30fa0c58127d7b766687a033f3cb3611529b1b02bbc0a19167b31f2f028ecacced7e90926b3f2c3180ae0e315aaa48dee0fed6900a2304c90bf436e97475145fa3827f886cb4a54f77889fccb5b29aea5028126172a5f8c8f56d00bccb9d50dd33a1ac4e896c93143d5255f060895ddc70d17cd483b979cdae1af4659b9e5e218075bf0a895a8b3c5d3ed11bc7582a00b529294def20b6d164154abdfc9d181655540c16bd2f6a4e2fdd198573681860fe5177ff1380777bbb7613292d4b58e165b4c0b5974e1cc8f795a812211f9c304388a36240466d6a854b77aed995c5e5c681bbf20d64692a422bc8cb1e15144d5bffee1d6b25f9c626293f11d458f77c938a9e379fdfef3f52153a0bfd48f199ab937dd1fae4178fed998e3a6ff6132970d122ac255d731e13e914c9fb84c10ffc9f28e6dc57aa71d4c4b59c9594d0a682cc23b452a1980a53e97c23222225381ff54067a2817e01d3fe4b02a0b7111471a3b91bf4909ebd6eeb32b7c7d49ead406e6cec76169d86b505bfe53d395fde9bbf8c71b7aab0dd4b351e8236fc0eaa645e85ee63cbe89f869055065a8bd07d66f2ab6a38b0b46d9ae9b5a930e91dab3f4445724b53887126ce06da51c5491e8a258c7e3dd0e0a04d026c4fa39c2ec5431e9c67671d4bd59da8b038b08b1d3326d97b406a5890a44b56daf6a3264513106b439ec6c57adad20976825baed997b29715e5658767d8b30cae061923f796e402c3a76c6472d6129e54e56930acd3a8609b95dfc94a16bac3a7386d1df635d96ff34b70c469b97823ff681b329c36a7dc5207951df7ddc8e688464016a0ae8de85362aa758355975bcb8de8699d66221c4d62e52e07e49984323ecdd6c873af9ca674eca63206708e1a353682a17c2be100d81ba2482e24c3471a9f860840cd724f9694bc63ccc1822e82f74b5ba23ce3e6e293191b5018165d1ab8f576209579642e003179b9daaba6814681b6414cdb82dedede67b5d38cce6753afa1b9e006fa0037b79e9ebb4167f7edf1cdbf3b022925b1e249a9046eb47780ea8bd25c50176a71212a04c99604c783cb3c9a771c81f0be2113aaa7eb8ee9fa740fc7e92a863965ecf3134ec635db4162056d4bb4b86ae5893d6a6bbaa076050560e05c5bc2ebec4d23cf62226270ce2303bcc78551f0bfe9eeabe540ef0d8d3f8ff82695f9cd2d8ed42df708085c9f379344391c2fe34289a4d56ac167b8c6da033909afee4846fcbdf57e17be9224e1003944d248dbd25fc445ef854805c9f792ae1b44c7dd3fb6141ce2ea5fdcaf602c9b0ce126a2483cc6b7a63da540a52c736ba78d4b8964111aef5e5328fdc1da09f7c45e9558beaeeee8950d536e55d53f06bfa9b7f8e57c552ccb83620b90b37e3d797c78a1bae884e9d3d9c3aee3fcac321dc0e08ce1aa71d03969651f035157e2d507ba501b259ec4fe8f4f35b091667beecc8ecd4436a24a78bec5d0bf338299fd65a8c40a568d3025bb15d9777027588be81c1f78315ecb132be36101223897c9c79c3d347ce16f163d1915a7034614180b2418b63ab4c0a55bc33aac56c7428f4c7b6f449567873aa51e118096ce8746fcb39c57b55fc773cfa6c0f973adbb999535ce01911368c915501bb01b26d9a9382db9903c193c69eefd6338563e3a7a7d5c5ceb3783ed037b209ff3501eba735053c117db925e1371bb8dba4282a587f4e020a77c05a4638091e6d48a4db9847ad371fef0a55f76bf4289f107516ae7b081c39b3daa89e0029df181a8f44bafc9031d6e2ea5466c026ccafa4faed915f4a37395fd0a99e686742e147981fd6c3925ca8194df6960950085c766e2a347719b6d9bbbec75c73726198050ed72a0e775d07b98f548719da303db352f625aa50dde01c1da6339c793644b8cf494f7d1320d5e5e81ab052b04ace0e3adbd30aa0bd239d9d56cbc3445bdbebc2eb06d1575e14c37b8b65d60706f8395f41a3bff57a925851fcb721445bbc66a640a076c81220b3550758b3b961e3eb3d7ee6efb28dda38ee80e7d48ec7aa2c84e54c0644a79ebcf558ae50bc7bfd7969447c6a343964accb10d1f7b3a8267bd7b8c45764d372d556173cc1212c6d7d4c3828bcd46a5d1b33694e4beb50c8193a57cbfbf8db189bf4a8d644fdf4d61be33f12cd66b5b5a24d65b84114311e77dab4666618e1794b0ec58fd0f8435f81e61565bf181e469708d7466c403566b067da25d0f7a70e9f0d8a8093942c6dd0e8e56ef299920c90082d922453c96f077773d333b21ff78739213cc9ee6a6c5937fc99ca2214d32fd23702a4450b54e475f8c79cf675018ec144e1b7214f4e131561c1605e97037c977de617339f7dfbaee7ff2480edfea745022e7657546de0ef22dd193a9b5aefca476b2a4514d2184c7fff98313ef18584f9d5a408398d16a0add914bc38f1f43468020031d5846a61ddb448a4f9b5baa9424ccc63c23f6156915218b344ec830ce2a891c3dd2e1febe6ccaa986e6e1eaff9073d221fd62bfce1ffa0c0c78e90d9c4df884efd29d8068b75180978326ec72e9cd4f9f0d547a13334b469235839a555fd99ef658c035d7f5d12f6380d50edff423a95e045dcc616552ded315ae847ac8baa73ac47fc14a3e1ff246f74f6e56eedb8f0026d69f508d31e6bec7ec731d889a40ccfb104790dc02c26cb2e2125694152ada282c30faa6fe052d030c0551db85419b9545dea407038be665193d11f96c0477053cff2d491500160091b4e789fa8ad9c0c3d293ea0f03a108042097a991b7513220cf320899f5654db8edc4fbd1affe3254f02a77f3072d1fc6c7f9a3e0a062a0ee3ac049daac2365106b6606390272028e6a1f6081a2ad4f8428b649562f3a7c86b9dd1d67e3872a65d9e97ce9605cc4b5b1149e843485f8383e888149c034b76921d83f6a9526e25fd7e99264f7c206badff668a9887dbf9af51e2171fc55ce3d93c853b317c535441ba3b4b2e8b5df9803492114e0805cc4f911df0889e49c82a3c277048b5d911c25c9daf01e90f79481e5b6eebffe5388d8cc0a881e76b519819deccd84b6d6236f86bd582881353e99d347a6688616f3e4bd6b04c80868a3d43593209cbcaf659c06444ea89b778ca43c507446ff8e8423d8b418e1219f6443ac309c3050d3f537a0c1edf26c9f89805bbbc7f1557e39dd3bd06de694ef73bb1c307ddc8764e94ea66b171a98426bdcbab281e97c0de9709e5d7bbe5940018087f1042b585c3c289f68fda76c5bf15ea9d6907bd29f82a56743bd6cf92e3ec09ea5da57c3953b8eceb88467288b6d770d2cb9aa30729ce40cb658911bc82c23f527e3edd745f0591fa73dafcf47bcec00830d39fea72033bc1796d4d6188f6613332d2169695a51470a53e86c822cfb6b23f7ac0e748d9f1f872a9f2bf561b7b5210d80e581fdde28a5998e7746fae1776f0c31158be4f363ba66a62cef01900f2616897e349b6ead68023f9c7839ee12558567840c1dbc8ad1c34edf7216ed216e37331eec01a1ac62f4e5ec31e6f51faf02f8e332e64bcbb5fcb81a88c0743759c0f4f451838ba8b121f98beace27b21fcc6441a091fb48126f9e2fc5318925dfb297fa1dc2d0fa98d8458f1d12a56a96f4a5336c7cd3c231105ee99d2b235743dc05c99b8d479138e3bbaf5e2e593891bd07678a6d3522af58f71816c62dc0d7d8ed1f50edf2ea35c8caa3aa224b9476ca912d5b6ea6a275c6781c55f199f968769464647119b09577e3a99bd9a3f49767a32991a7e2d290da989fc5a4052ad5c92e8e5e5c6721748efc95e6c558105eb97b3080770c0f9aa1ff4ca4dab3452a86c16659a788b816a31c85c4e24ac12416a6d6332dad3da5f1f6dc1f2bfc6526d0d2f8a021d7977af0644663f3fc94101e358697b4cdac34817bab05b384d1dd33b9df16a27d0923de7dfd592293bbedb2470be83630f6bd792a522fcef3cad2ac8903a73c983f86bb0b05ac697de99a26b2267e319b851379f9e4e360cee606c7458928941da5a0237cee632d76ef2f352173f368c927ff2f88ab23093a99b67e446c40d9039049c9f13973f370e042b154eaf8c18c5065f4121ab52aba3c98a212ed69740e1fa02d32c40db4ab6099e44933e709e85d7e027111e85c7859deff2b486520669b6707f3140d4cb121e48ff9911b32592d8a15aab4c20aca70044c80c130d996b34d4a61370980eb4652648578969d53904efb7935152b058dee557010309474b7918e5e79091a97205cc2df57864f416ec20a1c69a82bb92d91a103c78475ed7345b308b295e72ae3de1e4945b41a06276fca0b6d0ef921c9d267307ba756d398f8fd15929c1de149404a30851163c76a02d58a7d2c999adc20dd359e282fee0e79f9663bcbe8706de90fba886f746fd392684df5bed754c0a0143972f78f117a49f8ab73694abb4a661abfe4fe4c11260fd7f9b67b0d1940a2eabb62bdc9bc1528ab733f3d5a9541214de58f6a4d463f2fff06dfff311bef3c9fbde4b12eab214129b1cf3041950a16d656b5a59a5315f45e1019da2b0d990ac19f4a7f1e2c9ee654c944e70daf314aa569dc2fe78c0c89b556c738938a43bce6c8e9e9a05de9183295151eb92facf5817f11c8137705923a2e242d0e356ce97b512db3ed60c5edbeaff33f004c17d71ce1943e90758815450fad9d593c557aaf74a2ed3cd22cca8c4fc05f49ba55d0893d73a94494899affd924ce8873081a2342d0b6f90b326a771bfe61292dbafa6663dd42f5dc129ff5946bff40ba5d9192ded12adc8d83a21055971852934282e72021b93875def3645adb325d059df6ef1e6721968b97d10aeda62fe8f6a377551139a4595ecf9f2290669ffc309c1876c71e1387e2f652aced69fd66103b246e13a15d7a469a40d9c4d4d87adb4b785b32a78eb93a9cefe587940d5b0b505a5fac980bfb6e8292f86f7e7fa13a37e36d92d3502df72c29bc89647be4042438062abff3c20dcbfb89547d718702fe9c10c9d4423ebede0d955e2b60ee3029ece31c7c501d1aeaeb9873620df970405467de126dd543c2c2867c093e78af9eca00181b3030dd211843b154fb54d798ab50996e081e0c3607e978e23f55b8dfdae98ac91ff857cd3c76d0c42a2a46cf5c0e2de843307911c598a83a532a34986bdad882fb3103fd4dbd8d54804a1c65a9b362c7789cc17edc0906e6e913a655e827643fcae9008e7d6b780a3fbac52780ace349598267d8b8f56e5c4f005a199bd2ff2682735b855ea0929c315236c05f5de11b306ef49092ec4d3e2f93c53156384030e3afdf3a74e9abf2a116abbe4b05c26a61c810973e16379cc904f26b85c8ecfd10a66d171b308c78a587d340b3e5eaebee9ef35ee5ad5894bf069119c4f2d67f7e9554a32c2daf38567e773aeb8c3d9b9a8cbbf13fa4ed6a7fad3acaf5be440df9f9d1cd78295db4acc8cc5c8582fa01bb8e29e553ad68c01e1af1cd2a1a7261818f239e60361da5e074c2a25b3c174eb680ce458bec7a0fc466322dec3d926c78c8b89e56d54645838f8faf47e07db5cfcd5dde799d7ddcae3a9ffcfee7371c1c0d166c7eb53dc57f6c2bb0892b081b28d62b6af59969e9236d75bf8de48a363f2594f7ce5d615d9d096dfbbc7aa41a03100", @generic="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", @typed={0x8, 0x30, 0x0, 0x0, @fd=r3}, @typed={0x14, 0x89, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @typed={0x4, 0x19}, @generic="d9f4cc8c670bf4ebaf4e31707538d97038dd160604c32de002f69328e044a3316254ec48853563d8230fac183b6c985905e72fc708328fee16624966916d8ae29b0cc41d0f629272b064ebd6038d156e63c7a6ee36c61b8d796b1760db8c4b12a80ae6a0d96e695f2ad08084a36e0c18f7f044cbf5d2aa4b1d2d4c80661a7b74ab99080b47"]}, @nested={0xa2, 0x1e, 0x0, 0x1, [@generic="1fb4c9586197b61ce28ae77e049de02b3fd892f5f79a71", @generic="45191b71569464e34e7e454aec4c5d1644efcefa684ad482e5f9c2f4c5cc8cbeb8327c66f1c02eb4b948b35e56ebb07b1c306547a464da8574b7485f5e80010c843fb87acb6d20880f90c7057ad041b473c42306283c5a2c19a147722f68a2bf257f36f7e979112a1b27c727151aacc8232353fb1aa5639ec7b45a344178e543a366da3db34ddc"]}]}, 0x216c}}, 0x0) unshare(0x48020200) fallocate(r0, 0x74, 0x9, 0x7) perf_event_open(&(0x7f00000002c0)={0x5, 0x80, 0xe4, 0xfe, 0x7f, 0x0, 0x0, 0xfffffffffffffff7, 0x40, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x8e, 0x4, @perf_config_ext={0x5, 0x6}, 0x201, 0x3d, 0x0, 0x9a39b97c57c9fb5d, 0x6, 0x6, 0x0, 0x0, 0x8, 0x0, 0x2}, 0x0, 0x10, 0xffffffffffffffff, 0x9) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) r4 = socket(0xf, 0x80000, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000180)={0x0, r4, 0x7ff, 0x100000000, 0x1, 0xff}) 20:26:08 executing program 3: statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f0000000200)=0x6, 0x4) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000340)=ANY=[@ANYBLOB="01080000011270c839284f30e054da4374340020000000000000", @ANYRES32, @ANYBLOB="ffa22106351700002e2f661c696c653000"]) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) pread64(0xffffffffffffffff, &(0x7f0000000400)=""/255, 0xff, 0x7eb9) dup(0xffffffffffffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0), 0x9) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="1400000e000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) 20:26:24 executing program 1: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x46842, 0x0) io_setup(0x5, &(0x7f0000000080)) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x8800000) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x5, r3, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x174, 0xb91}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f00000001c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7}}, './file1\x00'}) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) r5 = syz_io_uring_setup(0x3de4, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000180), &(0x7f0000002a40)) ioctl$BLKTRACESTART(r4, 0x1274, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x882c2, 0x0) fsync(r6) ioctl$FS_IOC_GETFSMAP(r6, 0xc0c0583b, &(0x7f0000000440)={0x0, 0x0, 0x5, 0x0, '\x00', [{0x7, 0x7fff, 0x5, 0xffff, 0x8, 0x401}, {0x9, 0x81, 0xfffe00000000, 0x1000, 0x2}], ['\x00', '\x00', '\x00', '\x00', '\x00']}) io_uring_enter(r5, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$FIGETBSZ(r5, 0x2, &(0x7f0000000240)) 20:26:24 executing program 7: creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="1400000d030000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) 20:26:24 executing program 0: creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) pread64(0xffffffffffffffff, &(0x7f0000000400)=""/255, 0xff, 0x7eb9) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000080000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) 20:26:24 executing program 4: madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x12) mlock(&(0x7f0000ffb000/0x1000)=nil, 0x1000) fork() (fail_nth: 49) 20:26:24 executing program 5: r0 = creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) open_by_handle_at(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="5000000000000004000000"], 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f0000000200)=0x6, 0x4) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="140002e7000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) 20:26:24 executing program 3: statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f0000000200)=0x6, 0x4) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000340)=ANY=[@ANYBLOB="01080000011270c839284f30e054da4374340020000000000000", @ANYRES32, @ANYBLOB="ffa22106351700002e2f661c696c653000"]) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) pread64(0xffffffffffffffff, &(0x7f0000000400)=""/255, 0xff, 0x7eb9) dup(0xffffffffffffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0), 0x9) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000060000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) 20:26:24 executing program 6: sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x8) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x0, 0x0) pidfd_send_signal(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xb, 0x5, 0x2000000}, 0x0) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file2\x00', 0x40080, 0x127) r0 = memfd_create(&(0x7f0000000180)='D\x80IC\xe9', 0x0) ioctl$AUTOFS_IOC_EXPIRE(r0, 0x810c9365, &(0x7f0000000300)={{0xffffffff}, 0x100, './file0\x00'}) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, 0x0, 0x800, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x1f}}}}, [@NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0xfffffffe}]}, 0x30}, 0x1, 0x0, 0x0, 0x20048000}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="1000000017010007002e2f664169"], 0x10) 20:26:24 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10028, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f0000000580)) sendmsg$NFNL_MSG_CTHELPER_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="880000000109010200000000000000000a0000013800020006000340000100001400018008000100ac1414aa08000200ac1e01010c00028005000100840000000c"], 0x88}}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000001b00)) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x48, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() capget(&(0x7f0000000080)={0x20071026, r1}, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000a40), 0x1, 0x601) ioctl$int_in(r2, 0x5452, &(0x7f0000000000)=0x5) write$tcp_mem(r2, &(0x7f0000002040), 0x48) perf_event_open(&(0x7f0000000240)={0x7, 0x80, 0x7f, 0x0, 0x1, 0x1, 0x0, 0x9c85, 0x12008, 0xb, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x40, 0x0, @perf_config_ext={0x9}, 0x0, 0x8, 0x3, 0x6, 0x8c, 0x1, 0x9, 0x0, 0x0, 0x0, 0x1000}, r1, 0x8, r2, 0xb) perf_event_open(0x0, r1, 0x7, r0, 0x2) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net/vlan/config\x00') sendfile(r2, r3, &(0x7f00000002c0)=0x2, 0x3f) perf_event_open(&(0x7f0000000000)={0x7, 0x80, 0x4, 0xc0, 0x73, 0x1f, 0x0, 0x1, 0x8024, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x75d, 0x2, @perf_config_ext={0xe39, 0x1}, 0x12402, 0x100000000, 0x5, 0xe9f2f28f80a8a615, 0x7, 0x7f, 0x0, 0x0, 0x2, 0x0, 0x8}, r1, 0xffffffffffffffff, r3, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x40) [ 3337.988059] FAULT_INJECTION: forcing a failure. [ 3337.988059] name failslab, interval 1, probability 0, space 0, times 0 [ 3337.990545] CPU: 0 PID: 17319 Comm: syz-executor.4 Not tainted 5.10.194 #1 [ 3337.991975] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3337.993668] Call Trace: [ 3337.994207] dump_stack+0x107/0x167 [ 3337.994945] should_fail.cold+0x5/0xa [ 3337.995723] ? anon_vma_clone+0xdc/0x590 [ 3337.996559] should_failslab+0x5/0x20 [ 3337.997732] kmem_cache_alloc+0x5b/0x310 [ 3337.997867] anon_vma_clone+0xdc/0x590 [ 3337.997899] anon_vma_fork+0x82/0x640 [ 3337.997921] ? __vm_enough_memory+0x184/0x360 [ 3337.997946] copy_process+0x7218/0x7800 [ 3337.998005] ? __cleanup_sighand+0xb0/0xb0 [ 3337.998045] ? finish_task_switch+0x126/0x5d0 [ 3337.998075] kernel_clone+0xe7/0x980 [ 3338.004556] ? create_io_thread+0xf0/0xf0 [ 3338.004578] ? _raw_spin_unlock_irq+0x1f/0x30 [ 3338.004594] ? trace_hardirqs_on+0x5b/0x180 [ 3338.004617] ? finish_task_switch+0x1a4/0x5d0 [ 3338.004633] ? __switch_to+0x572/0xf70 [ 3338.004650] ? __switch_to_asm+0x3a/0x60 [ 3338.004666] ? __switch_to_asm+0x34/0x60 [ 3338.004689] ? __schedule+0x82c/0x1ea0 [ 3338.004714] __do_sys_fork+0x8a/0xc0 [ 3338.004733] ? kernel_thread+0xf0/0xf0 [ 3338.004749] ? io_schedule_timeout+0x140/0x140 [ 3338.004787] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3338.004805] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3338.004820] ? trace_hardirqs_on+0x5b/0x180 [ 3338.004841] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3338.004861] do_syscall_64+0x33/0x40 [ 3338.004882] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 3338.004895] RIP: 0033:0x7f4ded6f8b19 [ 3338.004916] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3338.004927] RSP: 002b:00007f4deac6e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 3338.004949] RAX: ffffffffffffffda RBX: 00007f4ded80bf60 RCX: 00007f4ded6f8b19 [ 3338.004960] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 3338.004972] RBP: 00007f4deac6e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3338.004983] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3338.004995] R13: 00007ffdd13eda0f R14: 00007f4deac6e300 R15: 0000000000022000 20:26:24 executing program 7: creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="140000e8030000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) 20:26:24 executing program 3: statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f0000000200)=0x6, 0x4) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000340)=ANY=[@ANYBLOB="01080000011270c839284f30e054da4374340020000000000000", @ANYRES32, @ANYBLOB="ffa22106351700002e2f661c696c653000"]) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) pread64(0xffffffffffffffff, &(0x7f0000000400)=""/255, 0xff, 0x7eb9) dup(0xffffffffffffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0), 0x9) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="140005c0000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) 20:26:24 executing program 0: creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) pread64(0xffffffffffffffff, &(0x7f0000000400)=""/255, 0xff, 0x7eb9) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000100000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) 20:26:24 executing program 5: r0 = creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) open_by_handle_at(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="5000000000000004000000"], 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f0000000200)=0x6, 0x4) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="140003e8000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) 20:26:24 executing program 6: sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x8) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x0, 0x0) pidfd_send_signal(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xb, 0x5, 0x2000000}, 0x0) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file2\x00', 0x40080, 0x127) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, 0x0, 0x800, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x1f}}}}, [@NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0xfffffffe}]}, 0x30}, 0x1, 0x0, 0x0, 0x20048000}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="1000000017010007002e2f664169"], 0x10) 20:26:24 executing program 2: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x0, 0x5, '`\x00\x00\x00\x00\x00\x00@\x00'}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) flock(r1, 0x2) io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x20, 0x0, 0x1cf}) write$tun(0xffffffffffffffff, &(0x7f00000002c0)={@val={0x0, 0x6002}, @void, @x25={0x3, 0x78, 0xf0, "629b7d8c1c69ca26019c72e4168cc94dd3341c1cbd9f859197a212cb4aa641681d4805da969c9570b79b19b8d3e681762af306746d6fed24cf18149685d1aba5d08f26bfcc"}}, 0x4c) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$packet(0xffffffffffffffff, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0xa, 0xe6b5b91, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0x0) r3 = syz_io_uring_setup(0x623f, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r5, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000640)=@IORING_OP_SENDMSG={0x9, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@nl=@unspec, 0x80, &(0x7f0000000140), 0x0, &(0x7f0000000740)=ANY=[@ANYRESHEX=r1, @ANYRES32, @ANYRES64=r2, @ANYBLOB="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", @ANYRESHEX=r2], 0x190}, 0x0, 0x80, 0x0, {0x0, r6}}, 0x3c5a) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000040)) r7 = socket$inet(0x2, 0xa, 0x0) syz_io_uring_submit(r4, 0x0, &(0x7f0000000240)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r7, r0, 0x0) 20:26:24 executing program 3: statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f0000000200)=0x6, 0x4) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000340)=ANY=[@ANYBLOB="01080000011270c839284f30e054da4374340020000000000000", @ANYRES32, @ANYBLOB="ffa22106351700002e2f661c696c653000"]) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) pread64(0xffffffffffffffff, &(0x7f0000000400)=""/255, 0xff, 0x7eb9) dup(0xffffffffffffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0), 0x9) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="140005e6000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) 20:26:24 executing program 4: madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x12) mlock(&(0x7f0000ffb000/0x1000)=nil, 0x1000) fork() (fail_nth: 50) [ 3338.371318] FAULT_INJECTION: forcing a failure. [ 3338.371318] name failslab, interval 1, probability 0, space 0, times 0 [ 3338.373812] CPU: 1 PID: 17362 Comm: syz-executor.4 Not tainted 5.10.194 #1 [ 3338.375205] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3338.376917] Call Trace: [ 3338.377457] dump_stack+0x107/0x167 [ 3338.378199] should_fail.cold+0x5/0xa [ 3338.378971] ? create_object.isra.0+0x3a/0xa20 [ 3338.379910] should_failslab+0x5/0x20 [ 3338.380704] kmem_cache_alloc+0x5b/0x310 [ 3338.381523] create_object.isra.0+0x3a/0xa20 [ 3338.382415] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3338.383441] kmem_cache_alloc+0x159/0x310 [ 3338.384288] anon_vma_clone+0xdc/0x590 [ 3338.385103] anon_vma_fork+0x82/0x640 [ 3338.385886] ? __vm_enough_memory+0x184/0x360 [ 3338.386821] copy_process+0x7218/0x7800 [ 3338.387671] ? __cleanup_sighand+0xb0/0xb0 [ 3338.388553] ? lock_acquire+0x197/0x470 [ 3338.389374] ? find_held_lock+0x2c/0x110 [ 3338.390207] kernel_clone+0xe7/0x980 [ 3338.390966] ? lock_downgrade+0x6d0/0x6d0 [ 3338.391811] ? find_held_lock+0x2c/0x110 [ 3338.392640] ? create_io_thread+0xf0/0xf0 [ 3338.393481] ? ksys_write+0x12d/0x260 [ 3338.394266] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3338.395250] __do_sys_fork+0x8a/0xc0 [ 3338.396003] ? kernel_thread+0xf0/0xf0 [ 3338.396827] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3338.397882] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3338.398923] ? trace_hardirqs_on+0x5b/0x180 [ 3338.399802] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3338.400862] do_syscall_64+0x33/0x40 [ 3338.401624] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 3338.402666] RIP: 0033:0x7f4ded6f8b19 [ 3338.403423] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3338.407168] RSP: 002b:00007f4deac6e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 3338.408752] RAX: ffffffffffffffda RBX: 00007f4ded80bf60 RCX: 00007f4ded6f8b19 [ 3338.410185] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 3338.411621] RBP: 00007f4deac6e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3338.413070] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3338.414509] R13: 00007ffdd13eda0f R14: 00007f4deac6e300 R15: 0000000000022000 20:26:40 executing program 4: madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x12) mlock(&(0x7f0000ffb000/0x1000)=nil, 0x1000) fork() (fail_nth: 51) 20:26:40 executing program 6: sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x8) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x0, 0x0) pidfd_send_signal(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xb, 0x5, 0x2000000}, 0x0) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file2\x00', 0x40080, 0x127) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, 0x0, 0x800, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x1f}}}}, [@NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0xfffffffe}]}, 0x30}, 0x1, 0x0, 0x0, 0x20048000}, 0x0) creat(&(0x7f0000000180)='./file2/file0\x00', 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="1000000017010007002e2f664169"], 0x10) 20:26:40 executing program 0: creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) pread64(0xffffffffffffffff, &(0x7f0000000400)=""/255, 0xff, 0x7eb9) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000200000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) 20:26:40 executing program 2: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x7, 0xffffffffffffffff, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001280)=@updsa={0x160, 0x10, 0x1, 0x0, 0x80, {{@in6=@mcast2, @in6=@private0}, {@in=@rand_addr=0x64010101, 0x0, 0x32}, @in=@multicast1, {}, {0x0, 0x0, 0x0, 0x4}, {}, 0x0, 0x0, 0xa, 0x0, 0x0, 0x6e9cd20eda4faf26}, [@algo_aead={0x70, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x120, 0x40, "976ae46d07d1812fd0664e95dee18314b91df2e10ff98153074f6a02e3550c030000001b"}}]}, 0x160}}, 0x0) sendfile(r3, r0, &(0x7f0000000140)=0x7, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f0000000200)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r2, @ANYBLOB="00000000000000002e2f66696c6530004f3373c2f9c62dd629892577ceb0da43aa021b9f067f2c0d1cf013c370092fc4b673b3f47e686d7095f4f90732ad48aa233aaf89ea32"]) fsetxattr$trusted_overlay_redirect(r5, &(0x7f0000000180), &(0x7f00000002c0)='./file0\x00', 0x68, 0x1) r6 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r6, 0x41, 0x80000001, 0x5) r7 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000280)=0x0) r10 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r8, r9, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r10, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r7, 0x58ab, 0x0, 0x0, 0x0, 0x0) dup2(0xffffffffffffffff, r7) ioctl$INCFS_IOC_PERMIT_FILL(0xffffffffffffffff, 0x40046721, &(0x7f0000000080)={r7}) ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f00000000c0)={0x0, r1, 0x7fff, 0x7, 0x2, 0x7328}) perf_event_open(&(0x7f0000000000)={0x6, 0x80, 0x5, 0x1, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x30}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000580)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f0000000480)=ANY=[@ANYBLOB="c00000001c00000427bd7000fddbdf253c71001400706f6c79313330352d61726d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002801000000000000b0d0b920a20cdacb1b269b1c7bb30d4bfc5e08d7a64b5efdf3252944c95fddafa3c59ed4bc00000024000900040000000000000001000100000000007f708cec1394ab39000000000000001f0000000000000014000e00ff020000000000000000000000000001040000"], 0xc0}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) 20:26:40 executing program 7: creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="140000c0050000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) 20:26:40 executing program 5: r0 = creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) open_by_handle_at(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="5000000000000004000000"], 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f0000000200)=0x6, 0x4) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="140001f4000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) 20:26:40 executing program 3: statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f0000000200)=0x6, 0x4) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000340)=ANY=[@ANYBLOB="01080000011270c839284f30e054da4374340020000000000000", @ANYRES32, @ANYBLOB="ffa22106351700002e2f661c696c653000"]) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) pread64(0xffffffffffffffff, &(0x7f0000000400)=""/255, 0xff, 0x7eb9) dup(0xffffffffffffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0), 0x9) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="140002e7000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) 20:26:40 executing program 1: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x46842, 0x0) io_setup(0x5, &(0x7f0000000080)) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x8800000) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x5, r3, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x17a, 0xb91}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f00000001c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7}}, './file1\x00'}) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) r5 = syz_io_uring_setup(0x3de4, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000180), &(0x7f0000002a40)) ioctl$BLKTRACESTART(r4, 0x1274, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x882c2, 0x0) fsync(r6) ioctl$FS_IOC_GETFSMAP(r6, 0xc0c0583b, &(0x7f0000000440)={0x0, 0x0, 0x5, 0x0, '\x00', [{0x7, 0x7fff, 0x5, 0xffff, 0x8, 0x401}, {0x9, 0x81, 0xfffe00000000, 0x1000, 0x2}], ['\x00', '\x00', '\x00', '\x00', '\x00']}) io_uring_enter(r5, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$FIGETBSZ(r5, 0x2, &(0x7f0000000240)) [ 3354.132818] FAULT_INJECTION: forcing a failure. [ 3354.132818] name failslab, interval 1, probability 0, space 0, times 0 [ 3354.135239] CPU: 1 PID: 17390 Comm: syz-executor.4 Not tainted 5.10.194 #1 [ 3354.136634] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3354.138291] Call Trace: [ 3354.138830] dump_stack+0x107/0x167 [ 3354.139566] should_fail.cold+0x5/0xa [ 3354.140334] ? anon_vma_fork+0xf1/0x640 [ 3354.141144] should_failslab+0x5/0x20 [ 3354.141905] kmem_cache_alloc+0x5b/0x310 [ 3354.142719] anon_vma_fork+0xf1/0x640 [ 3354.143484] ? __vm_enough_memory+0x184/0x360 [ 3354.144393] copy_process+0x7218/0x7800 [ 3354.145243] ? __cleanup_sighand+0xb0/0xb0 [ 3354.146099] ? lock_acquire+0x197/0x470 [ 3354.146903] ? find_held_lock+0x2c/0x110 [ 3354.147728] kernel_clone+0xe7/0x980 [ 3354.148473] ? lock_downgrade+0x6d0/0x6d0 [ 3354.149317] ? find_held_lock+0x2c/0x110 [ 3354.150133] ? create_io_thread+0xf0/0xf0 [ 3354.150971] ? ksys_write+0x12d/0x260 [ 3354.151740] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3354.152728] __do_sys_fork+0x8a/0xc0 [ 3354.153477] ? kernel_thread+0xf0/0xf0 [ 3354.154278] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3354.155319] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3354.156344] ? trace_hardirqs_on+0x5b/0x180 [ 3354.157230] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3354.158260] do_syscall_64+0x33/0x40 [ 3354.159011] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 3354.160038] RIP: 0033:0x7f4ded6f8b19 [ 3354.160789] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3354.164427] RSP: 002b:00007f4deac6e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 3354.165949] RAX: ffffffffffffffda RBX: 00007f4ded80bf60 RCX: 00007f4ded6f8b19 [ 3354.167361] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 3354.168793] RBP: 00007f4deac6e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3354.170227] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3354.171657] R13: 00007ffdd13eda0f R14: 00007f4deac6e300 R15: 0000000000022000 20:26:40 executing program 5: r0 = creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) open_by_handle_at(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="5000000000000004000000"], 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f0000000200)=0x6, 0x4) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="140000fd000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) 20:26:40 executing program 7: creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="140000e6050000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) 20:26:40 executing program 3: statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f0000000200)=0x6, 0x4) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000340)=ANY=[@ANYBLOB="01080000011270c839284f30e054da4374340020000000000000", @ANYRES32, @ANYBLOB="ffa22106351700002e2f661c696c653000"]) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) pread64(0xffffffffffffffff, &(0x7f0000000400)=""/255, 0xff, 0x7eb9) dup(0xffffffffffffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0), 0x9) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="140003e8000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) 20:26:40 executing program 0: creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) pread64(0xffffffffffffffff, &(0x7f0000000400)=""/255, 0xff, 0x7eb9) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000300000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) 20:26:40 executing program 1: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x46842, 0x0) io_setup(0x5, &(0x7f0000000080)) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x8800000) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x5, r3, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x300, 0xb91}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f00000001c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7}}, './file1\x00'}) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) r5 = syz_io_uring_setup(0x3de4, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000180), &(0x7f0000002a40)) ioctl$BLKTRACESTART(r4, 0x1274, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x882c2, 0x0) fsync(r6) ioctl$FS_IOC_GETFSMAP(r6, 0xc0c0583b, &(0x7f0000000440)={0x0, 0x0, 0x5, 0x0, '\x00', [{0x7, 0x7fff, 0x5, 0xffff, 0x8, 0x401}, {0x9, 0x81, 0xfffe00000000, 0x1000, 0x2}], ['\x00', '\x00', '\x00', '\x00', '\x00']}) io_uring_enter(r5, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$FIGETBSZ(r5, 0x2, &(0x7f0000000240)) 20:26:41 executing program 4: madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x12) mlock(&(0x7f0000ffb000/0x1000)=nil, 0x1000) fork() (fail_nth: 52) 20:26:41 executing program 5: r0 = creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) open_by_handle_at(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="5000000000000004000000"], 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f0000000200)=0x6, 0x4) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000080000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) 20:26:41 executing program 7: creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="140000000a0000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) [ 3354.495366] FAULT_INJECTION: forcing a failure. [ 3354.495366] name failslab, interval 1, probability 0, space 0, times 0 [ 3354.497938] CPU: 0 PID: 17427 Comm: syz-executor.4 Not tainted 5.10.194 #1 [ 3354.499431] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3354.501226] Call Trace: [ 3354.501815] dump_stack+0x107/0x167 [ 3354.502613] should_fail.cold+0x5/0xa [ 3354.503434] ? create_object.isra.0+0x3a/0xa20 [ 3354.504422] should_failslab+0x5/0x20 [ 3354.505253] kmem_cache_alloc+0x5b/0x310 [ 3354.506136] create_object.isra.0+0x3a/0xa20 [ 3354.507086] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3354.508191] kmem_cache_alloc+0x159/0x310 [ 3354.509110] anon_vma_fork+0xf1/0x640 [ 3354.509944] ? __vm_enough_memory+0x184/0x360 [ 3354.510918] copy_process+0x7218/0x7800 [ 3354.511818] ? __cleanup_sighand+0xb0/0xb0 [ 3354.512747] ? lock_acquire+0x197/0x470 [ 3354.513607] ? find_held_lock+0x2c/0x110 [ 3354.514484] kernel_clone+0xe7/0x980 [ 3354.515282] ? lock_downgrade+0x6d0/0x6d0 [ 3354.516161] ? find_held_lock+0x2c/0x110 [ 3354.517053] ? create_io_thread+0xf0/0xf0 [ 3354.517950] ? ksys_write+0x12d/0x260 [ 3354.518780] ? __mutex_unlock_slowpath+0xe1/0x600 20:26:41 executing program 6: sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r0, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000540)={&(0x7f00000003c0)={0x70, 0x0, 0x10, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_IFINDEX, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0xffffffffffffff2e}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x70}, 0x1, 0x0, 0x0, 0x10000024}, 0xc050) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r3 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$NET_DM_CMD_START(r0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x14, r3, 0x400, 0x70bd2c, 0x25dfdbff, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40011}, 0x20048040) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x0, 0x0) pidfd_send_signal(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xb, 0x5, 0x2000000}, 0x0) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file2\x00', 0x40080, 0x127) sendmsg$IEEE802154_SET_MACPARAMS(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x54, 0x0, 0x8, 0x70bd25, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LBT_ENABLED={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_CCA_ED_LEVEL={0x8, 0x24, 0x4}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_CCA_MODE={0x5, 0x23, 0x80}, @IEEE802154_ATTR_CCA_MODE={0x5, 0x23, 0x4}, @IEEE802154_ATTR_CSMA_MIN_BE={0x5, 0x26, 0x3}]}, 0x54}, 0x1, 0x0, 0x0, 0x4091}, 0xc000040) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, 0x0, 0x800, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x1f}}}}, [@NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0xfffffffe}]}, 0x30}, 0x1, 0x0, 0x0, 0x20048000}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000800), r4) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x20, 0x0, 0x10, 0x70bd29, 0x25dfdbfe, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x100}]}, 0x20}, 0x1, 0x0, 0x0, 0xc000}, 0x58044) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="1000000017010007002e2f664169"], 0x10) [ 3354.519822] __do_sys_fork+0x8a/0xc0 [ 3354.520804] ? kernel_thread+0xf0/0xf0 [ 3354.521658] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3354.522773] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3354.523870] ? trace_hardirqs_on+0x5b/0x180 [ 3354.524804] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3354.525908] do_syscall_64+0x33/0x40 [ 3354.526705] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 3354.527800] RIP: 0033:0x7f4ded6f8b19 [ 3354.528593] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3354.532518] RSP: 002b:00007f4deac6e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 3354.534158] RAX: ffffffffffffffda RBX: 00007f4ded80bf60 RCX: 00007f4ded6f8b19 [ 3354.535681] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 3354.537229] RBP: 00007f4deac6e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3354.538763] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3354.540286] R13: 00007ffdd13eda0f R14: 00007f4deac6e300 R15: 0000000000022000 20:26:55 executing program 3: statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f0000000200)=0x6, 0x4) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000340)=ANY=[@ANYBLOB="01080000011270c839284f30e054da4374340020000000000000", @ANYRES32, @ANYBLOB="ffa22106351700002e2f661c696c653000"]) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) pread64(0xffffffffffffffff, &(0x7f0000000400)=""/255, 0xff, 0x7eb9) dup(0xffffffffffffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0), 0x9) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="140001f4000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) 20:26:55 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) setns(0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) timerfd_settime(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000001a000101000000000000004000"/28], 0x1c}}, 0x0) readv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000400)=""/253, 0xfd}], 0x1) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x11, 0x0, @scatter={0x6, 0x0, &(0x7f0000000280)=[{&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f00000001c0)=""/132, 0x84}, {&(0x7f0000000500)=""/232, 0xe8}, {&(0x7f0000000600)=""/146, 0x92}, {&(0x7f00000006c0)=""/236, 0xec}, {&(0x7f0000000800)=""/247, 0xf7}]}, &(0x7f00000007c0)="9baccc23f1e8dd762dd01dce09513213bb", 0x0, 0x0, 0x20, 0x0, 0x0}) unshare(0x48020200) 20:26:55 executing program 4: madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x12) mlock(&(0x7f0000ffb000/0x1000)=nil, 0x1000) fork() (fail_nth: 53) 20:26:55 executing program 5: r0 = creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) open_by_handle_at(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="5000000000000004000000"], 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f0000000200)=0x6, 0x4) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000100000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) 20:26:55 executing program 0: creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) pread64(0xffffffffffffffff, &(0x7f0000000400)=""/255, 0xff, 0x7eb9) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000400000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) [ 3369.174259] FAULT_INJECTION: forcing a failure. [ 3369.174259] name failslab, interval 1, probability 0, space 0, times 0 [ 3369.175860] CPU: 0 PID: 17475 Comm: syz-executor.4 Not tainted 5.10.194 #1 [ 3369.176826] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3369.177996] Call Trace: [ 3369.178384] dump_stack+0x107/0x167 [ 3369.178900] should_fail.cold+0x5/0xa [ 3369.179438] ? anon_vma_fork+0x1ff/0x640 [ 3369.180015] should_failslab+0x5/0x20 [ 3369.180548] kmem_cache_alloc+0x5b/0x310 [ 3369.181135] anon_vma_fork+0x1ff/0x640 [ 3369.181672] copy_process+0x7218/0x7800 [ 3369.182241] ? __cleanup_sighand+0xb0/0xb0 [ 3369.182833] ? lock_acquire+0x197/0x470 [ 3369.183386] ? find_held_lock+0x2c/0x110 [ 3369.184061] kernel_clone+0xe7/0x980 [ 3369.184580] ? lock_downgrade+0x6d0/0x6d0 [ 3369.185164] ? find_held_lock+0x2c/0x110 [ 3369.185732] ? create_io_thread+0xf0/0xf0 [ 3369.186314] ? ksys_write+0x12d/0x260 [ 3369.186846] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3369.187516] __do_sys_fork+0x8a/0xc0 [ 3369.188028] ? kernel_thread+0xf0/0xf0 [ 3369.188576] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3369.189314] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3369.190018] ? trace_hardirqs_on+0x5b/0x180 [ 3369.190616] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3369.191332] do_syscall_64+0x33/0x40 [ 3369.191845] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 3369.192545] RIP: 0033:0x7f4ded6f8b19 [ 3369.193068] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3369.195616] RSP: 002b:00007f4deac6e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 3369.196724] RAX: ffffffffffffffda RBX: 00007f4ded80bf60 RCX: 00007f4ded6f8b19 [ 3369.197817] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 3369.198812] RBP: 00007f4deac6e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3369.199800] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3369.200805] R13: 00007ffdd13eda0f R14: 00007f4deac6e300 R15: 0000000000022000 20:26:55 executing program 7: creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="140000030d0000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) 20:26:55 executing program 1: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x46842, 0x0) io_setup(0x5, &(0x7f0000000080)) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x8800000) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x5, r3, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x500, 0xb91}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f00000001c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7}}, './file1\x00'}) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) r5 = syz_io_uring_setup(0x3de4, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000180), &(0x7f0000002a40)) ioctl$BLKTRACESTART(r4, 0x1274, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x882c2, 0x0) fsync(r6) ioctl$FS_IOC_GETFSMAP(r6, 0xc0c0583b, &(0x7f0000000440)={0x0, 0x0, 0x5, 0x0, '\x00', [{0x7, 0x7fff, 0x5, 0xffff, 0x8, 0x401}, {0x9, 0x81, 0xfffe00000000, 0x1000, 0x2}], ['\x00', '\x00', '\x00', '\x00', '\x00']}) io_uring_enter(r5, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$FIGETBSZ(r5, 0x2, &(0x7f0000000240)) 20:26:55 executing program 6: sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x8) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='erofs\x00', 0x0, 0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0xc11e809224134a4a}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)={0x190, 0x0, 0x802, 0x70bd2d, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x1}, {0xc, 0x90, 0x9}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0xffff}, {0xc, 0x90, 0x1ff}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x2}, {0xc, 0x90, 0xc61}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x4}, {0xc, 0x90, 0x165c0000000000}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x5}, {0xc, 0x90, 0x9}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc, 0x8f, 0xea4}, {0xc, 0x90, 0x5}}]}, 0x190}, 0x1, 0x0, 0x0, 0x40804}, 0x800) pidfd_send_signal(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xb, 0x5, 0x2000000}, 0x0) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file2\x00', 0x40080, 0x127) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, 0x0, 0x800, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x1f}}}}, [@NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0xfffffffe}]}, 0x30}, 0x1, 0x0, 0x0, 0x20048000}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="1000000017010007002e2f664169"], 0x10) 20:26:55 executing program 5: r0 = creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) open_by_handle_at(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="5000000000000004000000"], 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f0000000200)=0x6, 0x4) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000200000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) 20:26:55 executing program 3: statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f0000000200)=0x6, 0x4) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000340)=ANY=[@ANYBLOB="01080000011270c839284f30e054da4374340020000000000000", @ANYRES32, @ANYBLOB="ffa22106351700002e2f661c696c653000"]) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) pread64(0xffffffffffffffff, &(0x7f0000000400)=""/255, 0xff, 0x7eb9) dup(0xffffffffffffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0), 0x9) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="140000fd000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) 20:26:55 executing program 0: creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) pread64(0xffffffffffffffff, &(0x7f0000000400)=""/255, 0xff, 0x7eb9) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000a00000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) 20:26:55 executing program 5: r0 = creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) open_by_handle_at(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="5000000000000004000000"], 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f0000000200)=0x6, 0x4) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000300000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) 20:26:55 executing program 7: creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="140000000e0000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) 20:26:56 executing program 4: madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x12) mlock(&(0x7f0000ffb000/0x1000)=nil, 0x1000) fork() (fail_nth: 54) [ 3369.473113] FAULT_INJECTION: forcing a failure. [ 3369.473113] name failslab, interval 1, probability 0, space 0, times 0 [ 3369.475472] CPU: 1 PID: 17514 Comm: syz-executor.4 Not tainted 5.10.194 #1 [ 3369.476862] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3369.478550] Call Trace: [ 3369.479090] dump_stack+0x107/0x167 [ 3369.479835] should_fail.cold+0x5/0xa [ 3369.480593] ? create_object.isra.0+0x3a/0xa20 [ 3369.481538] should_failslab+0x5/0x20 [ 3369.482318] kmem_cache_alloc+0x5b/0x310 [ 3369.483159] create_object.isra.0+0x3a/0xa20 [ 3369.484045] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3369.485130] kmem_cache_alloc+0x159/0x310 [ 3369.485968] anon_vma_fork+0x1ff/0x640 [ 3369.486788] copy_process+0x7218/0x7800 [ 3369.487621] ? __cleanup_sighand+0xb0/0xb0 [ 3369.488502] ? lock_acquire+0x197/0x470 [ 3369.489321] ? find_held_lock+0x2c/0x110 [ 3369.490169] kernel_clone+0xe7/0x980 [ 3369.490916] ? lock_downgrade+0x6d0/0x6d0 [ 3369.491765] ? find_held_lock+0x2c/0x110 [ 3369.492577] ? create_io_thread+0xf0/0xf0 [ 3369.493444] ? ksys_write+0x12d/0x260 [ 3369.494213] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3369.495223] __do_sys_fork+0x8a/0xc0 [ 3369.495999] ? kernel_thread+0xf0/0xf0 [ 3369.496846] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3369.497923] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3369.498983] ? trace_hardirqs_on+0x5b/0x180 [ 3369.499840] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3369.500917] do_syscall_64+0x33/0x40 [ 3369.501666] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 3369.502728] RIP: 0033:0x7f4ded6f8b19 [ 3369.503465] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3369.507273] RSP: 002b:00007f4deac6e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 3369.508871] RAX: ffffffffffffffda RBX: 00007f4ded80bf60 RCX: 00007f4ded6f8b19 [ 3369.510274] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 3369.511716] RBP: 00007f4deac6e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3369.513183] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3369.514628] R13: 00007ffdd13eda0f R14: 00007f4deac6e300 R15: 0000000000022000 20:27:08 executing program 7: creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000600000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) 20:27:08 executing program 3: statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f0000000200)=0x6, 0x4) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000340)=ANY=[@ANYBLOB="01080000011270c839284f30e054da4374340020000000000000", @ANYRES32, @ANYBLOB="ffa22106351700002e2f661c696c653000"]) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) pread64(0xffffffffffffffff, &(0x7f0000000400)=""/255, 0xff, 0x7eb9) dup(0xffffffffffffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0), 0x9) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000080000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) 20:27:08 executing program 2: pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ftruncate(0xffffffffffffffff, 0xffff) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/snmp\x00') preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000000040)=ANY=[], 0x10) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000000040)=""/69, &(0x7f00000000c0)=0x45) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f00000001c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7}}, './file1\x00'}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_opts(r2, 0x29, 0x37, &(0x7f0000000040)=ANY=[], 0x10) getsockopt$inet6_opts(r2, 0x29, 0x37, &(0x7f0000000040)=""/69, &(0x7f00000000c0)=0x45) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000140)={{0x1, 0x1, 0x18, r2, {0x8001}}, './file1\x00'}) getpid() r3 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) openat(r1, &(0x7f0000000100)='./file1\x00', 0x400000, 0x22) sendfile(r0, r3, 0x0, 0x100000001) 20:27:08 executing program 4: madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x12) mlock(&(0x7f0000ffb000/0x1000)=nil, 0x1000) fork() (fail_nth: 55) 20:27:08 executing program 5: r0 = creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) open_by_handle_at(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="5000000000000004000000"], 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f0000000200)=0x6, 0x4) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000400000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) 20:27:08 executing program 0: creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) pread64(0xffffffffffffffff, &(0x7f0000000400)=""/255, 0xff, 0x7eb9) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000030d00000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) 20:27:08 executing program 1: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x46842, 0x0) io_setup(0x5, &(0x7f0000000080)) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x8800000) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x5, r3, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0xa00, 0xb91}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f00000001c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7}}, './file1\x00'}) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) r5 = syz_io_uring_setup(0x3de4, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000180), &(0x7f0000002a40)) ioctl$BLKTRACESTART(r4, 0x1274, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x882c2, 0x0) fsync(r6) ioctl$FS_IOC_GETFSMAP(r6, 0xc0c0583b, &(0x7f0000000440)={0x0, 0x0, 0x5, 0x0, '\x00', [{0x7, 0x7fff, 0x5, 0xffff, 0x8, 0x401}, {0x9, 0x81, 0xfffe00000000, 0x1000, 0x2}], ['\x00', '\x00', '\x00', '\x00', '\x00']}) io_uring_enter(r5, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$FIGETBSZ(r5, 0x2, &(0x7f0000000240)) 20:27:08 executing program 6: sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x8) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x0, 0x0) pidfd_send_signal(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xb, 0x5, 0x2000000}, 0x0) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file2\x00', 0x40080, 0x127) r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, 0x0, 0x800, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x1f}}}}, [@NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0xfffffffe}]}, 0x30}, 0x1, 0x0, 0x0, 0x20048000}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="1000000017010007002e2f664169"], 0x10) ioctl$INCFS_IOC_CREATE_FILE(r0, 0xc058671e, &(0x7f0000000200)={{'\x00', 0x1}, {0xaad0}, 0x0, 0x0, 0x0, &(0x7f0000000180)='./file2\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)="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", 0x104, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x113}) [ 3381.904169] FAULT_INJECTION: forcing a failure. [ 3381.904169] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 3381.906107] CPU: 0 PID: 17533 Comm: syz-executor.4 Not tainted 5.10.194 #1 [ 3381.907222] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3381.908551] Call Trace: [ 3381.909009] dump_stack+0x107/0x167 [ 3381.909610] should_fail.cold+0x5/0xa [ 3381.910223] __alloc_pages_nodemask+0x182/0x600 [ 3381.910968] ? __alloc_pages_slowpath.constprop.0+0x2130/0x2130 [ 3381.911939] ? copy_page_range+0x28e1/0x3810 [ 3381.912647] alloc_pages_current+0x187/0x280 [ 3381.913375] get_zeroed_page+0x14/0xb0 [ 3381.914042] __pud_alloc+0x33/0x270 [ 3381.914666] copy_page_range+0x2ca1/0x3810 [ 3381.915393] ? SOFTIRQ_verbose+0x10/0x10 [ 3381.916081] ? lock_chain_count+0x20/0x20 [ 3381.916760] ? lock_downgrade+0x6d0/0x6d0 [ 3381.917489] ? up_write+0x191/0x550 [ 3381.918103] ? vm_iomap_memory+0x190/0x190 [ 3381.918824] ? downgrade_write+0x3a0/0x3a0 [ 3381.919556] ? anon_vma_interval_tree_insert+0x277/0x450 [ 3381.920483] ? __vma_link_rb+0x540/0x700 [ 3381.921195] copy_process+0x759b/0x7800 [ 3381.921913] ? __cleanup_sighand+0xb0/0xb0 [ 3381.922629] ? lock_acquire+0x197/0x470 [ 3381.923269] ? find_held_lock+0x2c/0x110 [ 3381.923977] kernel_clone+0xe7/0x980 [ 3381.924607] ? lock_downgrade+0x6d0/0x6d0 [ 3381.925313] ? find_held_lock+0x2c/0x110 [ 3381.926013] ? create_io_thread+0xf0/0xf0 [ 3381.926718] ? ksys_write+0x12d/0x260 [ 3381.927376] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3381.928227] __do_sys_fork+0x8a/0xc0 [ 3381.928871] ? kernel_thread+0xf0/0xf0 [ 3381.929519] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3381.930349] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3381.931168] ? trace_hardirqs_on+0x5b/0x180 [ 3381.931851] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3381.932668] do_syscall_64+0x33/0x40 [ 3381.933296] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 3381.934109] RIP: 0033:0x7f4ded6f8b19 [ 3381.934704] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3381.937620] RSP: 002b:00007f4deac6e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 3381.938880] RAX: ffffffffffffffda RBX: 00007f4ded80bf60 RCX: 00007f4ded6f8b19 [ 3381.940062] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 3381.941283] RBP: 00007f4deac6e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3381.942473] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3381.943661] R13: 00007ffdd13eda0f R14: 00007f4deac6e300 R15: 0000000000022000 20:27:08 executing program 7: creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000005c00000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) 20:27:08 executing program 0: creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) pread64(0xffffffffffffffff, &(0x7f0000000400)=""/255, 0xff, 0x7eb9) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000e00000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) 20:27:08 executing program 5: r0 = creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) open_by_handle_at(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="5000000000000004000000"], 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f0000000200)=0x6, 0x4) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000a00000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) 20:27:08 executing program 2: r0 = syz_io_uring_setup(0x528c, &(0x7f0000000000), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(0x0, r2, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) r3 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x10000000) syz_io_uring_submit(r4, r6, &(0x7f0000000200)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x3, 0x0, 0xffff, 0x3, &(0x7f0000000100)="f174335e93144da46dc34a3304bf54a8d927f79eea854f64a5fdf257b4f97db8168d5312fc15f53e5080c9708e003b034e25c064d01b24a1cfab338abdb9e743f3cb2ef9a9125ec051d3521fc1309d8c3fca582171957360e0cd96bd2ec4d4701c07a6055276a9517b2ad843b72437b2fed5a1802891e7497334ef94b6db26c68240a8063f834b2a650e7c06e543a5f3d6dabda838dd4c50de27886affce7a35e8a4ebec9ee74d00378175711bb60477d1e5b99a31e6208475c9bab866eb74e45e1e0dab280164fefeef9d0e2737622dbbded432d16dac36305843c7bbcddda68f063fbd056c2907f9c63a", 0x8, 0x0, 0x0, {0x1}}, 0x400) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x8f9ca000) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000540)=@IORING_OP_WRITE_FIXED={0x5, 0x4, 0x6003, @fd_index=0x9, 0x0, 0x401, 0x0, 0x5, 0x1, {0x1, r10}}, 0x200) sendmsg$NL80211_CMD_DEL_PMK(r7, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x34, r8, 0x10, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x80000001, 0x1f}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000890}, 0x20000040) 20:27:08 executing program 4: madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x12) mlock(&(0x7f0000ffb000/0x1000)=nil, 0x1000) fork() (fail_nth: 56) [ 3382.126290] FAULT_INJECTION: forcing a failure. [ 3382.126290] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 3382.128240] CPU: 0 PID: 17558 Comm: syz-executor.4 Not tainted 5.10.194 #1 [ 3382.129317] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3382.130580] Call Trace: [ 3382.131001] dump_stack+0x107/0x167 [ 3382.131559] should_fail.cold+0x5/0xa [ 3382.132153] __alloc_pages_nodemask+0x182/0x600 [ 3382.132866] ? lock_acquire+0x197/0x470 [ 3382.133489] ? __alloc_pages_slowpath.constprop.0+0x2130/0x2130 [ 3382.134412] ? lock_downgrade+0x6d0/0x6d0 [ 3382.135046] ? do_raw_spin_lock+0x121/0x260 [ 3382.135715] alloc_pages_current+0x187/0x280 [ 3382.136438] __pmd_alloc+0x37/0x5e0 [ 3382.137029] copy_page_range+0x2bd8/0x3810 [ 3382.137670] ? SOFTIRQ_verbose+0x10/0x10 [ 3382.138303] ? lock_chain_count+0x20/0x20 [ 3382.138984] ? up_write+0x191/0x550 [ 3382.139555] ? vm_iomap_memory+0x190/0x190 [ 3382.140197] ? downgrade_write+0x3a0/0x3a0 [ 3382.140832] ? anon_vma_interval_tree_insert+0x277/0x450 [ 3382.141671] ? __vma_link_rb+0x540/0x700 [ 3382.142288] copy_process+0x759b/0x7800 [ 3382.142921] ? __cleanup_sighand+0xb0/0xb0 [ 3382.143570] ? lock_acquire+0x197/0x470 [ 3382.144183] ? find_held_lock+0x2c/0x110 [ 3382.144804] kernel_clone+0xe7/0x980 [ 3382.145382] ? lock_downgrade+0x6d0/0x6d0 [ 3382.146002] ? find_held_lock+0x2c/0x110 [ 3382.146613] ? create_io_thread+0xf0/0xf0 [ 3382.147265] ? ksys_write+0x12d/0x260 [ 3382.147858] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3382.148594] __do_sys_fork+0x8a/0xc0 [ 3382.149166] ? kernel_thread+0xf0/0xf0 [ 3382.149769] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3382.150560] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3382.151326] ? trace_hardirqs_on+0x5b/0x180 [ 3382.151981] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3382.152751] do_syscall_64+0x33/0x40 [ 3382.153333] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 3382.154117] RIP: 0033:0x7f4ded6f8b19 [ 3382.154697] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3382.157416] RSP: 002b:00007f4deac6e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 3382.158556] RAX: ffffffffffffffda RBX: 00007f4ded80bf60 RCX: 00007f4ded6f8b19 [ 3382.159619] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 3382.160718] RBP: 00007f4deac6e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3382.161818] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3382.162906] R13: 00007ffdd13eda0f R14: 00007f4deac6e300 R15: 0000000000022000 20:27:08 executing program 7: creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000005e60000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) 20:27:08 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000380), 0x181200, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f0000000540)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x0, 0x0) pidfd_send_signal(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xb, 0x5, 0x2000000}, 0x0) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file2\x00', 0x40080, 0x127) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="30000000c7d96d3a4ae6edf713b203618af23953022eca6fada17e0b65ed9202e7a0bdb83b327a8040e7a600e1b4656f540f881990b647344d819ea2514e91a021c28e9b906829bc115c3c7f6c9ea15e02fffa45920b968855e26799ead1b05c28711da38f449ec926df4f473f1f4e070a246595b4623202472afe47f494cfb97ba37d2b99f8fc8ae0497ecae7df7f31ec59377faa2972fab07640d6619114255df35c51a0937474a09fc8434f79185c1cc0e920560532530a4c367a608478ca6d3f514249f77b45291da701efb09cf1a939b83bbd37af9641", @ANYRES16=0x0, @ANYBLOB="000825bd7000ffdbdf254400000008000300", @ANYRES32=0x0, @ANYBLOB="0c00990500000000355362808be51628c875b4d1686be71f00000008000d00feffffff"], 0x30}, 0x1, 0x0, 0x0, 0x20048000}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="10000000ddd8d2e02979d17089c9bbd2e950eb84aa73b0acdb0e33073cc33452fa3ba5cff74592765ebf858423ad3f0496dea79fb468254cb4a106d27e05ec342ea878d8e3f445dd599b7200f7d1c40d9047e63b2000"/96], 0x10) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000240), 0x480800, 0x0) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x8, 0x7d, 0x99, 0xff, 0x0, 0x4212063b, 0x40020, 0x9, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000180)}, 0x40000, 0xffffffff, 0xfffffd72, 0x3, 0x7, 0x5, 0xfa, 0x0, 0x5726, 0x0, 0x4}, 0xffffffffffffffff, 0x7, r1, 0x0) syz_mount_image$tmpfs(&(0x7f0000000280), &(0x7f00000003c0)='./file0\x00', 0xffff, 0x6, &(0x7f0000001c00)=[{&(0x7f00000008c0)="1be4710467df5dc384e3a8116cef1d33ea6545ceac1fb78fdd4d60a66d479e8f27cdce72478325aefe8b19aedde92a0e6b968d3d07786cad84cafb7dcaa0aa5257321b5ac42f5ae2fe585212edf9903c2f557abf75bf51a9926e88edfbdba1d4168e36ac51a768d309e807983db27248abbaee2ae67f78b2ca6352b7526308085d7d9fcb80afa054d3044f4ed70746ce54e59a9d9d967f0cef5c82fc53232948", 0xa0, 0xc9e}, {&(0x7f0000000980)="8c181ee8514ba4528281552064ef922c61da45b8c58189759b2a47c2b3d2c7a1087dff69d65cac98ce573ca5115e04ef5e3e821547a96ffcadea2cf37c5f6e10e3a74d786f675ef44b5f7b586e7180087da9701421f3b85f79d33c0885022bcedf3c6aea383c994a5d7193d414b125b26f8e2894b792e7bcceb1b60d2407b2015f5b79e098d40eb03bdf61ee0e361859157ec14873907327c2ef022f99ca382da1", 0xa1, 0x300000000000000}, {&(0x7f0000000a40)="747a1eb2efca33377974e7c91eaba869874f2d8bf3785c7f01adde025f09c789af8072d880aa6713fd2a4475e8697229b35296aa2d4ba4395e5245bd6eac0e40ed433d3ce53c2e0c603443c53bf386f9a09d90c59efbf30b51368bc233834947834015", 0x63, 0x831}, {&(0x7f0000000ac0)="c3a08a8c7985faa4f55f642270b60c751e4455a5eb40de6cbf9d935d48e8a0448b17ff4395dc91082e6259eef9561e0a0110d3482050cd0001855748ed41b3b6d80ca77c3b428fc7863bd1b3bd4a9c533dd744417c59c84c234925658792392c4ae64f1acc8c4f6f5d6106d0e4d085975711dd39cf9ddb4fe64ee0f91b31fcd887f073c7192055e7147868", 0x8b, 0x2}, {&(0x7f0000000b80)="e265380025379c3c03aa40d6df87aa158a42d13ea39697dba02796a7d22f637a54893edf0bd9541ec9c69f3c06d02e7b0f0dd52f70639a5944fc2839b00b75a779a120001b7529c96eda08a59cef8a06d36f47253b94374e1b05f07073", 0x5d, 0xf59}, {&(0x7f0000000c00)="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", 0x1000, 0xd8f0}], 0x11027, &(0x7f0000001cc0)={[{@huge_always}], [{@smackfshat={'smackfshat', 0x3d, '/dev/null\x00'}}, {@hash}, {@pcr={'pcr', 0x3d, 0x2f}}, {@measure}, {@smackfsroot={'smackfsroot', 0x3d, '@'}}, {@rootcontext={'rootcontext', 0x3d, 'root'}}, {@appraise_type}]}) 20:27:08 executing program 3: statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f0000000200)=0x6, 0x4) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000340)=ANY=[@ANYBLOB="01080000011270c839284f30e054da4374340020000000000000", @ANYRES32, @ANYBLOB="ffa22106351700002e2f661c696c653000"]) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) pread64(0xffffffffffffffff, &(0x7f0000000400)=""/255, 0xff, 0x7eb9) dup(0xffffffffffffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0), 0x9) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000100000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) 20:27:08 executing program 5: r0 = creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) open_by_handle_at(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="5000000000000004000000"], 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f0000000200)=0x6, 0x4) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000030d00000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) 20:27:08 executing program 1: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x46842, 0x0) io_setup(0x5, &(0x7f0000000080)) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x8800000) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x5, r3, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0xb91, 0xb91}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f00000001c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7}}, './file1\x00'}) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) r5 = syz_io_uring_setup(0x3de4, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000180), &(0x7f0000002a40)) ioctl$BLKTRACESTART(r4, 0x1274, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x882c2, 0x0) fsync(r6) ioctl$FS_IOC_GETFSMAP(r6, 0xc0c0583b, &(0x7f0000000440)={0x0, 0x0, 0x5, 0x0, '\x00', [{0x7, 0x7fff, 0x5, 0xffff, 0x8, 0x401}, {0x9, 0x81, 0xfffe00000000, 0x1000, 0x2}], ['\x00', '\x00', '\x00', '\x00', '\x00']}) io_uring_enter(r5, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$FIGETBSZ(r5, 0x2, &(0x7f0000000240)) 20:27:22 executing program 1: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x46842, 0x0) io_setup(0x5, &(0x7f0000000080)) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x8800000) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x5, r3, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x1400, 0xb91}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f00000001c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7}}, './file1\x00'}) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) r5 = syz_io_uring_setup(0x3de4, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000180), &(0x7f0000002a40)) ioctl$BLKTRACESTART(r4, 0x1274, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x882c2, 0x0) fsync(r6) ioctl$FS_IOC_GETFSMAP(r6, 0xc0c0583b, &(0x7f0000000440)={0x0, 0x0, 0x5, 0x0, '\x00', [{0x7, 0x7fff, 0x5, 0xffff, 0x8, 0x401}, {0x9, 0x81, 0xfffe00000000, 0x1000, 0x2}], ['\x00', '\x00', '\x00', '\x00', '\x00']}) io_uring_enter(r5, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$FIGETBSZ(r5, 0x2, &(0x7f0000000240)) 20:27:22 executing program 2: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x46842, 0x0) io_setup(0x5, &(0x7f0000000080)) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x8800000) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x5, r3, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0xb91, 0xb91}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f00000001c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7}}, './file1\x00'}) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) r5 = syz_io_uring_setup(0x3de4, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000180), &(0x7f0000002a40)) ioctl$BLKTRACESTART(r4, 0x1274, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x882c2, 0x0) fsync(r6) ioctl$FS_IOC_GETFSMAP(r6, 0xc0c0583b, &(0x7f0000000440)={0x0, 0x0, 0x5, 0x0, '\x00', [{0x7, 0x7fff, 0x5, 0xffff, 0x8, 0x401}, {0x9, 0x81, 0xfffe00000000, 0x1000, 0x2}], ['\x00', '\x00', '\x00', '\x00', '\x00']}) io_uring_enter(r5, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$FIGETBSZ(r5, 0x2, &(0x7f0000000240)) 20:27:22 executing program 7: creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000002e70000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) 20:27:23 executing program 0: creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) pread64(0xffffffffffffffff, &(0x7f0000000400)=""/255, 0xff, 0x7eb9) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000002000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) 20:27:23 executing program 4: madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x12) mlock(&(0x7f0000ffb000/0x1000)=nil, 0x1000) fork() (fail_nth: 57) 20:27:23 executing program 5: r0 = creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) open_by_handle_at(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="5000000000000004000000"], 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f0000000200)=0x6, 0x4) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000e00000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) 20:27:23 executing program 3: statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f0000000200)=0x6, 0x4) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000340)=ANY=[@ANYBLOB="01080000011270c839284f30e054da4374340020000000000000", @ANYRES32, @ANYBLOB="ffa22106351700002e2f661c696c653000"]) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) pread64(0xffffffffffffffff, &(0x7f0000000400)=""/255, 0xff, 0x7eb9) dup(0xffffffffffffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0), 0x9) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000200000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) 20:27:23 executing program 6: sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x8) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x0, 0x0) pidfd_send_signal(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xb, 0x5, 0x2000000}, 0x0) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file2\x00', 0x40080, 0x127) socket$inet6_udp(0xa, 0x2, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x100000001) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7fff}}, './file1\x00'}) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000480), r2) sendmsg$DEVLINK_CMD_RATE_SET(r2, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80000000}, 0xc, 0x0}, 0x4008084) sendmsg$TIPC_CMD_GET_MAX_PORTS(r1, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x1c, 0x0, 0x400, 0x70bd25, 0x25dfdbfd, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40090}, 0x4008004) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000800), r2) sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x2c, r3, 0x100, 0x70bd29, 0x25dfdbfe, {{}, {}, {0x10, 0x13, @udp='udp:syz1\x00'}}, ["", "", "", "", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0xc000004}, 0x4000000) sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r3, 0x400, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4007}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000900)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000825bd7000ffdbdf254400000008000300", @ANYRES32=0x0, @ANYBLOB="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"], 0x30}, 0x1, 0x0, 0x0, 0x20048000}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="1000000017010007002e2f664169"], 0x10) [ 3396.446343] FAULT_INJECTION: forcing a failure. [ 3396.446343] name failslab, interval 1, probability 0, space 0, times 0 [ 3396.448685] CPU: 0 PID: 17609 Comm: syz-executor.4 Not tainted 5.10.194 #1 [ 3396.450095] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3396.451801] Call Trace: [ 3396.452352] dump_stack+0x107/0x167 [ 3396.453094] should_fail.cold+0x5/0xa [ 3396.453916] ? __pmd_alloc+0x94/0x5e0 [ 3396.454706] should_failslab+0x5/0x20 [ 3396.455494] kmem_cache_alloc+0x5b/0x310 [ 3396.456347] __pmd_alloc+0x94/0x5e0 [ 3396.457092] copy_page_range+0x2bd8/0x3810 [ 3396.457979] ? SOFTIRQ_verbose+0x10/0x10 [ 3396.458815] ? lock_chain_count+0x20/0x20 [ 3396.459705] ? up_write+0x191/0x550 [ 3396.460456] ? vm_iomap_memory+0x190/0x190 [ 3396.461334] ? downgrade_write+0x3a0/0x3a0 [ 3396.462205] ? anon_vma_interval_tree_insert+0x277/0x450 [ 3396.463336] ? __vma_link_rb+0x540/0x700 [ 3396.464172] copy_process+0x759b/0x7800 [ 3396.465029] ? __cleanup_sighand+0xb0/0xb0 [ 3396.465911] ? lock_acquire+0x197/0x470 [ 3396.466742] ? find_held_lock+0x2c/0x110 [ 3396.467576] kernel_clone+0xe7/0x980 [ 3396.468336] ? lock_downgrade+0x6d0/0x6d0 [ 3396.469180] ? find_held_lock+0x2c/0x110 [ 3396.470009] ? create_io_thread+0xf0/0xf0 [ 3396.470859] ? ksys_write+0x12d/0x260 [ 3396.471659] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3396.472648] __do_sys_fork+0x8a/0xc0 [ 3396.473416] ? kernel_thread+0xf0/0xf0 [ 3396.474229] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3396.475300] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3396.476355] ? trace_hardirqs_on+0x5b/0x180 [ 3396.477247] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3396.478304] do_syscall_64+0x33/0x40 [ 3396.479061] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 3396.480116] RIP: 0033:0x7f4ded6f8b19 [ 3396.480874] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3396.484641] RSP: 002b:00007f4deac6e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 3396.486188] RAX: ffffffffffffffda RBX: 00007f4ded80bf60 RCX: 00007f4ded6f8b19 [ 3396.487639] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 3396.489095] RBP: 00007f4deac6e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3396.490555] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3396.491989] R13: 00007ffdd13eda0f R14: 00007f4deac6e300 R15: 0000000000022000 20:27:23 executing program 3: statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f0000000200)=0x6, 0x4) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000340)=ANY=[@ANYBLOB="01080000011270c839284f30e054da4374340020000000000000", @ANYRES32, @ANYBLOB="ffa22106351700002e2f661c696c653000"]) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) pread64(0xffffffffffffffff, &(0x7f0000000400)=""/255, 0xff, 0x7eb9) dup(0xffffffffffffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0), 0x9) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000300000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) 20:27:23 executing program 7: creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000003e80000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) 20:27:23 executing program 0: creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) pread64(0xffffffffffffffff, &(0x7f0000000400)=""/255, 0xff, 0x7eb9) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000006000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) 20:27:36 executing program 7: creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000001f40000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) 20:27:36 executing program 1: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x46842, 0x0) io_setup(0x5, &(0x7f0000000080)) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x8800000) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x5, r3, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x2000, 0xb91}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f00000001c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7}}, './file1\x00'}) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) r5 = syz_io_uring_setup(0x3de4, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000180), &(0x7f0000002a40)) ioctl$BLKTRACESTART(r4, 0x1274, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x882c2, 0x0) fsync(r6) ioctl$FS_IOC_GETFSMAP(r6, 0xc0c0583b, &(0x7f0000000440)={0x0, 0x0, 0x5, 0x0, '\x00', [{0x7, 0x7fff, 0x5, 0xffff, 0x8, 0x401}, {0x9, 0x81, 0xfffe00000000, 0x1000, 0x2}], ['\x00', '\x00', '\x00', '\x00', '\x00']}) io_uring_enter(r5, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$FIGETBSZ(r5, 0x2, &(0x7f0000000240)) 20:27:36 executing program 6: sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0xff, 0x1, 0x0, 0x0, 0x5e, 0x409, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1d, 0x10000000}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x0, 0x0) pidfd_send_signal(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xb, 0x5, 0x2000000}, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0xc1}}, './file2\x00'}) openat(r1, &(0x7f00000002c0)='./file2\x00', 0x40080, 0x127) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, 0x0, 0x800, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x1f}}}}, [@NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0xfffffffe}]}, 0x30}, 0x1, 0x0, 0x0, 0x20048000}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="1000000017010007002e2f664169"], 0x10) 20:27:36 executing program 5: r0 = creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) open_by_handle_at(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="5000000000000004000000"], 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f0000000200)=0x6, 0x4) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000002000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) 20:27:36 executing program 2: creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) pread64(0xffffffffffffffff, &(0x7f0000000400)=""/255, 0xff, 0x7eb9) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000002000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) 20:27:36 executing program 0: creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) pread64(0xffffffffffffffff, &(0x7f0000000400)=""/255, 0xff, 0x7eb9) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="1400000000ffffff9700000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) 20:27:36 executing program 3: statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f0000000200)=0x6, 0x4) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000340)=ANY=[@ANYBLOB="01080000011270c839284f30e054da4374340020000000000000", @ANYRES32, @ANYBLOB="ffa22106351700002e2f661c696c653000"]) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) pread64(0xffffffffffffffff, &(0x7f0000000400)=""/255, 0xff, 0x7eb9) dup(0xffffffffffffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0), 0x9) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000400000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) 20:27:36 executing program 4: madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x12) mlock(&(0x7f0000ffb000/0x1000)=nil, 0x1000) fork() (fail_nth: 58) [ 3410.102347] FAULT_INJECTION: forcing a failure. [ 3410.102347] name failslab, interval 1, probability 0, space 0, times 0 [ 3410.104705] CPU: 0 PID: 17646 Comm: syz-executor.4 Not tainted 5.10.194 #1 [ 3410.106123] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3410.107815] Call Trace: [ 3410.108361] dump_stack+0x107/0x167 [ 3410.109115] should_fail.cold+0x5/0xa [ 3410.109914] ? create_object.isra.0+0x3a/0xa20 [ 3410.110857] should_failslab+0x5/0x20 [ 3410.111635] kmem_cache_alloc+0x5b/0x310 [ 3410.112468] create_object.isra.0+0x3a/0xa20 [ 3410.113362] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3410.114396] kmem_cache_alloc+0x159/0x310 [ 3410.115248] __pmd_alloc+0x94/0x5e0 [ 3410.116005] copy_page_range+0x2bd8/0x3810 [ 3410.116875] ? SOFTIRQ_verbose+0x10/0x10 [ 3410.117727] ? lock_chain_count+0x20/0x20 [ 3410.118617] ? up_write+0x191/0x550 [ 3410.119372] ? vm_iomap_memory+0x190/0x190 [ 3410.120237] ? downgrade_write+0x3a0/0x3a0 [ 3410.121117] ? anon_vma_interval_tree_insert+0x277/0x450 [ 3410.122262] ? __vma_link_rb+0x540/0x700 [ 3410.123101] copy_process+0x759b/0x7800 [ 3410.123956] ? __cleanup_sighand+0xb0/0xb0 [ 3410.124834] ? lock_acquire+0x197/0x470 [ 3410.125668] ? find_held_lock+0x2c/0x110 [ 3410.126516] kernel_clone+0xe7/0x980 [ 3410.127281] ? lock_downgrade+0x6d0/0x6d0 [ 3410.128134] ? find_held_lock+0x2c/0x110 [ 3410.128965] ? create_io_thread+0xf0/0xf0 [ 3410.129837] ? ksys_write+0x12d/0x260 [ 3410.130619] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3410.131619] __do_sys_fork+0x8a/0xc0 [ 3410.132390] ? kernel_thread+0xf0/0xf0 [ 3410.133201] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3410.134276] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3410.135332] ? trace_hardirqs_on+0x5b/0x180 [ 3410.136211] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3410.137319] do_syscall_64+0x33/0x40 [ 3410.138094] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 3410.139144] RIP: 0033:0x7f4ded6f8b19 [ 3410.139903] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3410.143679] RSP: 002b:00007f4deac6e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 3410.145235] RAX: ffffffffffffffda RBX: 00007f4ded80bf60 RCX: 00007f4ded6f8b19 [ 3410.146710] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 3410.148175] RBP: 00007f4deac6e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3410.149656] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3410.151130] R13: 00007ffdd13eda0f R14: 00007f4deac6e300 R15: 0000000000022000 20:27:36 executing program 7: creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000fd0000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) 20:27:36 executing program 5: r0 = creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) open_by_handle_at(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="5000000000000004000000"], 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f0000000200)=0x6, 0x4) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000006000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) 20:27:36 executing program 3: statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f0000000200)=0x6, 0x4) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000340)=ANY=[@ANYBLOB="01080000011270c839284f30e054da4374340020000000000000", @ANYRES32, @ANYBLOB="ffa22106351700002e2f661c696c653000"]) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) pread64(0xffffffffffffffff, &(0x7f0000000400)=""/255, 0xff, 0x7eb9) dup(0xffffffffffffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0), 0x9) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000a00000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) 20:27:36 executing program 0: creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) pread64(0xffffffffffffffff, &(0x7f0000000400)=""/255, 0xff, 0x7eb9) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="1400000000000005c000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) 20:27:36 executing program 6: sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x8) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x0, 0x0) pidfd_send_signal(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xb, 0x5, 0x2000000}, 0x0) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file2\x00', 0x40080, 0x127) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, 0x0, 0x800, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x1f}}}}, [@NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0xfffffffe}]}, 0x30}, 0x1, 0x0, 0x0, 0x20048000}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="10000060c05fe84a759a61b1e1f605fc5f230017656ede1de3a8f581735d224d8577610ca9a436a7a597457e7d68211af5056bb306978e1c96cbf45c73dd3e8847fde5d86cbd74bc65b6fc31ee771253fdaa97a75cfd69e2e698eeb384e8fb1b89857baa3acf6336c16899626bd956945e53578fe4d613b86128a692500c6b85eb64d3c3922c06b2e12baaf411df7f36d72c6fb24109b4833555ff509fdc5c34f12b641a9d141645be294b5537fb3b9d5a24ba3c27ba0d48aaf2752789b3b436bd8e626d470e1a3a387e842a683fe8b2bc99552997236ea90745fce0454f2d65ba6918"], 0x10) openat2$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', &(0x7f0000000300)={0x121d80, 0x84, 0x14}, 0x18) mount(&(0x7f0000000340)=@nullb, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='afs\x00', 0x0, &(0x7f0000000400)='TIPC\x00') 20:27:36 executing program 2: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, 0x0) ioctl$BTRFS_IOC_SYNC(0xffffffffffffffff, 0x9408, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000200), 0x9}, 0x840}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xff, 0xcd, 0x8, 0x8, 0x0, 0x2, 0x80240, 0xe, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x4, @perf_config_ext={0x1, 0x5}, 0x4, 0x80000000, 0x6, 0x2, 0x8, 0x7f, 0x8, 0x0, 0x6, 0x0, 0x80000001}, 0x0, 0xf, r0, 0x3) r1 = socket$inet6_udp(0xa, 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000500), 0x0, &(0x7f0000000540)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@cachetag={'cachetag', 0x3d, '\x16'}}, {@debug={'debug', 0x3d, 0x4}}, {@mmap}, {@access_any}, {@dfltuid={'dfltuid', 0x3d, 0xee00}}], [{@subj_role={'subj_role', 0x3d, '-\xc3*'}}, {@uid_gt={'uid>', 0xee01}}, {@smackfsfloor}, {@euid_lt}, {@measure}, {@func={'func', 0x3d, 'POLICY_CHECK'}}]}}) flock(0xffffffffffffffff, 0xa) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r1, &(0x7f0000000100)={0xa, 0xfffe, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}, 0x1c) sendmsg$inet(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10, 0x0}, 0x404c008) r4 = fcntl$dupfd(0xffffffffffffffff, 0x406, r1) sendmsg$inet6(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) 20:27:37 executing program 7: creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000800000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) 20:27:37 executing program 4: madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x12) mlock(&(0x7f0000ffb000/0x1000)=nil, 0x1000) fork() (fail_nth: 59) [ 3410.610839] FAULT_INJECTION: forcing a failure. [ 3410.610839] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 3410.613372] CPU: 1 PID: 17696 Comm: syz-executor.4 Not tainted 5.10.194 #1 [ 3410.614819] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3410.616533] Call Trace: [ 3410.617086] dump_stack+0x107/0x167 [ 3410.617854] should_fail.cold+0x5/0xa [ 3410.618657] __alloc_pages_nodemask+0x182/0x600 [ 3410.619617] ? lock_acquire+0x197/0x470 [ 3410.620441] ? __alloc_pages_slowpath.constprop.0+0x2130/0x2130 [ 3410.621674] ? lock_downgrade+0x6d0/0x6d0 [ 3410.622527] ? do_raw_spin_lock+0x121/0x260 [ 3410.623414] alloc_pages_current+0x187/0x280 [ 3410.624320] __pmd_alloc+0x37/0x5e0 [ 3410.625073] copy_page_range+0x2bd8/0x3810 [ 3410.625955] ? SOFTIRQ_verbose+0x10/0x10 [ 3410.626780] ? lock_chain_count+0x20/0x20 [ 3410.627673] ? up_write+0x191/0x550 [ 3410.628415] ? vm_iomap_memory+0x190/0x190 [ 3410.629288] ? downgrade_write+0x3a0/0x3a0 [ 3410.630181] ? anon_vma_interval_tree_insert+0x277/0x450 [ 3410.631290] ? __vma_link_rb+0x540/0x700 [ 3410.632156] copy_process+0x759b/0x7800 [ 3410.633016] ? __cleanup_sighand+0xb0/0xb0 [ 3410.633903] ? lock_acquire+0x197/0x470 [ 3410.634722] ? find_held_lock+0x2c/0x110 [ 3410.635552] kernel_clone+0xe7/0x980 [ 3410.636295] ? lock_downgrade+0x6d0/0x6d0 [ 3410.637137] ? find_held_lock+0x2c/0x110 [ 3410.637978] ? create_io_thread+0xf0/0xf0 [ 3410.638815] ? ksys_write+0x12d/0x260 [ 3410.639603] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3410.640582] __do_sys_fork+0x8a/0xc0 [ 3410.641329] ? kernel_thread+0xf0/0xf0 [ 3410.642123] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3410.643186] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3410.644254] ? trace_hardirqs_on+0x5b/0x180 [ 3410.645142] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3410.646209] do_syscall_64+0x33/0x40 [ 3410.646981] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 3410.648030] RIP: 0033:0x7f4ded6f8b19 [ 3410.648788] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3410.652556] RSP: 002b:00007f4deac6e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 3410.654124] RAX: ffffffffffffffda RBX: 00007f4ded80bf60 RCX: 00007f4ded6f8b19 [ 3410.655593] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 3410.657036] RBP: 00007f4deac6e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3410.658504] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3410.659988] R13: 00007ffdd13eda0f R14: 00007f4deac6e300 R15: 0000000000022000 20:27:52 executing program 5: r0 = creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) open_by_handle_at(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="5000000000000004000000"], 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f0000000200)=0x6, 0x4) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="1400ffffff9700000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) 20:27:52 executing program 0: creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) pread64(0xffffffffffffffff, &(0x7f0000000400)=""/255, 0xff, 0x7eb9) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="1400000000000005e600000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) 20:27:52 executing program 3: statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f0000000200)=0x6, 0x4) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000340)=ANY=[@ANYBLOB="01080000011270c839284f30e054da4374340020000000000000", @ANYRES32, @ANYBLOB="ffa22106351700002e2f661c696c653000"]) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) pread64(0xffffffffffffffff, &(0x7f0000000400)=""/255, 0xff, 0x7eb9) dup(0xffffffffffffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0), 0x9) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000030d00000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) 20:27:52 executing program 2: r0 = openat(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ftruncate(r0, 0x1000003) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x600a00, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000580)=ANY=[@ANYBLOB="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"]) acct(&(0x7f0000000040)='./file0\x00') r2 = getpgid(0xffffffffffffffff) r3 = getpid() ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000004c0)) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000000)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x48, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = gettid() capget(&(0x7f0000000080)={0x20071026, r4}, 0x0) rt_tgsigqueueinfo(r4, r3, 0x1c, &(0x7f0000000440)={0x0, 0x92f, 0x8}) ptrace$peek(0x1, 0x0, &(0x7f0000000540)) clone3(&(0x7f0000000440)={0xa000300, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200), {0xf}, &(0x7f00000002c0)=""/198, 0xc6, &(0x7f00000003c0)=""/96, &(0x7f0000000240)=[0x0, r2, 0x0], 0x3, {r1}}, 0x58) ioctl$TIOCGPTPEER(r1, 0x5441, 0x6) unshare(0x48020200) ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0xff) 20:27:52 executing program 1: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x46842, 0x0) io_setup(0x5, &(0x7f0000000080)) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x8800000) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x5, r3, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x4000, 0xb91}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f00000001c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7}}, './file1\x00'}) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) r5 = syz_io_uring_setup(0x3de4, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000180), &(0x7f0000002a40)) ioctl$BLKTRACESTART(r4, 0x1274, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x882c2, 0x0) fsync(r6) ioctl$FS_IOC_GETFSMAP(r6, 0xc0c0583b, &(0x7f0000000440)={0x0, 0x0, 0x5, 0x0, '\x00', [{0x7, 0x7fff, 0x5, 0xffff, 0x8, 0x401}, {0x9, 0x81, 0xfffe00000000, 0x1000, 0x2}], ['\x00', '\x00', '\x00', '\x00', '\x00']}) io_uring_enter(r5, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$FIGETBSZ(r5, 0x2, &(0x7f0000000240)) 20:27:52 executing program 4: madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x12) mlock(&(0x7f0000ffb000/0x1000)=nil, 0x1000) fork() (fail_nth: 60) 20:27:52 executing program 6: sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x8) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x0, 0x0) pidfd_send_signal(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xb, 0x5, 0x2000000}, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f00000002c0)='./file2\x00', 0x40080, 0x127) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, 0x0, 0x800, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x1f}}}}, [@NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0xfffffffe}]}, 0x30}, 0x1, 0x0, 0x0, 0x20048000}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYRESDEC=r0], 0x10) 20:27:52 executing program 7: creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000001000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) [ 3425.956885] FAULT_INJECTION: forcing a failure. [ 3425.956885] name failslab, interval 1, probability 0, space 0, times 0 [ 3425.959279] CPU: 1 PID: 17719 Comm: syz-executor.4 Not tainted 5.10.194 #1 [ 3425.960737] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3425.962457] Call Trace: [ 3425.963008] dump_stack+0x107/0x167 [ 3425.963757] should_fail.cold+0x5/0xa [ 3425.964536] ? ptlock_alloc+0x1d/0x70 [ 3425.965318] should_failslab+0x5/0x20 [ 3425.966120] kmem_cache_alloc+0x5b/0x310 [ 3425.966965] ptlock_alloc+0x1d/0x70 [ 3425.967717] pte_alloc_one+0x68/0x1a0 [ 3425.968503] __pte_alloc+0x1d/0x330 [ 3425.969263] copy_page_range+0x1b62/0x3810 [ 3425.970155] ? SOFTIRQ_verbose+0x10/0x10 [ 3425.970989] ? lock_chain_count+0x20/0x20 [ 3425.971883] ? up_write+0x191/0x550 [ 3425.972636] ? vm_iomap_memory+0x190/0x190 [ 3425.973520] ? downgrade_write+0x3a0/0x3a0 [ 3425.974393] ? anon_vma_interval_tree_insert+0x277/0x450 [ 3425.975507] ? __vma_link_rb+0x540/0x700 [ 3425.976353] copy_process+0x759b/0x7800 [ 3425.977220] ? __cleanup_sighand+0xb0/0xb0 [ 3425.978099] ? lock_acquire+0x197/0x470 [ 3425.978927] ? find_held_lock+0x2c/0x110 [ 3425.979766] kernel_clone+0xe7/0x980 [ 3425.980534] ? lock_downgrade+0x6d0/0x6d0 [ 3425.981377] ? find_held_lock+0x2c/0x110 [ 3425.982230] ? create_io_thread+0xf0/0xf0 [ 3425.983086] ? ksys_write+0x12d/0x260 [ 3425.983876] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3425.984871] __do_sys_fork+0x8a/0xc0 [ 3425.985650] ? kernel_thread+0xf0/0xf0 [ 3425.986463] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3425.987540] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3425.988607] ? trace_hardirqs_on+0x5b/0x180 [ 3425.989509] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3425.990573] do_syscall_64+0x33/0x40 [ 3425.991346] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 3425.992417] RIP: 0033:0x7f4ded6f8b19 [ 3425.993196] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3425.996969] RSP: 002b:00007f4deac6e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 3425.998552] RAX: ffffffffffffffda RBX: 00007f4ded80bf60 RCX: 00007f4ded6f8b19 [ 3426.000008] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 3426.001469] RBP: 00007f4deac6e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3426.002939] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3426.004414] R13: 00007ffdd13eda0f R14: 00007f4deac6e300 R15: 0000000000022000 20:27:52 executing program 5: r0 = creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) open_by_handle_at(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="5000000000000004000000"], 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f0000000200)=0x6, 0x4) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="1400000005c000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) 20:27:52 executing program 7: creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000002000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) 20:27:52 executing program 3: statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f0000000200)=0x6, 0x4) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000340)=ANY=[@ANYBLOB="01080000011270c839284f30e054da4374340020000000000000", @ANYRES32, @ANYBLOB="ffa22106351700002e2f661c696c653000"]) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) pread64(0xffffffffffffffff, &(0x7f0000000400)=""/255, 0xff, 0x7eb9) dup(0xffffffffffffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0), 0x9) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000e00000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) 20:27:52 executing program 0: creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) pread64(0xffffffffffffffff, &(0x7f0000000400)=""/255, 0xff, 0x7eb9) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="1400000000000002e700000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) 20:27:52 executing program 6: sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x8) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x0, 0x0) pidfd_send_signal(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xb, 0x5, 0x2000000}, 0x0) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file2\x00', 0x40080, 0x127) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x5, 0xff, 0x0, 0x40, 0x0, 0x7, 0x20000, 0x4, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x3ff, 0x4, @perf_config_ext={0x64f, 0x58ac}, 0x0, 0x0, 0x9, 0x8, 0x9, 0xa43, 0x3ff, 0x0, 0x9, 0x0, 0x80}, 0xffffffffffffffff, 0x5, r0, 0x8) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, 0x0, 0x800, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x1f}}}}, [@NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0xfffffffe}]}, 0x30}, 0x1, 0x0, 0x0, 0x20048000}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="1000000017010007002e2f664169"], 0x10) 20:27:52 executing program 7: creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000003000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) 20:27:52 executing program 5: r0 = creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) open_by_handle_at(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="5000000000000004000000"], 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f0000000200)=0x6, 0x4) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="1400000005e600000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) 20:27:52 executing program 3: statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f0000000200)=0x6, 0x4) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000340)=ANY=[@ANYBLOB="01080000011270c839284f30e054da4374340020000000000000", @ANYRES32, @ANYBLOB="ffa22106351700002e2f661c696c653000"]) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) pread64(0xffffffffffffffff, &(0x7f0000000400)=""/255, 0xff, 0x7eb9) dup(0xffffffffffffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0), 0x9) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000006000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) [ 3426.337125] Process accounting resumed 20:27:52 executing program 0: creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) pread64(0xffffffffffffffff, &(0x7f0000000400)=""/255, 0xff, 0x7eb9) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="1400000000000003e800000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) 20:27:53 executing program 7: creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000004000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) 20:27:53 executing program 4: madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x12) mlock(&(0x7f0000ffb000/0x1000)=nil, 0x1000) fork() (fail_nth: 61) [ 3426.585706] FAULT_INJECTION: forcing a failure. [ 3426.585706] name failslab, interval 1, probability 0, space 0, times 0 [ 3426.588070] CPU: 1 PID: 17772 Comm: syz-executor.4 Not tainted 5.10.194 #1 [ 3426.589469] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3426.591154] Call Trace: [ 3426.591703] dump_stack+0x107/0x167 [ 3426.592449] should_fail.cold+0x5/0xa [ 3426.593236] ? create_object.isra.0+0x3a/0xa20 [ 3426.594187] should_failslab+0x5/0x20 [ 3426.594970] kmem_cache_alloc+0x5b/0x310 [ 3426.595804] create_object.isra.0+0x3a/0xa20 [ 3426.596698] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3426.597745] kmem_cache_alloc+0x159/0x310 [ 3426.598598] __pmd_alloc+0x94/0x5e0 [ 3426.599339] copy_page_range+0x2bd8/0x3810 [ 3426.600194] ? SOFTIRQ_verbose+0x10/0x10 [ 3426.601011] ? lock_chain_count+0x20/0x20 [ 3426.601900] ? up_write+0x191/0x550 [ 3426.602637] ? vm_iomap_memory+0x190/0x190 [ 3426.603488] ? downgrade_write+0x3a0/0x3a0 [ 3426.604349] ? anon_vma_interval_tree_insert+0x277/0x450 [ 3426.605450] ? __vma_link_rb+0x540/0x700 [ 3426.606295] copy_process+0x759b/0x7800 [ 3426.607137] ? __cleanup_sighand+0xb0/0xb0 [ 3426.608006] ? lock_acquire+0x197/0x470 [ 3426.608824] ? find_held_lock+0x2c/0x110 [ 3426.609676] kernel_clone+0xe7/0x980 [ 3426.610439] ? lock_downgrade+0x6d0/0x6d0 [ 3426.611285] ? find_held_lock+0x2c/0x110 [ 3426.612122] ? create_io_thread+0xf0/0xf0 [ 3426.612981] ? ksys_write+0x12d/0x260 [ 3426.613772] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3426.614764] __do_sys_fork+0x8a/0xc0 [ 3426.615535] ? kernel_thread+0xf0/0xf0 [ 3426.616347] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3426.617424] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3426.618496] ? trace_hardirqs_on+0x5b/0x180 [ 3426.619380] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3426.620456] do_syscall_64+0x33/0x40 [ 3426.621216] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 3426.622256] RIP: 0033:0x7f4ded6f8b19 [ 3426.623012] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3426.626522] Process accounting resumed [ 3426.626717] RSP: 002b:00007f4deac6e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 3426.629096] RAX: ffffffffffffffda RBX: 00007f4ded80bf60 RCX: 00007f4ded6f8b19 [ 3426.630556] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 3426.631993] RBP: 00007f4deac6e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3426.633425] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3426.634867] R13: 00007ffdd13eda0f R14: 00007f4deac6e300 R15: 0000000000022000 20:28:07 executing program 6: sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x8) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x0, 0x0) pidfd_send_signal(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xb, 0x5, 0x2000000}, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f00000002c0)='./file2\x00', 0x40080, 0x127) clone3(&(0x7f0000000540)={0x8145000, &(0x7f0000000240), &(0x7f0000000280), &(0x7f0000000300)=0x0, {0x3b}, &(0x7f0000000340)=""/116, 0x74, &(0x7f00000003c0)=""/44, &(0x7f0000000400)=[0x0, 0x0], 0x2, {r0}}, 0x58) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x100000001) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x81, 0x58, 0x1, 0x1, 0x0, 0x8001, 0x1800, 0x5, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x2, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x92b, 0x0, @perf_bp={&(0x7f0000000180), 0xb}, 0x1058, 0x0, 0x101, 0x6, 0xff, 0x3f, 0x8, 0x0, 0x1, 0x0, 0x6}, r1, 0xd, r2, 0x8) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f00000005c0)={0x0, "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"}) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, 0x0, 0x800, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x1f}}}}, [@NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0xfffffffe}]}, 0x30}, 0x1, 0x0, 0x0, 0x20048000}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="1000000017010007002e2f664169"], 0x10) 20:28:07 executing program 5: r0 = creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) open_by_handle_at(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="5000000000000004000000"], 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f0000000200)=0x6, 0x4) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="1400000002e700000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) 20:28:07 executing program 1: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x46842, 0x0) io_setup(0x5, &(0x7f0000000080)) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x8800000) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x5, r3, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x910b, 0xb91}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f00000001c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7}}, './file1\x00'}) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) r5 = syz_io_uring_setup(0x3de4, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000180), &(0x7f0000002a40)) ioctl$BLKTRACESTART(r4, 0x1274, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x882c2, 0x0) fsync(r6) ioctl$FS_IOC_GETFSMAP(r6, 0xc0c0583b, &(0x7f0000000440)={0x0, 0x0, 0x5, 0x0, '\x00', [{0x7, 0x7fff, 0x5, 0xffff, 0x8, 0x401}, {0x9, 0x81, 0xfffe00000000, 0x1000, 0x2}], ['\x00', '\x00', '\x00', '\x00', '\x00']}) io_uring_enter(r5, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$FIGETBSZ(r5, 0x2, &(0x7f0000000240)) 20:28:07 executing program 4: madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x12) mlock(&(0x7f0000ffb000/0x1000)=nil, 0x1000) fork() (fail_nth: 62) [ 3440.962157] FAULT_INJECTION: forcing a failure. [ 3440.962157] name failslab, interval 1, probability 0, space 0, times 0 [ 3440.964678] CPU: 0 PID: 17789 Comm: syz-executor.4 Not tainted 5.10.194 #1 [ 3440.966210] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3440.968008] Call Trace: [ 3440.968597] dump_stack+0x107/0x167 [ 3440.969401] should_fail.cold+0x5/0xa [ 3440.970247] ? vm_area_dup+0x78/0x290 [ 3440.971086] should_failslab+0x5/0x20 [ 3440.971923] kmem_cache_alloc+0x5b/0x310 [ 3440.972814] ? lock_downgrade+0x6d0/0x6d0 [ 3440.973730] vm_area_dup+0x78/0x290 [ 3440.974538] ? _cond_resched+0x12/0x80 [ 3440.975389] ? copy_page_range+0x24e9/0x3810 [ 3440.976387] ? vm_area_alloc+0x110/0x110 [ 3440.977280] ? up_write+0x191/0x550 [ 3440.978090] ? vm_iomap_memory+0x190/0x190 [ 3440.979016] ? downgrade_write+0x3a0/0x3a0 [ 3440.979940] ? anon_vma_interval_tree_insert+0x277/0x450 [ 3440.981131] ? __vma_link_rb+0x540/0x700 [ 3440.982031] copy_process+0x291b/0x7800 [ 3440.982948] ? __cleanup_sighand+0xb0/0xb0 [ 3440.983871] ? lock_acquire+0x197/0x470 [ 3440.984749] ? find_held_lock+0x2c/0x110 [ 3440.985641] kernel_clone+0xe7/0x980 [ 3440.986477] ? lock_downgrade+0x6d0/0x6d0 [ 3440.987382] ? find_held_lock+0x2c/0x110 [ 3440.988270] ? create_io_thread+0xf0/0xf0 [ 3440.989179] ? ksys_write+0x12d/0x260 [ 3440.990027] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3440.991087] __do_sys_fork+0x8a/0xc0 [ 3440.991900] ? kernel_thread+0xf0/0xf0 [ 3440.992769] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3440.993925] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3440.995049] ? trace_hardirqs_on+0x5b/0x180 [ 3440.995993] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3440.997351] do_syscall_64+0x33/0x40 [ 3440.998331] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 3440.999569] RIP: 0033:0x7f4ded6f8b19 [ 3441.000471] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3441.005088] RSP: 002b:00007f4deac6e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 3441.006918] RAX: ffffffffffffffda RBX: 00007f4ded80bf60 RCX: 00007f4ded6f8b19 [ 3441.008460] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 3441.010007] RBP: 00007f4deac6e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3441.011547] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3441.013084] R13: 00007ffdd13eda0f R14: 00007f4deac6e300 R15: 0000000000022000 20:28:07 executing program 0: creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) pread64(0xffffffffffffffff, &(0x7f0000000400)=""/255, 0xff, 0x7eb9) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="1400000000000001f400000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) 20:28:07 executing program 2: socket$inet6_udp(0xa, 0x2, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = syz_io_uring_setup(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000540)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x5c33, 0x0, 0x0, 0x0, 0x0) 20:28:07 executing program 7: creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="1400000000000a000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) 20:28:07 executing program 3: statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f0000000200)=0x6, 0x4) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000340)=ANY=[@ANYBLOB="01080000011270c839284f30e054da4374340020000000000000", @ANYRES32, @ANYBLOB="ffa22106351700002e2f661c696c653000"]) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) pread64(0xffffffffffffffff, &(0x7f0000000400)=""/255, 0xff, 0x7eb9) dup(0xffffffffffffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0), 0x9) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="1400ffffff9700000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) 20:28:07 executing program 7: creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="1400000000030d000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) 20:28:07 executing program 5: r0 = creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) open_by_handle_at(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="5000000000000004000000"], 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f0000000200)=0x6, 0x4) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="1400000003e800000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) 20:28:07 executing program 4: madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x12) mlock(&(0x7f0000ffb000/0x1000)=nil, 0x1000) fork() (fail_nth: 63) 20:28:07 executing program 2: preadv(0xffffffffffffffff, &(0x7f00000002c0)=[{}, {&(0x7f0000000100)=""/18, 0x12}, {&(0x7f00000001c0)=""/90, 0x5a}, {&(0x7f0000000240)=""/71, 0x47}, {&(0x7f0000000140)=""/38, 0x26}], 0x5, 0xfffffffc, 0x8001) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCGETS(0xffffffffffffffff, 0x5401, &(0x7f0000000000)) r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000180), &(0x7f0000002a40)) r1 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, r1) 20:28:07 executing program 7: creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="1400000000000e000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) 20:28:07 executing program 3: statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f0000000200)=0x6, 0x4) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000340)=ANY=[@ANYBLOB="01080000011270c839284f30e054da4374340020000000000000", @ANYRES32, @ANYBLOB="ffa22106351700002e2f661c696c653000"]) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) pread64(0xffffffffffffffff, &(0x7f0000000400)=""/255, 0xff, 0x7eb9) dup(0xffffffffffffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0), 0x9) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="1400000005c000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) 20:28:07 executing program 0: creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) pread64(0xffffffffffffffff, &(0x7f0000000400)=""/255, 0xff, 0x7eb9) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="1400000000000000fd00000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) [ 3441.241625] FAULT_INJECTION: forcing a failure. [ 3441.241625] name failslab, interval 1, probability 0, space 0, times 0 [ 3441.243972] CPU: 0 PID: 17824 Comm: syz-executor.4 Not tainted 5.10.194 #1 [ 3441.245357] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3441.247021] Call Trace: [ 3441.247542] dump_stack+0x107/0x167 [ 3441.248279] should_fail.cold+0x5/0xa [ 3441.249039] ? create_object.isra.0+0x3a/0xa20 [ 3441.249960] should_failslab+0x5/0x20 [ 3441.250722] kmem_cache_alloc+0x5b/0x310 [ 3441.251541] create_object.isra.0+0x3a/0xa20 [ 3441.252422] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3441.253441] kmem_cache_alloc+0x159/0x310 [ 3441.254286] vm_area_dup+0x78/0x290 [ 3441.255021] ? _cond_resched+0x12/0x80 [ 3441.255799] ? copy_page_range+0x24e9/0x3810 [ 3441.256694] ? vm_area_alloc+0x110/0x110 [ 3441.257512] ? up_write+0x191/0x550 [ 3441.258250] ? vm_iomap_memory+0x190/0x190 [ 3441.259090] ? downgrade_write+0x3a0/0x3a0 [ 3441.259934] ? anon_vma_interval_tree_insert+0x277/0x450 [ 3441.261014] ? __vma_link_rb+0x540/0x700 [ 3441.261842] copy_process+0x291b/0x7800 [ 3441.262672] ? __cleanup_sighand+0xb0/0xb0 [ 3441.263531] ? lock_acquire+0x197/0x470 [ 3441.264319] ? find_held_lock+0x2c/0x110 [ 3441.265129] kernel_clone+0xe7/0x980 [ 3441.265866] ? lock_downgrade+0x6d0/0x6d0 [ 3441.266681] ? find_held_lock+0x2c/0x110 [ 3441.267490] ? create_io_thread+0xf0/0xf0 [ 3441.268324] ? ksys_write+0x12d/0x260 [ 3441.269087] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3441.270055] __do_sys_fork+0x8a/0xc0 [ 3441.270803] ? kernel_thread+0xf0/0xf0 [ 3441.271623] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3441.272643] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3441.273662] ? trace_hardirqs_on+0x5b/0x180 [ 3441.274564] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3441.275567] do_syscall_64+0x33/0x40 [ 3441.276314] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 3441.277323] RIP: 0033:0x7f4ded6f8b19 [ 3441.278070] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3441.281696] RSP: 002b:00007f4deac6e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 3441.283207] RAX: ffffffffffffffda RBX: 00007f4ded80bf60 RCX: 00007f4ded6f8b19 [ 3441.284746] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 3441.286183] RBP: 00007f4deac6e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3441.287608] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3441.289013] R13: 00007ffdd13eda0f R14: 00007f4deac6e300 R15: 0000000000022000 20:28:07 executing program 3: statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f0000000200)=0x6, 0x4) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000340)=ANY=[@ANYBLOB="01080000011270c839284f30e054da4374340020000000000000", @ANYRES32, @ANYBLOB="ffa22106351700002e2f661c696c653000"]) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) pread64(0xffffffffffffffff, &(0x7f0000000400)=""/255, 0xff, 0x7eb9) dup(0xffffffffffffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0), 0x9) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="1400000005e600000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) 20:28:21 executing program 6: sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x8) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file2\x00', 0x8, 0x0, 0x0, 0x1, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x0, 0x0) pidfd_send_signal(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xb, 0x5, 0x2000000}, 0x0) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file2\x00', 0x40080, 0x127) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, 0x0, 0x800, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x1f}}}}, [@NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0xfffffffe}]}, 0x30}, 0x1, 0x0, 0x0, 0x20048000}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x10) 20:28:21 executing program 1: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x46842, 0x0) io_setup(0x5, &(0x7f0000000080)) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x8800000) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x5, r3, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0xba00, 0xb91}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f00000001c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7}}, './file1\x00'}) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) r5 = syz_io_uring_setup(0x3de4, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000180), &(0x7f0000002a40)) ioctl$BLKTRACESTART(r4, 0x1274, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x882c2, 0x0) fsync(r6) ioctl$FS_IOC_GETFSMAP(r6, 0xc0c0583b, &(0x7f0000000440)={0x0, 0x0, 0x5, 0x0, '\x00', [{0x7, 0x7fff, 0x5, 0xffff, 0x8, 0x401}, {0x9, 0x81, 0xfffe00000000, 0x1000, 0x2}], ['\x00', '\x00', '\x00', '\x00', '\x00']}) io_uring_enter(r5, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$FIGETBSZ(r5, 0x2, &(0x7f0000000240)) 20:28:21 executing program 5: r0 = creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) open_by_handle_at(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="5000000000000004000000"], 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f0000000200)=0x6, 0x4) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="1400000001f400000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) 20:28:21 executing program 7: creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000060000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) 20:28:21 executing program 4: madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x12) mlock(&(0x7f0000ffb000/0x1000)=nil, 0x1000) fork() (fail_nth: 64) 20:28:21 executing program 0: creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) pread64(0xffffffffffffffff, &(0x7f0000000400)=""/255, 0xff, 0x7eb9) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000200000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) 20:28:21 executing program 3: statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f0000000200)=0x6, 0x4) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000340)=ANY=[@ANYBLOB="01080000011270c839284f30e054da4374340020000000000000", @ANYRES32, @ANYBLOB="ffa22106351700002e2f661c696c653000"]) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) pread64(0xffffffffffffffff, &(0x7f0000000400)=""/255, 0xff, 0x7eb9) dup(0xffffffffffffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0), 0x9) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="1400000002e700000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) 20:28:21 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2, 0x3}, 0x1c) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x100000001) sendmsg$inet6(r2, &(0x7f0000000380)={&(0x7f0000000040)={0xa, 0x4e20, 0xe948, @mcast2, 0x992}, 0x1c, &(0x7f0000000100)=[{&(0x7f0000000200)="f6c220c33681d683193b9a997d3b3a6f2c46e2c8820348cdb35cdd9454ce855344b8f26ae5d30e806b7fcea3cba7ec8069c8474d9a7c669730bbf07a18a89018658d6bc691fde74867a19c82bc85efd9dca1e197864d5ea16201e4b3b00b08f16374ed02f82b259e941fc38196697a", 0x6f}, {&(0x7f0000000280)="4a4eb668cec5231c8e6532b028b6466271883fb86655356a02aec80b1c8757a7ad9d932bec1f31e9ed8b6ec5105e6e461fd76edc41e5cfb80849ac2a5e38e3fe877b21e8774e687b26af5cd0ea98825fe09193164db046b046bca785d5b17ab057b7f12e76b63676c6189d69ab18fbfa685bad", 0x73}], 0x2, &(0x7f0000000300)=[@dstopts={{0x30, 0x29, 0x37, {0x87, 0x2, '\x00', [@hao={0xc9, 0x10, @loopback}]}}}, @rthdr={{0x38, 0x29, 0x39, {0x2c, 0x4, 0x2, 0x0, 0x0, [@private1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}}}], 0x68}, 0x1) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$int_in(r3, 0x5452, &(0x7f00000000c0)=0x87) socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x1100, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) [ 3455.015373] FAULT_INJECTION: forcing a failure. [ 3455.015373] name failslab, interval 1, probability 0, space 0, times 0 [ 3455.018045] CPU: 1 PID: 17859 Comm: syz-executor.4 Not tainted 5.10.194 #1 [ 3455.019613] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3455.021543] Call Trace: [ 3455.022175] dump_stack+0x107/0x167 [ 3455.023043] should_fail.cold+0x5/0xa [ 3455.023939] ? vm_area_dup+0x78/0x290 [ 3455.024823] should_failslab+0x5/0x20 [ 3455.025730] kmem_cache_alloc+0x5b/0x310 [ 3455.026700] vm_area_dup+0x78/0x290 [ 3455.027557] ? avc_has_perm_noaudit+0x1c9/0x3e0 [ 3455.028636] ? lock_downgrade+0x6d0/0x6d0 [ 3455.029599] ? copy_page_range+0x24e9/0x3810 [ 3455.030647] ? avc_has_perm_noaudit+0x1f7/0x3e0 [ 3455.031730] ? avc_has_extended_perms+0xf40/0xf40 [ 3455.032854] ? vm_area_alloc+0x110/0x110 [ 3455.033809] ? selinux_vm_enough_memory+0x114/0x180 [ 3455.034996] ? selinux_sb_statfs+0x250/0x250 [ 3455.036051] ? percpu_counter_add_batch+0x8b/0x140 [ 3455.037225] ? __vm_enough_memory+0x184/0x360 [ 3455.038316] ? security_vm_enough_memory_mm+0x8b/0xc0 [ 3455.039522] copy_process+0x291b/0x7800 [ 3455.040512] ? __cleanup_sighand+0xb0/0xb0 [ 3455.041525] ? lock_acquire+0x197/0x470 [ 3455.042473] ? find_held_lock+0x2c/0x110 [ 3455.043441] kernel_clone+0xe7/0x980 [ 3455.044317] ? lock_downgrade+0x6d0/0x6d0 [ 3455.045291] ? find_held_lock+0x2c/0x110 [ 3455.046259] ? create_io_thread+0xf0/0xf0 [ 3455.047257] ? ksys_write+0x12d/0x260 [ 3455.048167] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3455.049322] __do_sys_fork+0x8a/0xc0 [ 3455.050222] ? kernel_thread+0xf0/0xf0 [ 3455.051169] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3455.052415] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3455.053624] ? trace_hardirqs_on+0x5b/0x180 [ 3455.054832] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3455.056098] do_syscall_64+0x33/0x40 [ 3455.056989] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 3455.058225] RIP: 0033:0x7f4ded6f8b19 [ 3455.059122] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3455.063679] RSP: 002b:00007f4deac6e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 3455.065296] RAX: ffffffffffffffda RBX: 00007f4ded80bf60 RCX: 00007f4ded6f8b19 [ 3455.066800] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 3455.068242] RBP: 00007f4deac6e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3455.069684] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3455.071142] R13: 00007ffdd13eda0f R14: 00007f4deac6e300 R15: 0000000000022000 20:28:21 executing program 3: statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f0000000200)=0x6, 0x4) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000340)=ANY=[@ANYBLOB="01080000011270c839284f30e054da4374340020000000000000", @ANYRES32, @ANYBLOB="ffa22106351700002e2f661c696c653000"]) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) pread64(0xffffffffffffffff, &(0x7f0000000400)=""/255, 0xff, 0x7eb9) dup(0xffffffffffffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0), 0x9) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="1400000003e800000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) 20:28:21 executing program 7: creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="140000ffffff97000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) 20:28:21 executing program 5: r0 = creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) open_by_handle_at(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="5000000000000004000000"], 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f0000000200)=0x6, 0x4) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="1400000000fd00000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) 20:28:21 executing program 0: creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) pread64(0xffffffffffffffff, &(0x7f0000000400)=""/255, 0xff, 0x7eb9) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000300000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) 20:28:21 executing program 7: creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="140000000005c0000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) 20:28:21 executing program 6: sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wpan0\x00', 0x0}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000080)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_WPAN_PHY(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYRES64=r1, @ANYBLOB="5f90a53b54f3ba2871a8be433e13c954fdf10249aa4cbd50c1ec01ffbcf4e87c8db139bcc266c856fe83ccf0b05ddef215b5b149020fa4b04955086f553085367ab73536a845bf3e1bbe22ec5f967b413cdd422fc50596f39b1094dce839fcf6e5f7b7303131ae8d5e69d97d49cd677f31"], 0x1c}, 0x1, 0x0, 0x0, 0x14}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_GET_WPAN_PHY(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="a33aa0471a2007d25112000000001c000000", @ANYRES16=r4, @ANYBLOB="2f77f0fffffffffffffff3ffffff08000300", @ANYRES32=r5, @ANYBLOB], 0x1c}}, 0x0) sendmsg$NL802154_CMD_GET_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)={0x64, 0x0, 0x2, 0x70bd25, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x64}}, 0x24008840) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x8) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x0, 0x0) pidfd_send_signal(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xb, 0x5, 0x2000000}, 0x0) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file2\x00', 0x40080, 0x127) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010025bd7000ffdb00254400000008000300", @ANYRES32=0x0, @ANYBLOB="0c0099000000d4aa30692500"], 0x28}, 0x1, 0x0, 0x0, 0x20048000}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYRES16], 0x10) 20:28:21 executing program 4: madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x12) mlock(&(0x7f0000ffb000/0x1000)=nil, 0x1000) fork() (fail_nth: 65) 20:28:22 executing program 3: statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f0000000200)=0x6, 0x4) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000340)=ANY=[@ANYBLOB="01080000011270c839284f30e054da4374340020000000000000", @ANYRES32, @ANYBLOB="ffa22106351700002e2f661c696c653000"]) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) pread64(0xffffffffffffffff, &(0x7f0000000400)=""/255, 0xff, 0x7eb9) dup(0xffffffffffffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0), 0x9) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="1400000001f400000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) 20:28:22 executing program 5: r0 = creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) open_by_handle_at(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="5000000000000004000000"], 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f0000000200)=0x6, 0x4) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="140097ffffff00000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) [ 3455.477726] FAULT_INJECTION: forcing a failure. [ 3455.477726] name failslab, interval 1, probability 0, space 0, times 0 [ 3455.480074] CPU: 0 PID: 17899 Comm: syz-executor.4 Not tainted 5.10.194 #1 [ 3455.481486] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3455.483186] Call Trace: [ 3455.483735] dump_stack+0x107/0x167 [ 3455.484458] should_fail.cold+0x5/0xa [ 3455.485249] ? create_object.isra.0+0x3a/0xa20 [ 3455.486206] should_failslab+0x5/0x20 [ 3455.486979] kmem_cache_alloc+0x5b/0x310 [ 3455.487809] create_object.isra.0+0x3a/0xa20 [ 3455.488680] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3455.489718] kmem_cache_alloc+0x159/0x310 [ 3455.490570] vm_area_dup+0x78/0x290 [ 3455.491323] ? avc_has_perm_noaudit+0x1c9/0x3e0 [ 3455.492268] ? lock_downgrade+0x6d0/0x6d0 [ 3455.493112] ? copy_page_range+0x24e9/0x3810 [ 3455.494044] ? avc_has_perm_noaudit+0x1f7/0x3e0 [ 3455.494993] ? avc_has_extended_perms+0xf40/0xf40 [ 3455.495980] ? vm_area_alloc+0x110/0x110 [ 3455.496815] ? selinux_vm_enough_memory+0x114/0x180 [ 3455.497829] ? selinux_sb_statfs+0x250/0x250 [ 3455.498733] ? percpu_counter_add_batch+0x8b/0x140 [ 3455.499738] ? __vm_enough_memory+0x184/0x360 [ 3455.500647] ? security_vm_enough_memory_mm+0x8b/0xc0 [ 3455.501695] copy_process+0x291b/0x7800 [ 3455.502561] ? __cleanup_sighand+0xb0/0xb0 [ 3455.503433] ? lock_acquire+0x197/0x470 [ 3455.504251] ? find_held_lock+0x2c/0x110 [ 3455.505087] kernel_clone+0xe7/0x980 [ 3455.505844] ? lock_downgrade+0x6d0/0x6d0 [ 3455.506692] ? find_held_lock+0x2c/0x110 [ 3455.507512] ? create_io_thread+0xf0/0xf0 [ 3455.508357] ? ksys_write+0x12d/0x260 [ 3455.509144] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3455.510177] __do_sys_fork+0x8a/0xc0 [ 3455.510934] ? kernel_thread+0xf0/0xf0 [ 3455.511747] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3455.512809] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3455.513849] ? trace_hardirqs_on+0x5b/0x180 [ 3455.514735] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3455.515773] do_syscall_64+0x33/0x40 [ 3455.516533] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 3455.517568] RIP: 0033:0x7f4ded6f8b19 [ 3455.518330] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3455.522060] RSP: 002b:00007f4deac6e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 3455.523599] RAX: ffffffffffffffda RBX: 00007f4ded80bf60 RCX: 00007f4ded6f8b19 [ 3455.525040] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 3455.526488] RBP: 00007f4deac6e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3455.527925] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3455.529366] R13: 00007ffdd13eda0f R14: 00007f4deac6e300 R15: 0000000000022000 20:28:36 executing program 1: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x46842, 0x0) io_setup(0x5, &(0x7f0000000080)) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x8800000) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x5, r3, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x162210, 0xb91}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f00000001c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7}}, './file1\x00'}) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) r5 = syz_io_uring_setup(0x3de4, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000180), &(0x7f0000002a40)) ioctl$BLKTRACESTART(r4, 0x1274, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x882c2, 0x0) fsync(r6) ioctl$FS_IOC_GETFSMAP(r6, 0xc0c0583b, &(0x7f0000000440)={0x0, 0x0, 0x5, 0x0, '\x00', [{0x7, 0x7fff, 0x5, 0xffff, 0x8, 0x401}, {0x9, 0x81, 0xfffe00000000, 0x1000, 0x2}], ['\x00', '\x00', '\x00', '\x00', '\x00']}) io_uring_enter(r5, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$FIGETBSZ(r5, 0x2, &(0x7f0000000240)) 20:28:36 executing program 2: ioctl$BTRFS_IOC_DEFRAG(0xffffffffffffffff, 0x50009402, 0x0) r0 = openat$pidfd(0xffffffffffffff9c, 0x0, 0x2000, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) fcntl$notify(r0, 0x402, 0x0) r1 = fsmount(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x28200, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fcntl$notify(r2, 0x402, 0x80000010) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x402000, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg$inet(r3, &(0x7f0000001b00)=[{{&(0x7f0000000040)={0x2, 0x4e23, @remote}, 0x10, 0x0}}, {{&(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000640)=[@ip_ttl={{0x14}}], 0x18}}], 0x2, 0x0) r4 = accept4$bt_l2cap(r1, &(0x7f00000000c0), &(0x7f0000000100)=0xe, 0x80000) ioctl$BTRFS_IOC_DEFRAG(r4, 0x50009402, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$vga_arbiter(r5, 0x0, 0x0) 20:28:36 executing program 7: creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="140000000005e6000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) 20:28:36 executing program 6: sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x8) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x0, 0x0) pidfd_send_signal(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xb, 0x5, 0x2000000}, 0x0) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file2\x00', 0x40080, 0x127) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='0\x00\x00c&\x00', @ANYRES16=0x0, @ANYBLOB="000825bd7000ffdbdf254400000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900000000001f00000008000d00feffffff"], 0x30}, 0x1, 0x0, 0x0, 0x20048000}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="1000000017010007002e2f664169"], 0x10) 20:28:36 executing program 5: r0 = creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) open_by_handle_at(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="5000000000000004000000"], 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f0000000200)=0x6, 0x4) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000800000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) 20:28:36 executing program 3: statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f0000000200)=0x6, 0x4) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000340)=ANY=[@ANYBLOB="01080000011270c839284f30e054da4374340020000000000000", @ANYRES32, @ANYBLOB="ffa22106351700002e2f661c696c653000"]) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) pread64(0xffffffffffffffff, &(0x7f0000000400)=""/255, 0xff, 0x7eb9) dup(0xffffffffffffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0), 0x9) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="1400000000fd00000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) 20:28:36 executing program 4: madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x12) mlock(&(0x7f0000ffb000/0x1000)=nil, 0x1000) fork() (fail_nth: 66) 20:28:36 executing program 0: creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) pread64(0xffffffffffffffff, &(0x7f0000000400)=""/255, 0xff, 0x7eb9) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000400000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) [ 3469.868102] FAULT_INJECTION: forcing a failure. [ 3469.868102] name failslab, interval 1, probability 0, space 0, times 0 [ 3469.870632] CPU: 1 PID: 17923 Comm: syz-executor.4 Not tainted 5.10.194 #1 [ 3469.872125] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3469.873914] Call Trace: [ 3469.874515] dump_stack+0x107/0x167 [ 3469.875310] should_fail.cold+0x5/0xa [ 3469.876141] ? anon_vma_clone+0xdc/0x590 [ 3469.877020] should_failslab+0x5/0x20 [ 3469.877841] kmem_cache_alloc+0x5b/0x310 [ 3469.878761] anon_vma_clone+0xdc/0x590 [ 3469.879612] anon_vma_fork+0x82/0x640 [ 3469.880440] ? __vm_enough_memory+0x184/0x360 [ 3469.881426] copy_process+0x7218/0x7800 [ 3469.882354] ? __cleanup_sighand+0xb0/0xb0 [ 3469.883266] ? lock_acquire+0x197/0x470 [ 3469.884139] ? find_held_lock+0x2c/0x110 [ 3469.885012] kernel_clone+0xe7/0x980 [ 3469.885808] ? lock_downgrade+0x6d0/0x6d0 [ 3469.886718] ? find_held_lock+0x2c/0x110 [ 3469.887596] ? create_io_thread+0xf0/0xf0 [ 3469.888493] ? ksys_write+0x12d/0x260 [ 3469.889338] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3469.890417] __do_sys_fork+0x8a/0xc0 [ 3469.891229] ? kernel_thread+0xf0/0xf0 [ 3469.892086] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3469.893227] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3469.894357] ? trace_hardirqs_on+0x5b/0x180 [ 3469.895304] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3469.896414] do_syscall_64+0x33/0x40 [ 3469.897212] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 3469.898329] RIP: 0033:0x7f4ded6f8b19 [ 3469.899147] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3469.903075] RSP: 002b:00007f4deac6e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 3469.904706] RAX: ffffffffffffffda RBX: 00007f4ded80bf60 RCX: 00007f4ded6f8b19 [ 3469.906282] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 3469.907834] RBP: 00007f4deac6e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3469.909398] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3469.910984] R13: 00007ffdd13eda0f R14: 00007f4deac6e300 R15: 0000000000022000 20:28:36 executing program 6: sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, 0x0, 0x0) r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x2, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280), 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r0, 0x3) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x0, 0x0) pidfd_send_signal(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xb, 0x5, 0x2000000}, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f00000002c0)='./file2\x00', 0x40080, 0x127) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000825bf7000ffdbdf254400000008000300", @ANYRES32=0x0, @ANYBLOB="0c00996db800000000001f00000008000d00feffffff3577d2122dbe2661ee0a1408948a1058b763a7483a59a08a3061c2212c1457e109bd9579c489d0724d1023c02f5eee53b898f5046fe17f5fa70f781ec08a4cf35476836ea249b844be400a7c9eff0363a6382f05c906333f73b7feba9ec4e4a168b7138d43dd77f692b349a65e80bc3f5e62b789640abffaf9d76b75e178ef28845f8aa94405000000f0e57586cc26c7b57348ea4eb711d37cdd18a3aa4f"], 0x30}, 0x1, 0x0, 0x0, 0x20048000}, 0x0) r2 = fcntl$dupfd(0xffffffffffffffff, 0x406, r1) perf_event_open$cgroup(&(0x7f0000000300)={0x5, 0x80, 0x3f, 0x1f, 0x4, 0x5, 0x0, 0x1f, 0x429b0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x8f8, 0x4, @perf_config_ext={0x4, 0x4}, 0x8000, 0x9, 0x7ff, 0x8, 0x3, 0x80000000, 0x4, 0x0, 0x10000, 0x0, 0x1}, r0, 0xd, r2, 0xd) syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="1000000017010007002e2f664169"], 0x10) 20:28:36 executing program 7: creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="140000000002e7000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) 20:28:36 executing program 0: creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) pread64(0xffffffffffffffff, &(0x7f0000000400)=""/255, 0xff, 0x7eb9) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000800000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) 20:28:36 executing program 5: r0 = creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) open_by_handle_at(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="5000000000000004000000"], 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f0000000200)=0x6, 0x4) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000001000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) 20:28:36 executing program 3: statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f0000000200)=0x6, 0x4) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000340)=ANY=[@ANYBLOB="01080000011270c839284f30e054da4374340020000000000000", @ANYRES32, @ANYBLOB="ffa22106351700002e2f661c696c653000"]) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) pread64(0xffffffffffffffff, &(0x7f0000000400)=""/255, 0xff, 0x7eb9) dup(0xffffffffffffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0), 0x9) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="140097ffffff00000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) [ 3470.083779] audit: type=1400 audit(1694464116.682:17): avc: denied { watch } for pid=17924 comm="syz-executor.2" path="/proc/17924/task/17962" dev="proc" ino=73857 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=1 20:28:36 executing program 7: creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) statfs(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=""/174) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="140000000003e8000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) 20:28:36 executing program 6: prctl$PR_GET_FPEXC(0xb, &(0x7f0000000180)) sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x8) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x0, 0x0) pidfd_send_signal(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xb, 0x5, 0x2000000}, 0x0) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file2\x00', 0x40080, 0x127) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, 0x0, 0x800, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x1f}}}}, [@NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0xfffffffe}]}, 0x30}, 0x1, 0x0, 0x0, 0x20048000}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="1000000017010007002e2f664169"], 0x10) [ 3473.251110] syz-executor.1: page allocation failure: order:0, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz1,mems_allowed=0 [ 3473.252710] CPU: 0 PID: 17926 Comm: syz-executor.1 Not tainted 5.10.194 #1 [ 3473.253500] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3473.254422] Call Trace: [ 3473.254724] dump_stack+0x107/0x167 [ 3473.255135] warn_alloc.cold+0x95/0x18a [ 3473.255601] ? zone_watermark_ok_safe+0x260/0x260 [ 3473.256152] ? queue_oom_reaper+0x86/0x1e0 [ 3473.256647] ? wait_for_completion_io+0x270/0x270 [ 3473.257204] __alloc_pages_slowpath.constprop.0+0x1c80/0x2130 [ 3473.257881] ? lock_acquire+0x117/0x470 [ 3473.258354] ? warn_alloc+0x190/0x190 [ 3473.258808] __alloc_pages_nodemask+0x51d/0x600 [ 3473.259337] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3473.259927] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 3473.260543] ? __alloc_pages_slowpath.constprop.0+0x2130/0x2130 [ 3473.261226] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 3473.261853] alloc_pages_current+0x187/0x280 [ 3473.262356] ? __sanitizer_cov_trace_pc+0x55/0x60 [ 3473.262909] relay_open_buf.part.0+0x2a5/0xc00 [ 3473.263427] relay_open+0x531/0xa10 [ 3473.263854] do_blk_trace_setup+0x4cf/0xc10 [ 3473.264343] ? _copy_from_user+0xfb/0x1b0 [ 3473.264811] __blk_trace_setup+0xca/0x180 [ 3473.265280] ? do_blk_trace_setup+0xc10/0xc10 [ 3473.265792] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 3473.266419] ? trace_hardirqs_on+0x5b/0x180 [ 3473.266922] blk_trace_ioctl+0x155/0x290 [ 3473.267383] ? blk_add_trace_bio_remap+0x5d0/0x5d0 [ 3473.267938] ? do_vfs_ioctl+0x283/0x10d0 [ 3473.268395] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 3473.268986] ? generic_block_fiemap+0x60/0x60 [ 3473.269493] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3473.270095] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 3473.270717] blkdev_ioctl+0xc1/0x710 [ 3473.271136] ? blkdev_common_ioctl+0x1870/0x1870 [ 3473.271660] ? security_file_ioctl+0x6c/0xb0 [ 3473.272170] block_ioctl+0xf9/0x140 [ 3473.272581] ? blkdev_read_iter+0x1c0/0x1c0 [ 3473.273060] __x64_sys_ioctl+0x19a/0x210 [ 3473.273534] do_syscall_64+0x33/0x40 [ 3473.273961] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 3473.274552] RIP: 0033:0x7fca56172b19 [ 3473.274978] Code: Unable to access opcode bytes at RIP 0x7fca56172aef. [ 3473.275726] RSP: 002b:00007fca536e8188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3473.276589] RAX: ffffffffffffffda RBX: 00007fca56285f60 RCX: 00007fca56172b19 [ 3473.277397] RDX: 0000000020000000 RSI: 00000000c0481273 RDI: 0000000000000003 [ 3473.278226] RBP: 00007fca561ccf6d R08: 0000000000000000 R09: 0000000000000000 [ 3473.279030] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3473.279839] R13: 00007ffdb3f1636f R14: 00007fca536e8300 R15: 0000000000022000 [ 3473.280768] Mem-Info: [ 3473.281064] active_anon:9955 inactive_anon:56549 isolated_anon:0 [ 3473.281064] active_file:25 inactive_file:17 isolated_file:0 [ 3473.281064] unevictable:0 dirty:0 writeback:0 [ 3473.281064] slab_reclaimable:9629 slab_unreclaimable:62610 [ 3473.281064] mapped:69634 shmem:107 pagetables:1869 bounce:0 [ 3473.281064] free:2243 free_pcp:62 free_cma:0 [ 3473.284501] Node 0 active_anon:39820kB inactive_anon:226196kB active_file:100kB inactive_file:68kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:278536kB dirty:0kB writeback:0kB shmem:428kB writeback_tmp:0kB kernel_stack:4704kB all_unreclaimable? yes [ 3473.287029] Node 0 DMA free:6484kB min:48kB low:60kB high:72kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3473.289860] lowmem_reserve[]: 0 1616 1616 1616 [ 3473.290396] Node 0 DMA32 free:2488kB min:5116kB low:6768kB high:8420kB reserved_highatomic:0KB active_anon:39820kB inactive_anon:226196kB active_file:100kB inactive_file:68kB unevictable:0kB writepending:0kB present:2080640kB managed:1660496kB mlocked:0kB pagetables:7476kB bounce:0kB free_pcp:248kB local_pcp:248kB free_cma:0kB [ 3473.293547] lowmem_reserve[]: 0 0 0 0 [ 3473.293990] Node 0 DMA: 1*4kB (U) 0*8kB 1*16kB (U) 0*32kB 1*64kB (U) 0*128kB 1*256kB (U) 0*512kB 0*1024kB 1*2048kB (M) 1*4096kB (M) = 6484kB [ 3473.295499] Node 0 DMA32: 210*4kB (UME) 66*8kB (ME) 38*16kB (UME) 16*32kB (UM) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 2488kB [ 3473.297033] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3473.297969] 151 total pagecache pages [ 3473.298398] 0 pages in swap cache [ 3473.298806] Swap cache stats: add 0, delete 0, find 0/0 [ 3473.299370] Free swap = 0kB [ 3473.299726] Total swap = 0kB [ 3473.300047] 524158 pages RAM [ 3473.300371] 0 pages HighMem/MovableOnly [ 3473.300814] 105057 pages reserved [ 3474.366327] syz-fuzzer invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 3474.368303] CPU: 0 PID: 256 Comm: syz-fuzzer Not tainted 5.10.194 #1 [ 3474.369307] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3474.370597] Call Trace: [ 3474.371019] dump_stack+0x107/0x167 [ 3474.371599] dump_header+0x106/0x65e [ 3474.372193] oom_kill_process.cold+0x10/0x15 [ 3474.372883] out_of_memory+0x1149/0x1440 [ 3474.373528] ? oom_killer_disable+0x280/0x280 [ 3474.374247] ? mutex_trylock+0x237/0x2b0 [ 3474.374879] ? __alloc_pages_slowpath.constprop.0+0xb0e/0x2130 [ 3474.375810] __alloc_pages_slowpath.constprop.0+0x1b25/0x2130 [ 3474.376741] ? lock_acquire+0x117/0x470 [ 3474.377376] ? warn_alloc+0x190/0x190 [ 3474.378003] __alloc_pages_nodemask+0x51d/0x600 [ 3474.378756] ? __alloc_pages_slowpath.constprop.0+0x2130/0x2130 [ 3474.379715] ? find_get_entry+0x2c8/0x740 [ 3474.380389] alloc_pages_current+0x187/0x280 [ 3474.381098] __page_cache_alloc+0x2d2/0x360 [ 3474.381792] pagecache_get_page+0x2c7/0xc80 [ 3474.382493] filemap_fault+0x177d/0x2210 [ 3474.383154] ? read_cache_page_gfp+0x30/0x30 [ 3474.383851] ? replace_page_cache_page+0x1200/0x1200 [ 3474.384660] ? count_memcg_event_mm.part.0+0x10f/0x2f0 [ 3474.385515] ext4_filemap_fault+0x87/0xc0 [ 3474.386190] __do_fault+0x113/0x410 [ 3474.386771] handle_mm_fault+0x1e53/0x3500 [ 3474.387444] ? find_held_lock+0x2c/0x110 [ 3474.388089] ? __pmd_alloc+0x5e0/0x5e0 [ 3474.388714] ? vmacache_find+0x55/0x2a0 [ 3474.389348] do_user_addr_fault+0x56e/0xc60 [ 3474.390043] exc_page_fault+0xa2/0x1a0 [ 3474.390668] ? asm_exc_page_fault+0x8/0x30 [ 3474.391345] asm_exc_page_fault+0x1e/0x30 [ 3474.392001] RIP: 0033:0x40b03e [ 3474.392509] Code: Unable to access opcode bytes at RIP 0x40b014. [ 3474.393468] RSP: 002b:000000c00003fed8 EFLAGS: 00010212 [ 3474.394325] RAX: ffffffffffffff92 RBX: 0000000027825428 RCX: 0000000000466533 [ 3474.395454] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 0000000001f20e78 [ 3474.396580] RBP: 000000c00003ff00 R08: 0000000000000000 R09: 0000000000000000 [ 3474.397708] R10: 000000c00003feb8 R11: 0000000000000206 R12: 0000000000438880 [ 3474.398863] R13: 0000000000000000 R14: 0000000000e5de2c R15: 0000000000000000 [ 3474.400181] Mem-Info: [ 3474.400622] active_anon:9955 inactive_anon:56549 isolated_anon:0 [ 3474.400622] active_file:0 inactive_file:14 isolated_file:0 [ 3474.400622] unevictable:0 dirty:0 writeback:0 [ 3474.400622] slab_reclaimable:9625 slab_unreclaimable:62294 [ 3474.400622] mapped:69642 shmem:107 pagetables:1869 bounce:0 [ 3474.400622] free:2438 free_pcp:62 free_cma:0 [ 3474.405557] Node 0 active_anon:39820kB inactive_anon:226196kB active_file:0kB inactive_file:56kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:278568kB dirty:0kB writeback:0kB shmem:428kB writeback_tmp:0kB kernel_stack:4640kB all_unreclaimable? yes [ 3474.409245] Node 0 DMA free:6484kB min:48kB low:60kB high:72kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3474.413356] lowmem_reserve[]: 0 1616 1616 1616 [ 3474.414144] Node 0 DMA32 free:3268kB min:7164kB low:8816kB high:10468kB reserved_highatomic:0KB active_anon:39820kB inactive_anon:226196kB active_file:0kB inactive_file:152kB unevictable:0kB writepending:0kB present:2080640kB managed:1660496kB mlocked:0kB pagetables:7476kB bounce:0kB free_pcp:248kB local_pcp:0kB free_cma:0kB [ 3474.418664] lowmem_reserve[]: 0 0 0 0 [ 3474.419301] Node 0 DMA: 1*4kB (U) 0*8kB 1*16kB (U) 0*32kB 1*64kB (U) 0*128kB 1*256kB (U) 0*512kB 0*1024kB 1*2048kB (M) 1*4096kB (M) = 6484kB [ 3474.421601] Node 0 DMA32: 419*4kB (UME) 101*8kB (UME) 43*16kB (UME) 9*32kB (UM) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 3460kB [ 3474.423816] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3474.425170] 173 total pagecache pages [ 3474.425793] 0 pages in swap cache [ 3474.426359] Swap cache stats: add 0, delete 0, find 0/0 [ 3474.427218] Free swap = 0kB [ 3474.427724] Total swap = 0kB [ 3474.428199] 524158 pages RAM [ 3474.428695] 0 pages HighMem/MovableOnly [ 3474.429314] 105057 pages reserved [ 3474.429882] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=/,mems_allowed=0,global_oom,task_memcg=/system.slice/ssh.service,task=syz-fuzzer,pid=256,uid=0 [ 3474.433462] Out of memory (oom_kill_allocating_task): Killed process 255 (syz-fuzzer) total-vm:1239764kB, anon-rss:227716kB, file-rss:0kB, shmem-rss:0kB, UID:0 pgtables:916kB oom_score_adj:0 [ 3475.044597] oom_reaper: reaped process 17926 (syz-executor.1), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 3475.396606] systemd-udevd invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 3475.397864] CPU: 0 PID: 17989 Comm: systemd-udevd Not tainted 5.10.194 #1 [ 3475.398617] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3475.399535] Call Trace: [ 3475.399843] dump_stack+0x107/0x167 [ 3475.400247] dump_header+0x106/0x65e [ 3475.400660] oom_kill_process.cold+0x10/0x15 [ 3475.401156] out_of_memory+0x1149/0x1440 [ 3475.401620] ? oom_killer_disable+0x280/0x280 [ 3475.402120] ? mutex_trylock+0x237/0x2b0 [ 3475.402572] ? __alloc_pages_slowpath.constprop.0+0xb0e/0x2130 [ 3475.403217] __alloc_pages_slowpath.constprop.0+0x1b25/0x2130 [ 3475.403896] ? lock_acquire+0x117/0x470 [ 3475.404318] ? warn_alloc+0x190/0x190 [ 3475.404751] __alloc_pages_nodemask+0x51d/0x600 [ 3475.405249] ? lock_acquire+0x197/0x470 [ 3475.405690] ? lockref_get+0x11/0x50 [ 3475.406087] ? __alloc_pages_slowpath.constprop.0+0x2130/0x2130 [ 3475.406761] ? lock_downgrade+0x6d0/0x6d0 [ 3475.407229] ? do_raw_spin_lock+0x121/0x260 [ 3475.407712] ? rwlock_bug.part.0+0x90/0x90 [ 3475.408187] alloc_pages_current+0x187/0x280 [ 3475.408679] __get_free_pages+0xc/0xa0 [ 3475.409112] inode_doinit_with_dentry+0x8f1/0x1240 [ 3475.409649] ? show_schedstat+0x8c0/0xca0 [ 3475.410115] ? selinux_file_lock+0x280/0x280 [ 3475.410614] ? kernfs_get_inode+0x388/0x520 [ 3475.411101] ? lock_downgrade+0x6d0/0x6d0 [ 3475.411563] selinux_d_instantiate+0x23/0x30 [ 3475.412056] security_d_instantiate+0x56/0xe0 [ 3475.412564] d_splice_alias+0x8c/0xc60 [ 3475.412998] ? _raw_spin_unlock+0x1a/0x30 [ 3475.413471] kernfs_iop_lookup+0x1ac/0x220 [ 3475.413960] __lookup_slow+0x252/0x490 [ 3475.414400] ? lookup_open.isra.0+0x1270/0x1270 [ 3475.414930] ? selinux_inode_permission+0x401/0x640 [ 3475.415494] ? selinux_path_notify+0x4d0/0x4d0 [ 3475.416003] walk_component+0x41e/0x6a0 [ 3475.416447] ? handle_dots.part.0+0x15c0/0x15c0 [ 3475.416967] ? security_inode_permission+0xcb/0x100 [ 3475.417515] ? kernfs_iop_getattr+0xd0/0xd0 [ 3475.417997] link_path_walk.part.0+0x699/0xbf0 [ 3475.418532] ? walk_component+0x6a0/0x6a0 [ 3475.419004] ? percpu_counter_add_batch+0x8b/0x140 [ 3475.419559] path_openat+0x25a/0x26f0 [ 3475.419999] ? path_lookupat+0x860/0x860 [ 3475.420450] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3475.421040] ? SOFTIRQ_verbose+0x10/0x10 [ 3475.421494] do_filp_open+0x190/0x3e0 [ 3475.421906] ? may_open_dev+0xf0/0xf0 [ 3475.422346] ? do_raw_spin_lock+0x121/0x260 [ 3475.422830] ? rwlock_bug.part.0+0x90/0x90 [ 3475.423303] ? _raw_spin_unlock+0x1a/0x30 [ 3475.423756] ? __alloc_fd+0x2b8/0x630 [ 3475.424183] do_sys_openat2+0x171/0x420 [ 3475.424636] ? seccomp_notify_ioctl+0xda0/0xda0 [ 3475.425150] ? __fget_light+0x21d/0x290 [ 3475.425598] ? build_open_flags+0x6f0/0x6f0 [ 3475.426082] ? __sys_recvmsg+0x109/0x1b0 [ 3475.426546] __x64_sys_openat+0x13f/0x1f0 [ 3475.427004] ? __ia32_sys_open+0x1c0/0x1c0 [ 3475.427480] ? __secure_computing+0xb4/0x290 [ 3475.427979] do_syscall_64+0x33/0x40 [ 3475.428394] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 3475.428961] RIP: 0033:0x7f2c29ddfbe7 [ 3475.429375] Code: 25 00 00 41 00 3d 00 00 41 00 74 47 64 8b 04 25 18 00 00 00 85 c0 75 6b 44 89 e2 48 89 ee bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 95 00 00 00 48 8b 4c 24 28 64 48 2b 0c 25 [ 3475.431453] RSP: 002b:00007fff40b89470 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 3475.432300] RAX: ffffffffffffffda RBX: 000055a522a0ebd0 RCX: 00007f2c29ddfbe7 [ 3475.433087] RDX: 0000000000080000 RSI: 00007fff40b896b0 RDI: 00000000ffffff9c [ 3475.433884] RBP: 00007fff40b896b0 R08: 0000000000000008 R09: 0000000000000001 [ 3475.434682] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000080000 [ 3475.435485] R13: 000055a522a0ebd0 R14: 0000000000000001 R15: 000055a522a054e0 [ 3475.436335] Mem-Info: [ 3475.436636] active_anon:9151 inactive_anon:44502 isolated_anon:0 [ 3475.436636] active_file:819 inactive_file:885 isolated_file:32 [ 3475.436636] unevictable:0 dirty:16 writeback:0 [ 3475.436636] slab_reclaimable:9549 slab_unreclaimable:59767 [ 3475.436636] mapped:11874 shmem:106 pagetables:865 bounce:0 [ 3475.436636] free:3765 free_pcp:197 free_cma:0 [ 3475.440107] Node 0 active_anon:36604kB inactive_anon:178008kB active_file:3276kB inactive_file:3540kB unevictable:0kB isolated(anon):0kB isolated(file):128kB mapped:47496kB dirty:64kB writeback:0kB shmem:424kB writeback_tmp:0kB kernel_stack:3264kB all_unreclaimable? no [ 3475.442733] Node 0 DMA free:6484kB min:48kB low:60kB high:72kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3475.445662] lowmem_reserve[]: 0 1616 1616 1616 [ 3475.446216] Node 0 DMA32 free:8576kB min:17404kB low:19056kB high:20708kB reserved_highatomic:0KB active_anon:36772kB inactive_anon:178008kB active_file:3452kB inactive_file:3788kB unevictable:0kB writepending:148kB present:2080640kB managed:1660496kB mlocked:0kB pagetables:3460kB bounce:0kB free_pcp:812kB local_pcp:704kB free_cma:0kB [ 3475.449478] lowmem_reserve[]: 0 0 0 0 [ 3475.449945] Node 0 DMA: 1*4kB (U) 0*8kB 1*16kB (U) 0*32kB 1*64kB (U) 0*128kB 1*256kB (U) 0*512kB 0*1024kB 1*2048kB (M) 1*4096kB (M) = 6484kB [ 3475.451508] Node 0 DMA32: 604*4kB (UME) 216*8kB (UME) 94*16kB (ME) 70*32kB (UME) 23*64kB (UM) 1*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 9488kB [ 3475.453219] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3475.454188] 1835 total pagecache pages [ 3475.454640] 0 pages in swap cache [ 3475.455032] Swap cache stats: add 0, delete 0, find 0/0 [ 3475.455637] Free swap = 0kB [ 3475.455975] Total swap = 0kB [ 3475.456306] 524158 pages RAM [ 3475.456722] 0 pages HighMem/MovableOnly [ 3475.457160] 105057 pages reserved [ 3475.457598] Unreclaimable slab info: [ 3475.458237] Name Used Total [ 3475.458920] pid_3 7KB 7KB [ 3475.459519] pid_2 74KB 93KB [ 3475.460114] IEEE-802.15.4-MAC 63KB 63KB [ 3475.460732] IEEE-802.15.4-RAW 63KB 63KB [ 3475.461327] p9_req_t 8KB 8KB [ 3475.461950] fib6_nodes 28KB 28KB [ 3475.462572] ip6_dst_cache 41KB 41KB [ 3475.463158] PINGv6 31KB 31KB [ 3475.463766] RAWv6 378KB 378KB [ 3475.464359] UDPLITEv6 62KB 62KB [ 3475.464940] UDPv6 248KB 248KB [ 3475.465548] tw_sock_TCPv6 7KB 7KB [ 3475.466143] TCPv6 62KB 62KB [ 3475.466884] scsi_sense_cache 4KB 4KB [ 3475.467577] sd_ext_cdb 3KB 3KB [ 3475.468157] virtio_scsi_cmd 16KB 16KB [ 3475.468788] sgpool-128 59KB 59KB [ 3475.469379] sgpool-64 63KB 63KB [ 3475.469988] sgpool-32 157KB 157KB [ 3475.470609] sgpool-16 142KB 142KB [ 3475.471207] sgpool-8 60KB 60KB [ 3475.471831] io_kiocb 30KB 45KB [ 3475.472436] mqueue_inode_cache 62KB 62KB [ 3475.473013] nfs_commit_data 15KB 15KB [ 3475.473625] nfs_write_data 47KB 47KB [ 3475.474224] jbd2_inode 7KB 7KB [ 3475.474837] ext4_system_zone 7KB 7KB [ 3475.475441] ext4_io_end_vec 7KB 7KB [ 3475.476031] ext4_bio_post_read_ctx 15KB 15KB [ 3475.476687] kioctx 31KB 31KB [ 3475.477272] aio_kiocb 3KB 3KB [ 3475.477879] dnotify_mark 3KB 3KB [ 3475.478503] dnotify_struct 3KB 3KB [ 3475.479087] dio 46KB 46KB [ 3475.479693] bio-2 4KB 4KB [ 3475.480283] fasync_cache 7KB 7KB [ 3475.480901] pid_namespace 7KB 7KB [ 3475.481511] posix_timers_cache 7KB 7KB [ 3475.482129] rpc_buffers 31KB 31KB [ 3475.482746] rpc_tasks 3KB 3KB [ 3475.483332] UNIX 252KB 352KB [ 3475.483908] ip4-frags 7KB 7KB [ 3475.484495] UDP-Lite 63KB 63KB [ 3475.485083] tcp_bind_bucket 8KB 8KB [ 3475.485680] inet_peer_cache 4KB 4KB [ 3475.486284] xfrm_state 32KB 32KB [ 3475.486885] ip_fib_trie 8KB 8KB [ 3475.487492] ip_fib_alias 15KB 15KB [ 3475.488085] ip_dst_cache 60KB 60KB [ 3475.488688] PING 31KB 31KB [ 3475.489274] RAW 290KB 312KB [ 3475.489879] UDP 220KB 283KB [ 3475.490485] tw_sock_TCP 15KB 15KB [ 3475.491075] request_sock_TCP 7KB 7KB [ 3475.491684] TCP 60KB 60KB [ 3475.492273] hugetlbfs_inode_cache 30KB 30KB [ 3475.492882] bio-1 11KB 11KB [ 3475.493483] eventpoll_pwq 23KB 23KB [ 3475.494071] eventpoll_epi 63KB 63KB [ 3475.494691] inotify_inode_mark 46KB 46KB [ 3475.495288] request_queue 60KB 60KB [ 3475.495896] blkdev_ioc 41KB 41KB [ 3475.496503] bio-0 256KB 256KB [ 3475.497091] biovec-max 1372KB 1372KB [ 3475.497695] biovec-64 346KB 346KB [ 3475.498293] biovec-16 63KB 63KB [ 3475.498887] user_namespace 31KB 31KB [ 3475.499462] uid_cache 8KB 8KB [ 3475.500049] dmaengine-unmap-2 4KB 4KB [ 3475.500651] audit_buffer 7KB 7KB [ 3475.501322] skbuff_fclone_cache 120KB 120KB [ 3475.502025] skbuff_head_cache 246KB 258KB [ 3475.502612] file_lock_cache 74KB 74KB [ 3475.503209] file_lock_ctx 7KB 7KB [ 3475.503814] fsnotify_mark_connector 24KB 24KB [ 3475.504481] net_namespace 132KB 172KB [ 3475.505060] task_delay_info 127KB 127KB [ 3475.505671] taskstats 100KB 100KB [ 3475.506282] proc_dir_entry 445KB 472KB [ 3475.506877] pde_opener 31KB 31KB [ 3475.507482] seq_file 39KB 56KB [ 3475.508068] sigqueue 86KB 86KB [ 3475.508688] shmem_inode_cache 1249KB 1320KB [ 3475.509277] kernfs_iattrs_cache 239KB 239KB [ 3475.510051] kernfs_node_cache 5761KB 5761KB [ 3475.510681] mnt_cache 244KB 244KB [ 3475.511465] filp 695KB 1485KB [ 3475.512065] names_cache 1615KB 2112KB [ 3475.512675] hashtab_node 274KB 274KB [ 3475.513246] ebitmap_node 1149KB 1149KB [ 3475.513994] avtab_node 4976KB 4976KB [ 3475.514617] avc_node 35KB 35KB [ 3475.515236] lsm_inode_cache 3073KB 3360KB [ 3475.515838] lsm_file_cache 141KB 204KB [ 3475.516454] key_jar 39KB 39KB [ 3475.517160] uts_namespace 15KB 15KB [ 3475.517770] nsproxy 19KB 19KB [ 3475.518401] vm_area_struct 1050KB 1456KB [ 3475.519011] fs_cache 60KB 68KB [ 3475.519612] files_cache 234KB 270KB [ 3475.520209] signal_cache 290KB 494KB [ 3475.520815] sighand_cache 296KB 390KB [ 3475.521406] task_struct 1135KB 1680KB [ 3475.522012] cred_jar 96KB 184KB [ 3475.522632] anon_vma_chain 256KB 366KB [ 3475.523231] anon_vma 181KB 251KB [ 3475.523847] pid 51KB 63KB [ 3475.524468] Acpi-Operand 144KB 178KB [ 3475.525025] Acpi-ParseExt 23KB 23KB [ 3475.525633] Acpi-Parse 59KB 75KB [ 3475.526230] Acpi-State 169KB 185KB [ 3475.526837] Acpi-Namespace 24KB 24KB [ 3475.527444] shared_policy_node 4KB 4KB [ 3475.528034] numa_policy 7KB 7KB [ 3475.528654] trace_event_file 163KB 163KB [ 3475.529255] ftrace_event_field 280KB 280KB [ 3475.529874] pool_workqueue 40KB 40KB [ 3475.530509] task_group 16KB 16KB [ 3475.531117] mm_struct 339KB 378KB [ 3475.531735] vmap_area 181KB 196KB [ 3475.532301] page->ptl 206KB 322KB [ 3475.532920] kmemleak_scan_area 211KB 211KB [ 3475.534605] kmemleak_object 142281KB 156233KB [ 3475.535209] kmalloc-8k 4864KB 5024KB [ 3475.535830] kmalloc-4k 6816KB 8128KB [ 3475.536454] kmalloc-2k 5072KB 6784KB [ 3475.537059] kmalloc-1k 2532KB 3744KB [ 3475.537691] kmalloc-512 2345KB 3648KB [ 3475.538308] kmalloc-256 1263KB 1376KB [ 3475.538922] kmalloc-192 736KB 736KB [ 3475.539532] kmalloc-128 522KB 584KB [ 3475.540126] kmalloc-96 339KB 552KB [ 3475.540768] kmalloc-64 867KB 1200KB [ 3475.541373] kmalloc-32 733KB 848KB [ 3475.541973] kmalloc-16 364KB 364KB [ 3475.542581] kmalloc-8 321KB 326KB [ 3475.543176] kmem_cache_node 47KB 47KB [ 3475.543776] kmem_cache 75KB 75KB [ 3475.544332] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=/,mems_allowed=0,global_oom,task_memcg=/system.slice/systemd-udevd.service,task=systemd-udevd,pid=17989,uid=0 [ 3475.546978] Out of memory (oom_kill_allocating_task): Killed process 17989 (systemd-udevd) total-vm:35620kB, anon-rss:10128kB, file-rss:1288kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:0 [ 3475.847725] sshd invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 3475.848937] CPU: 0 PID: 17991 Comm: sshd Not tainted 5.10.194 #1 [ 3475.849590] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3475.850472] Call Trace: [ 3475.850757] dump_stack+0x107/0x167 [ 3475.851143] dump_header+0x106/0x65e [ 3475.851552] oom_kill_process.cold+0x10/0x15 [ 3475.852020] out_of_memory+0x1149/0x1440 [ 3475.852453] ? oom_killer_disable+0x280/0x280 [ 3475.852927] ? mutex_trylock+0x237/0x2b0 [ 3475.853356] ? __alloc_pages_slowpath.constprop.0+0xb0e/0x2130 [ 3475.853976] __alloc_pages_slowpath.constprop.0+0x1b25/0x2130 [ 3475.854606] ? lock_acquire+0x117/0x470 [ 3475.855026] ? warn_alloc+0x190/0x190 [ 3475.855435] __alloc_pages_nodemask+0x51d/0x600 [ 3475.855927] ? fault_dirty_shared_page+0x3f0/0x3f0 [ 3475.856443] ? __alloc_pages_slowpath.constprop.0+0x2130/0x2130 [ 3475.857068] ? count_memcg_event_mm.part.0+0x10f/0x2f0 [ 3475.857624] ? lock_downgrade+0x6d0/0x6d0 [ 3475.858066] ? mark_held_locks+0x9e/0xe0 [ 3475.858513] alloc_pages_vma+0xbb/0x410 [ 3475.858941] handle_mm_fault+0xf00/0x3500 [ 3475.859390] ? __pmd_alloc+0x5e0/0x5e0 [ 3475.859806] ? vmacache_find+0x55/0x2a0 [ 3475.860239] do_user_addr_fault+0x56e/0xc60 [ 3475.860707] exc_page_fault+0xa2/0x1a0 [ 3475.861122] asm_exc_page_fault+0x1e/0x30 [ 3475.861572] RIP: 0010:__clear_user+0x40/0x70 [ 3475.862038] Code: 66 5d 84 e8 52 32 5d ff 0f 01 cb 48 89 d8 48 c1 eb 03 48 89 ef 83 e0 07 48 89 d9 48 85 c9 74 19 66 2e 0f 1f 84 00 00 00 00 00 <48> c7 07 00 00 00 00 48 83 c7 08 ff c9 75 f1 48 89 c1 85 c9 74 0a [ 3475.864001] RSP: 0018:ffff88802534fb48 EFLAGS: 00050206 [ 3475.864570] RAX: 0000000000000000 RBX: 0000000000000136 RCX: 0000000000000136 [ 3475.865323] RDX: ffff8880461ecec0 RSI: ffffffff8201ea6e RDI: 000056440b2f8650 [ 3475.866076] RBP: 000056440b2f8650 R08: 0000000000000000 R09: 0000000000000000 [ 3475.866839] R10: 0000000000000001 R11: 0000000000000001 R12: 000056440b2f8650 [ 3475.867591] R13: 00007ffffffff000 R14: 0000000000000000 R15: 0000000000000001 [ 3475.868352] ? __clear_user+0x1e/0x70 [ 3475.868759] ? __clear_user+0x1e/0x70 [ 3475.869165] clear_user+0xf3/0x130 [ 3475.869546] load_elf_binary+0x3332/0x4bc0 [ 3475.870012] ? elf_core_dump+0x37e0/0x37e0 [ 3475.870467] ? do_raw_read_unlock+0x3b/0x70 [ 3475.870926] ? _raw_read_unlock+0x1a/0x30 [ 3475.871368] ? load_misc_binary+0x605/0xb70 [ 3475.871835] bprm_execve+0x969/0x1a60 [ 3475.872241] ? open_exec+0x70/0x70 [ 3475.872619] ? copy_strings.isra.0+0x492/0x690 [ 3475.873111] do_execveat_common+0x772/0x8d0 [ 3475.873574] ? bprm_execve+0x1a60/0x1a60 [ 3475.874010] ? getname_flags.part.0+0x1dd/0x4f0 [ 3475.874516] __x64_sys_execve+0x8f/0xc0 [ 3475.874944] do_syscall_64+0x33/0x40 [ 3475.875343] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 3475.875891] RIP: 0033:0x7f373ad9c6c7 [ 3475.876285] Code: Unable to access opcode bytes at RIP 0x7f373ad9c69d. [ 3475.876981] RSP: 002b:00007fff2dc497a8 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 3475.877787] RAX: ffffffffffffffda RBX: 0000557ba4c62b10 RCX: 00007f373ad9c6c7 [ 3475.878552] RDX: 0000557ba4ca6950 RSI: 0000557ba4bdc0a0 RDI: 0000557ba4c077e0 [ 3475.879313] RBP: 00007fff2dc499a0 R08: 0000557ba4c81cb0 R09: 0000000000000010 [ 3475.880074] R10: 0000557ba4c6f710 R11: 0000000000000246 R12: 0000557ba4bdc0a0 [ 3475.880832] R13: 0000000000000000 R14: 0000557ba4c85df0 R15: 0000557ba4bdc0a0 [ 3475.881651] Mem-Info: [ 3475.881929] active_anon:58 inactive_anon:4350 isolated_anon:0 [ 3475.881929] active_file:417 inactive_file:441 isolated_file:44 [ 3475.881929] unevictable:0 dirty:16 writeback:0 [ 3475.881929] slab_reclaimable:8768 slab_unreclaimable:59533 [ 3475.881929] mapped:9312 shmem:106 pagetables:301 bounce:0 [ 3475.881929] free:3924 free_pcp:565 free_cma:0 [ 3475.885290] Node 0 active_anon:232kB inactive_anon:17400kB active_file:1668kB inactive_file:1656kB unevictable:0kB isolated(anon):0kB isolated(file):176kB mapped:37164kB dirty:64kB writeback:0kB shmem:424kB writeback_tmp:0kB kernel_stack:2688kB all_unreclaimable? no [ 3475.887737] Node 0 DMA free:6484kB min:48kB low:60kB high:72kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3475.890499] lowmem_reserve[]: 0 1616 1616 1616 [ 3475.891025] Node 0 DMA32 free:9716kB min:17744kB low:19396kB high:21048kB reserved_highatomic:0KB active_anon:484kB inactive_anon:17736kB active_file:1616kB inactive_file:1692kB unevictable:0kB writepending:148kB present:2080640kB managed:1660496kB mlocked:0kB pagetables:1204kB bounce:0kB free_pcp:2700kB local_pcp:1356kB free_cma:0kB [ 3475.894157] lowmem_reserve[]: 0 0 0 0 [ 3475.894604] Node 0 DMA: 1*4kB (U) 0*8kB 1*16kB (U) 0*32kB 1*64kB (U) 0*128kB 1*256kB (U) 0*512kB 0*1024kB 1*2048kB (M) 1*4096kB (M) = 6484kB [ 3475.896182] Node 0 DMA32: 679*4kB (UME) 277*8kB (UME) 113*16kB (UME) 45*32kB (UME) 11*64kB (UM) 2*128kB (UM) 2*256kB (UM) 1*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 10164kB [ 3475.897964] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3475.898916] 806 total pagecache pages [ 3475.899332] 0 pages in swap cache [ 3475.899731] Swap cache stats: add 0, delete 0, find 0/0 [ 3475.900319] Free swap = 0kB [ 3475.900664] Total swap = 0kB [ 3475.901001] 524158 pages RAM [ 3475.901335] 0 pages HighMem/MovableOnly [ 3475.901785] 105057 pages reserved [ 3475.902211] Unreclaimable slab info: [ 3475.902841] Name Used Total [ 3475.903504] pid_3 7KB 7KB [ 3475.904097] pid_2 74KB 93KB [ 3475.904730] IEEE-802.15.4-MAC 63KB 63KB [ 3475.905316] IEEE-802.15.4-RAW 63KB 63KB [ 3475.905920] p9_req_t 8KB 8KB [ 3475.906540] fib6_nodes 28KB 28KB [ 3475.907122] ip6_dst_cache 41KB 41KB [ 3475.907727] PINGv6 31KB 31KB [ 3475.908306] RAWv6 378KB 378KB [ 3475.908910] UDPLITEv6 62KB 62KB [ 3475.909509] UDPv6 248KB 248KB [ 3475.910097] tw_sock_TCPv6 7KB 7KB [ 3475.910712] TCPv6 62KB 62KB [ 3475.911303] scsi_sense_cache 4KB 4KB [ 3475.911909] sd_ext_cdb 3KB 3KB [ 3475.912514] virtio_scsi_cmd 16KB 16KB [ 3475.913101] sgpool-128 59KB 59KB [ 3475.913711] sgpool-64 63KB 63KB [ 3475.914307] sgpool-32 220KB 220KB [ 3475.914910] sgpool-16 142KB 142KB [ 3475.915504] sgpool-8 78KB 78KB [ 3475.916092] io_kiocb 30KB 45KB [ 3475.916699] mqueue_inode_cache 62KB 62KB [ 3475.917297] nfs_commit_data 15KB 15KB [ 3475.917889] nfs_write_data 47KB 47KB [ 3475.918501] jbd2_inode 7KB 7KB [ 3475.919092] ext4_system_zone 7KB 7KB [ 3475.919689] ext4_io_end_vec 7KB 7KB [ 3475.920269] ext4_bio_post_read_ctx 15KB 15KB [ 3475.920917] kioctx 31KB 31KB [ 3475.921515] aio_kiocb 3KB 3KB [ 3475.922097] dnotify_mark 3KB 3KB [ 3475.922711] dnotify_struct 3KB 3KB [ 3475.923295] dio 46KB 46KB [ 3475.923895] bio-2 4KB 4KB [ 3475.924498] fasync_cache 7KB 7KB [ 3475.925085] pid_namespace 7KB 7KB [ 3475.925684] posix_timers_cache 7KB 7KB [ 3475.926297] rpc_buffers 31KB 31KB [ 3475.926900] rpc_tasks 3KB 3KB [ 3475.927499] UNIX 280KB 352KB [ 3475.928091] ip4-frags 7KB 7KB [ 3475.928689] UDP-Lite 63KB 63KB [ 3475.929276] tcp_bind_bucket 8KB 8KB [ 3475.929882] inet_peer_cache 4KB 4KB [ 3475.930498] xfrm_state 32KB 32KB [ 3475.931089] ip_fib_trie 8KB 8KB [ 3475.931698] ip_fib_alias 15KB 15KB [ 3475.932284] ip_dst_cache 60KB 60KB [ 3475.932899] PING 31KB 31KB [ 3475.933491] RAW 290KB 312KB [ 3475.934076] UDP 220KB 283KB [ 3475.934689] tw_sock_TCP 15KB 15KB [ 3475.935278] request_sock_TCP 7KB 7KB [ 3475.935887] TCP 60KB 60KB [ 3475.936490] hugetlbfs_inode_cache 30KB 30KB [ 3475.937112] bio-1 11KB 11KB [ 3475.937713] eventpoll_pwq 23KB 23KB [ 3475.938301] eventpoll_epi 63KB 63KB [ 3475.938901] inotify_inode_mark 46KB 46KB [ 3475.939513] request_queue 60KB 60KB [ 3475.940102] blkdev_ioc 41KB 41KB [ 3475.940709] bio-0 332KB 332KB [ 3475.941310] biovec-max 714KB 986KB [ 3475.941909] biovec-64 409KB 409KB [ 3475.942525] biovec-16 67KB 67KB [ 3475.943113] user_namespace 31KB 31KB [ 3475.943710] uid_cache 8KB 8KB [ 3475.944299] dmaengine-unmap-2 4KB 4KB [ 3475.944903] audit_buffer 7KB 7KB [ 3475.945515] skbuff_fclone_cache 120KB 120KB [ 3475.946125] skbuff_head_cache 300KB 300KB [ 3475.946743] file_lock_cache 74KB 74KB [ 3475.947326] file_lock_ctx 7KB 7KB [ 3475.947937] fsnotify_mark_connector 24KB 24KB [ 3475.948606] net_namespace 132KB 172KB [ 3475.949188] task_delay_info 127KB 127KB [ 3475.949789] taskstats 100KB 100KB [ 3475.950383] proc_dir_entry 445KB 472KB [ 3475.950988] pde_opener 31KB 31KB [ 3475.951588] seq_file 41KB 56KB [ 3475.952178] sigqueue 86KB 86KB [ 3475.952790] shmem_inode_cache 1249KB 1320KB [ 3475.953387] kernfs_iattrs_cache 239KB 239KB [ 3475.954007] kernfs_node_cache 5697KB 5742KB [ 3475.954620] mnt_cache 244KB 244KB [ 3475.955236] filp 691KB 1425KB [ 3475.955836] names_cache 2125KB 2350KB [ 3475.956432] hashtab_node 274KB 274KB [ 3475.957015] ebitmap_node 1149KB 1149KB [ 3475.957620] avtab_node 4976KB 4976KB [ 3475.958212] avc_node 35KB 35KB [ 3475.958853] lsm_inode_cache 2647KB 3134KB [ 3475.959449] lsm_file_cache 141KB 204KB [ 3475.960031] key_jar 39KB 39KB [ 3475.960638] uts_namespace 15KB 15KB [ 3475.961223] nsproxy 19KB 19KB [ 3475.961850] vm_area_struct 1136KB 1456KB [ 3475.962469] fs_cache 60KB 68KB [ 3475.963059] files_cache 234KB 270KB [ 3475.963667] signal_cache 287KB 494KB [ 3475.964250] sighand_cache 259KB 360KB [ 3475.964864] task_struct 1122KB 1653KB [ 3475.965469] cred_jar 96KB 184KB [ 3475.966054] anon_vma_chain 256KB 366KB [ 3475.966666] anon_vma 121KB 183KB [ 3475.967252] pid 50KB 63KB [ 3475.967860] Acpi-Operand 144KB 178KB [ 3475.968470] Acpi-ParseExt 23KB 23KB [ 3475.969056] Acpi-Parse 59KB 75KB [ 3475.969655] Acpi-State 169KB 185KB [ 3475.970253] Acpi-Namespace 24KB 24KB [ 3475.970866] shared_policy_node 4KB 4KB [ 3475.971477] numa_policy 7KB 7KB [ 3475.972063] trace_event_file 163KB 163KB [ 3475.972657] ftrace_event_field 280KB 280KB [ 3475.973254] pool_workqueue 40KB 40KB [ 3475.973855] task_group 16KB 16KB [ 3475.974459] mm_struct 339KB 378KB [ 3475.975036] vmap_area 181KB 196KB [ 3475.975660] page->ptl 206KB 322KB [ 3475.976255] kmemleak_scan_area 211KB 211KB [ 3475.978060] kmemleak_object 138585KB 156211KB [ 3475.978685] kmalloc-8k 4864KB 5024KB [ 3475.979288] kmalloc-4k 7376KB 8096KB [ 3475.979908] kmalloc-2k 5140KB 6784KB [ 3475.980527] kmalloc-1k 2586KB 3744KB [ 3475.981141] kmalloc-512 2448KB 3648KB [ 3475.981747] kmalloc-256 1288KB 1376KB [ 3475.982331] kmalloc-192 752KB 752KB [ 3475.982944] kmalloc-128 524KB 584KB [ 3475.983564] kmalloc-96 339KB 552KB [ 3475.984180] kmalloc-64 864KB 1200KB [ 3475.984801] kmalloc-32 737KB 848KB [ 3475.985389] kmalloc-16 364KB 364KB [ 3475.985979] kmalloc-8 321KB 326KB [ 3475.986601] kmem_cache_node 47KB 47KB [ 3475.987188] kmem_cache 75KB 75KB [ 3475.987792] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=/,mems_allowed=0,global_oom,task_memcg=/system.slice/ssh.service,task=sshd,pid=17991,uid=0 [ 3475.990157] Out of memory (oom_kill_allocating_task): Killed process 17991 (sshd) total-vm:1024kB, anon-rss:4kB, file-rss:0kB, shmem-rss:0kB, UID:0 pgtables:20kB oom_score_adj:0 [ 3476.004516] systemd-journal invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=-250 [ 3476.005800] CPU: 1 PID: 102 Comm: systemd-journal Not tainted 5.10.194 #1 [ 3476.006577] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3476.007511] Call Trace: [ 3476.007820] dump_stack+0x107/0x167 [ 3476.008235] dump_header+0x106/0x65e [ 3476.008659] oom_kill_process.cold+0x10/0x15 [ 3476.009159] out_of_memory+0x1149/0x1440 [ 3476.009623] ? oom_killer_disable+0x280/0x280 [ 3476.010135] ? mutex_trylock+0x237/0x2b0 [ 3476.010601] ? __alloc_pages_slowpath.constprop.0+0xb0e/0x2130 [ 3476.011267] __alloc_pages_slowpath.constprop.0+0x1b25/0x2130 [ 3476.011934] ? lock_acquire+0x117/0x470 [ 3476.012381] ? warn_alloc+0x190/0x190 [ 3476.012831] __alloc_pages_nodemask+0x51d/0x600 [ 3476.013361] ? __alloc_pages_slowpath.constprop.0+0x2130/0x2130 [ 3476.014053] ? find_get_entry+0x2c8/0x740 [ 3476.014562] alloc_pages_current+0x187/0x280 [ 3476.015078] __page_cache_alloc+0x2d2/0x360 [ 3476.015583] pagecache_get_page+0x2c7/0xc80 [ 3476.016098] filemap_fault+0x177d/0x2210 [ 3476.016577] ? read_cache_page_gfp+0x30/0x30 [ 3476.017096] ? count_memcg_event_mm.part.0+0x10f/0x2f0 [ 3476.017710] ? lock_downgrade+0x6d0/0x6d0 [ 3476.018204] ext4_filemap_fault+0x87/0xc0 [ 3476.018684] __do_fault+0x113/0x410 [ 3476.019120] handle_mm_fault+0x1ce9/0x3500 [ 3476.019616] ? find_held_lock+0x2c/0x110 [ 3476.020092] ? __pmd_alloc+0x5e0/0x5e0 [ 3476.020554] ? vmacache_find+0x55/0x2a0 [ 3476.021022] do_user_addr_fault+0x56e/0xc60 [ 3476.021531] exc_page_fault+0xa2/0x1a0 [ 3476.021986] ? asm_exc_page_fault+0x8/0x30 [ 3476.022486] asm_exc_page_fault+0x1e/0x30 [ 3476.022961] RIP: 0033:0x7fa31664a1e0 [ 3476.023391] Code: 48 83 80 e8 00 00 00 01 66 90 48 8b 44 24 18 48 8b 4c 24 08 48 83 c0 01 48 89 01 31 c0 e9 14 ff ff ff 0f 1f 84 00 00 00 00 00 <4d> 89 74 df 18 eb d9 66 0f 1f 84 00 00 00 00 00 4c 8d 05 f9 cd 06 [ 3476.025511] RSP: 002b:00007ffc078d51a0 EFLAGS: 00010287 [ 3476.026131] RAX: 0000000000004a0a RBX: 000000000000369d RCX: 00007fa3166b7320 [ 3476.026958] RDX: 00007fa3166b6d4c RSI: 00007ffc078d5148 RDI: 00007fa3153d7470 [ 3476.027780] RBP: 00005592d5243790 R08: 0000000000025068 R09: 000000000052a470 [ 3476.028607] R10: 0000000000000002 R11: 0000000000638d3a R12: 000000000052a470 [ 3476.029430] R13: 00007ffc078d51c8 R14: 0000000000a3ce68 R15: 00007fa3153d7470 [ 3476.030331] Mem-Info: [ 3476.030641] active_anon:58 inactive_anon:4350 isolated_anon:0 [ 3476.030641] active_file:163 inactive_file:106 isolated_file:3 [ 3476.030641] unevictable:0 dirty:16 writeback:0 [ 3476.030641] slab_reclaimable:8768 slab_unreclaimable:59533 [ 3476.030641] mapped:8871 shmem:106 pagetables:301 bounce:0 [ 3476.030641] free:3871 free_pcp:42 free_cma:0 [ 3476.034122] Node 0 active_anon:232kB inactive_anon:17400kB active_file:652kB inactive_file:424kB unevictable:0kB isolated(anon):0kB isolated(file):12kB mapped:35400kB dirty:64kB writeback:0kB shmem:424kB writeback_tmp:0kB kernel_stack:2624kB all_unreclaimable? no [ 3476.036781] Node 0 DMA free:6484kB min:48kB low:60kB high:72kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3476.039791] lowmem_reserve[]: 0 1616 1616 1616 [ 3476.040336] Node 0 DMA32 free:9000kB min:17404kB low:19056kB high:20708kB reserved_highatomic:0KB active_anon:484kB inactive_anon:17736kB active_file:560kB inactive_file:620kB unevictable:0kB writepending:148kB present:2080640kB managed:1660496kB mlocked:0kB pagetables:1204kB bounce:0kB free_pcp:464kB local_pcp:140kB free_cma:0kB [ 3476.043655] lowmem_reserve[]: 0 0 0 0 [ 3476.044124] Node 0 DMA: 1*4kB (U) 0*8kB 1*16kB (U) 0*32kB 1*64kB (U) 0*128kB 1*256kB (U) 0*512kB 0*1024kB 1*2048kB (M) 1*4096kB (M) = 6484kB [ 3476.045730] Node 0 DMA32: 665*4kB (UME) 271*8kB (ME) 140*16kB (UME) 58*32kB (UME) 6*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 9308kB [ 3476.047581] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3476.048756] 218 total pagecache pages [ 3476.049244] 0 pages in swap cache [ 3476.049745] Swap cache stats: add 0, delete 0, find 0/0 [ 3476.050497] Free swap = 0kB [ 3476.050923] Total swap = 0kB [ 3476.051292] 524158 pages RAM [ 3476.051732] 0 pages HighMem/MovableOnly [ 3476.052279] 105057 pages reserved [ 3476.052835] Unreclaimable slab info: [ 3476.053680] Name Used Total [ 3476.054476] pid_3 7KB 7KB [ 3476.055201] pid_2 74KB 93KB [ 3476.055914] IEEE-802.15.4-MAC 63KB 63KB [ 3476.056706] IEEE-802.15.4-RAW 63KB 63KB [ 3476.057400] p9_req_t 8KB 8KB [ 3476.058130] fib6_nodes 28KB 28KB [ 3476.058858] ip6_dst_cache 41KB 41KB [ 3476.059562] PINGv6 31KB 31KB [ 3476.060263] RAWv6 378KB 378KB [ 3476.060988] UDPLITEv6 62KB 62KB [ 3476.061753] UDPv6 248KB 248KB [ 3476.062557] tw_sock_TCPv6 7KB 7KB [ 3476.063255] TCPv6 62KB 62KB [ 3476.063991] scsi_sense_cache 4KB 4KB [ 3476.064724] sd_ext_cdb 3KB 3KB [ 3476.065444] virtio_scsi_cmd 16KB 16KB [ 3476.066154] sgpool-128 59KB 59KB [ 3476.066795] sgpool-64 63KB 63KB [ 3476.067414] sgpool-32 236KB 236KB [ 3476.068054] sgpool-16 142KB 142KB [ 3476.068691] sgpool-8 82KB 82KB [ 3476.069316] io_kiocb 30KB 45KB [ 3476.069953] mqueue_inode_cache 62KB 62KB [ 3476.070614] nfs_commit_data 15KB 15KB [ 3476.071237] nfs_write_data 47KB 47KB [ 3476.071873] jbd2_inode 7KB 7KB [ 3476.072514] ext4_system_zone 7KB 7KB [ 3476.073136] ext4_io_end_vec 7KB 7KB [ 3476.073813] ext4_bio_post_read_ctx 15KB 15KB [ 3476.074650] kioctx 31KB 31KB [ 3476.075412] aio_kiocb 3KB 3KB [ 3476.076051] dnotify_mark 3KB 3KB [ 3476.076689] dnotify_struct 3KB 3KB [ 3476.077299] dio 46KB 46KB [ 3476.077989] bio-2 4KB 4KB [ 3476.078665] fasync_cache 7KB 7KB [ 3476.079285] pid_namespace 7KB 7KB [ 3476.079915] posix_timers_cache 7KB 7KB [ 3476.080563] rpc_buffers 31KB 31KB [ 3476.081181] rpc_tasks 3KB 3KB [ 3476.081880] UNIX 280KB 352KB [ 3476.082689] ip4-frags 7KB 7KB [ 3476.083491] UDP-Lite 63KB 63KB [ 3476.084090] tcp_bind_bucket 8KB 8KB [ 3476.084725] inet_peer_cache 4KB 4KB [ 3476.085343] xfrm_state 32KB 32KB [ 3476.086052] ip_fib_trie 8KB 8KB [ 3476.086694] ip_fib_alias 15KB 15KB [ 3476.087298] ip_dst_cache 60KB 60KB [ 3476.087926] PING 31KB 31KB [ 3476.088552] RAW 290KB 312KB [ 3476.089171] UDP 220KB 283KB [ 3476.089892] tw_sock_TCP 15KB 15KB [ 3476.090681] request_sock_TCP 7KB 7KB [ 3476.091457] TCP 60KB 60KB [ 3476.092187] hugetlbfs_inode_cache 30KB 30KB [ 3476.093031] bio-1 11KB 11KB [ 3476.093762] eventpoll_pwq 23KB 23KB [ 3476.094388] eventpoll_epi 63KB 63KB [ 3476.095101] inotify_inode_mark 46KB 46KB [ 3476.095732] request_queue 60KB 60KB [ 3476.096347] blkdev_ioc 41KB 41KB [ 3476.096977] bio-0 336KB 336KB [ 3476.097609] biovec-max 714KB 986KB [ 3476.098345] biovec-64 441KB 441KB [ 3476.098968] biovec-16 67KB 67KB [ 3476.099593] user_namespace 31KB 31KB [ 3476.100206] uid_cache 8KB 8KB [ 3476.100832] dmaengine-unmap-2 4KB 4KB [ 3476.101454] audit_buffer 7KB 7KB [ 3476.102184] skbuff_fclone_cache 120KB 120KB [ 3476.102979] skbuff_head_cache 303KB 303KB [ 3476.103611] file_lock_cache 74KB 74KB [ 3476.104219] file_lock_ctx 7KB 7KB [ 3476.104848] fsnotify_mark_connector 24KB 24KB [ 3476.105537] net_namespace 132KB 172KB [ 3476.106150] task_delay_info 127KB 127KB [ 3476.106776] taskstats 100KB 100KB [ 3476.107547] proc_dir_entry 445KB 472KB [ 3476.108273] pde_opener 31KB 31KB [ 3476.108967] seq_file 41KB 56KB [ 3476.109594] sigqueue 86KB 86KB [ 3476.110217] shmem_inode_cache 1249KB 1320KB [ 3476.110862] kernfs_iattrs_cache 239KB 239KB [ 3476.111679] kernfs_node_cache 5697KB 5742KB [ 3476.112289] mnt_cache 244KB 244KB [ 3476.112938] filp 691KB 1425KB [ 3476.113559] names_cache 2125KB 2350KB [ 3476.114179] hashtab_node 274KB 274KB [ 3476.114859] ebitmap_node 1149KB 1149KB [ 3476.115553] avtab_node 4976KB 4976KB [ 3476.116289] avc_node 35KB 35KB [ 3476.117066] lsm_inode_cache 2647KB 3134KB [ 3476.117816] lsm_file_cache 141KB 204KB [ 3476.118556] key_jar 39KB 39KB [ 3476.119162] uts_namespace 15KB 15KB [ 3476.119901] nsproxy 19KB 19KB [ 3476.120545] vm_area_struct 1136KB 1456KB [ 3476.121149] fs_cache 60KB 68KB [ 3476.121776] files_cache 234KB 270KB [ 3476.122401] signal_cache 287KB 494KB [ 3476.123025] sighand_cache 259KB 360KB [ 3476.123656] task_struct 1122KB 1653KB [ 3476.124989] cred_jar 96KB 184KB [ 3476.126328] anon_vma_chain 256KB 366KB [ 3476.127650] anon_vma 121KB 183KB [ 3476.128971] pid 50KB 63KB [ 3476.130383] Acpi-Operand 144KB 178KB [ 3476.131699] Acpi-ParseExt 23KB 23KB [ 3476.133007] Acpi-Parse 59KB 75KB [ 3476.134407] Acpi-State 169KB 185KB [ 3476.135635] Acpi-Namespace 24KB 24KB [ 3476.136753] shared_policy_node 4KB 4KB [ 3476.138033] numa_policy 7KB 7KB [ 3476.139323] trace_event_file 163KB 163KB [ 3476.140509] ftrace_event_field 280KB 280KB [ 3476.141654] pool_workqueue 40KB 40KB [ 3476.142922] task_group 16KB 16KB [ 3476.144189] mm_struct 339KB 378KB [ 3476.145451] vmap_area 181KB 196KB [ 3476.146716] page->ptl 206KB 322KB [ 3476.147977] kmemleak_scan_area 211KB 211KB [ 3476.150481] kmemleak_object 138715KB 156211KB [ 3476.151697] kmalloc-8k 4864KB 5024KB [ 3476.152915] kmalloc-4k 7432KB 8096KB [ 3476.154305] kmalloc-2k 5140KB 6784KB [ 3476.155600] kmalloc-1k 2586KB 3744KB [ 3476.156825] kmalloc-512 2454KB 3648KB [ 3476.157946] kmalloc-256 1288KB 1376KB [ 3476.159161] kmalloc-192 752KB 752KB [ 3476.160380] kmalloc-128 524KB 584KB [ 3476.161596] kmalloc-96 339KB 552KB [ 3476.162759] kmalloc-64 864KB 1200KB [ 3476.163963] kmalloc-32 737KB 848KB [ 3476.165149] kmalloc-16 364KB 364KB [ 3476.166284] kmalloc-8 321KB 326KB [ 3476.167486] kmem_cache_node 47KB 47KB [ 3476.168632] kmem_cache 75KB 75KB [ 3476.169822] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=/,mems_allowed=0,global_oom,task_memcg=/system.slice/systemd-journald.service,task=systemd-journal,pid=102,uid=0 [ 3476.174070] Out of memory (oom_kill_allocating_task): Killed process 102 (systemd-journal) total-vm:40072kB, anon-rss:924kB, file-rss:0kB, shmem-rss:4kB, UID:0 pgtables:104kB oom_score_adj:-250 [ 3476.294876] systemd[1]: ssh.service: A process of this unit has been killed by the OOM killer. [ 3476.305872] systemd[1]: systemd-journald.service: Main process exited, code=killed, status=9/KILL [ 3476.320723] systemd[1]: systemd-journald.service: Failed with result 'oom-kill'. [ 3476.349482] systemd[1]: systemd-journald.service: Consumed 9.136s CPU time. [ 3476.356571] systemd[1]: Started Load/Save RF Kill Switch Status. [ 3476.362255] systemd[1]: systemd-udevd.service: Failed with result 'oom-kill'. [ 3476.374838] systemd[1]: systemd-udevd.service: Consumed 1min 16.642s CPU time. [ 3476.383211] systemd[1]: ssh.service: Control process exited, code=killed, status=9/KILL [ 3476.384945] systemd[1]: ssh.service: Failed with result 'oom-kill'. [ 3476.397589] systemd[1]: Failed to start OpenBSD Secure Shell server. [ 3476.401333] systemd[1]: systemd-journald.service: Scheduled restart job, restart counter is at 1. [ 3476.403381] systemd[1]: systemd-udevd.service: Scheduled restart job, restart counter is at 1. [ 3476.448752] systemd[1]: Stopping Flush Journal to Persistent Storage... [ 3476.455159] systemd[1]: Stopped Rule-based Manager for Device Events and Files. [ 3476.457214] systemd[1]: systemd-udevd.service: Consumed 1min 16.642s CPU time. [ 3476.518874] systemd[1]: Starting Rule-based Manager for Device Events and Files... [ 3476.524667] systemd[1]: ssh.service: Scheduled restart job, restart counter is at 2. [ 3476.526581] systemd[1]: Stopped OpenBSD Secure Shell server. [ 3476.623028] systemd[1]: Starting OpenBSD Secure Shell server... [ 3476.738794] systemd[1]: systemd-journal-flush.service: Succeeded. [ 3476.750495] systemd[1]: Stopped Flush Journal to Persistent Storage. [ 3476.784205] systemd[1]: Stopped Journal Service. [ 3476.791002] systemd[1]: systemd-journald.service: Consumed 9.136s CPU time. [ 3476.846023] systemd[1]: Starting Journal Service... [ 3477.147876] systemd-journald[18001]: File /var/log/journal/7e681e5076844de4a5cfa8606a84b008/system.journal corrupted or uncleanly shut down, renaming and replacing. [ 3477.155897] systemd[1]: Started OpenBSD Secure Shell server. [ 3477.287391] systemd[1]: Started Rule-based Manager for Device Events and Files. [ 3477.427985] systemd[1]: Stopped target Bluetooth. [ 3477.907401] systemd[1]: Started Journal Service. [ 3477.994605] systemd-journald[18001]: Received client request to flush runtime journal. [ 3482.306685] systemd-rfkill (17987) used greatest stack depth: 23312 bytes left VM DIAGNOSIS: 20:28:42 Registers: info registers vcpu 0 RAX=0000000000000000 RBX=0000000000000000 RCX=ffffffff81f314c3 RDX=00000000000001f2 RSI=ffffffff81f314d1 RDI=0000000000000007 RBP=00000000000101f2 RSP=ffff88804028f010 R8 =0000000000000000 R9 =0000000000006d2c R10=0000000000010000 R11=0000000000000001 R12=ffff88800f508058 R13=ffff88800f508050 R14=ffff88800f508048 R15=ffff88800f508060 RIP=ffffffff81f314d7 RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 00000000 00000000 DS =0000 0000000000000000 00000000 00000000 FS =0000 00007faca3590900 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007faca36690f0 CR3=0000000049b06000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=ffffffffffffffff00ffffffffffffff XMM02=2e325f4342494c4700352e322e325f43 XMM03=000000000000004700352e322e325f43 XMM04=4342494c4700362e322e325f4342494c XMM05=00007faca39a400000007faca39a58c0 XMM06=00007faca39a52f000007faca3b0a950 XMM07=00007faca39a4cf000007faca39a4760 XMM08=00007faca39a400000007faca3b0a950 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000000 RBX=ffffea0000f91f00 RCX=ffffffff815d3074 RDX=ffff888009239a40 RSI=0000000000000008 RDI=ffffea0000f91f00 RBP=00000000f0000080 RSP=ffff8880092679e0 R8 =0000000000000000 R9 =ffffea0000f91ec7 R10=00000000f0000000 R11=0000000000000001 R12=ffffea0000f91f30 R13=ffff888009267d00 R14=000000000003e47c R15=dffffc0000000000 RIP=ffffffff816c1254 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000557ba4ca9280 CR3=000000004e316000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=000000ff000000000000000000000000 XMM03=65530073746e6576652e79726f6d656d XMM04=0000557ba4c85f700000557ba4c313a0 XMM05=ffff0002010002020000000400000000 XMM06=720063310065006563697665642e3269 XMM07=00000000000000000000000000000000 XMM08=65784500657250747261745363657845 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000200000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000