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", 0x1000}, {&(0x7f0000007d80)="fed8057a7a04bf6e4c399e2287563d649f919acb2b7ac351622645c67edf501bf5b0a4048af1c5030f5aacb75121227db7f5dad5b71acedaebb66bc2c3d627151ffdfe0701bf76547a12b042f22123fdca7d1876b51bbee9d4bfda9bf72366fbc5f1654bcfc1ab60328c60f1fb26a23c70cb47d4b5e9e992a8de647aeadb1681e73d602e611d421a3d8276222d2c604708c997a141c2d815fc0c83643c6807d7353b37eb7e4ca4cfe746ffbd67912ecb61927e86240ccf1d0eaaabefe90459fc173c2ca73c584f77762be4ed6b33fcbc39d7c62e291f57863f68111120c838405f4725506c", 0xe5}, {&(0x7f0000007e80)="6ae585766f1a399825d4f30fc26314d827edb7a972", 0x15}], 0x3, &(0x7f0000007f00)=[{0x50, 0x84, 0x4, "872f0787303897651f98d81b804d5c6c14ad9503f192af3226fb51e7acaf74e597adbd27626a11aae8b1261d7e8362842ab25b8dd63eeb6dcb6264650a80"}], 0x50}}, {{&(0x7f0000007f80)=@l2tp6={0xa, 0x0, 0xfc, @remote, 0x4049, 0x3}, 0x80, &(0x7f0000009680)=[{&(0x7f0000008000)="ed36ab9757e381019d68c6d4b115d132e4c0bac3722d711e", 0x18}, {&(0x7f0000008040)="c9d4af19e9fd00d1ce1ce3f7aff01a71effcf25b2f622e7dc22a437f1d2a643d0607719af12d75adaf033110ce91a0a76d5f9510b1269b02b69c2a4b3c452eb30408ad89123ecc193d7fa7982bc0053f41fd7fab3186e66a96653731589fa2f4c7a4fe6ce3ec465aebafd4849685b04e6badf8914f4488ac6b7f82b3c75c4a933af2288e1d848b2473072533bdbe26fc7c481c615600d6cdd677475575018d5f9d3f2e57bdf984664170e9b420ed12252dfd7b8d84f4d04db8bb11b2eb037e45c64717819ccf16e4bd30de22b6fad632c6ae0194d3dd7917c977cb8fdd0d027dbc4c4e387855ea0ba7de0d3ddb15908af83251edfe694f5df15ed5c2d11d93186bd93c069635f31b667ac34e949bca7a729e8ccae7c3e8b73d91e0ba1fc50f186ff6fdb2d284dc412d051c65a21bf5e1557dbd8c58db0135884bfb5476c956910cb82e57bc12592762a79850ed78b6fafbd9be9772a5e7ab7eb76983afaca842a06f5f9ded4bc369e1b9936492a0a76b8c69e5c045f8e853de4fec3d8c6ebbeb86562b44351e2bceab29e714e292bedd11c016355d3b9235cf62f1298cbad66229238574b1ce7702b1c4e27a51323a6525cb694eaf4439ec785391b2ec614d5a4b7e691e249a5fb6d22f2a2beb83285239d60a7a9575f7049b67a2dd656e9337d91308b43a4324b89ef97e52c016a5679d542469b9c5b257205574112e6dc5c3b1f4833999aede35f59f1bfc253c2e3d011c005a841998784518d65125d2863846d403f1d46829b147009b09bec47ce1eca2afe451a38d99c715a3cd569c795c07c9b7d5798f87998c6bccfdf2df902b43228a613b7ccc1c9a8f19b66372107fceabf3a7947377b5c862ae1973c91d973f93cb8fff1cc986932439b08ff6deae73fd03d6eebba698560f5fbbce2c15294a1b67dd6bd020e16bd67424591146c3e5bf4929732954cfb577fb1dea91f91760a9cfb7fb98380d67e9f63b1af427010924384c3bf69f249c4dd827389cb0b807440fb862ac46cb3655e2f28836166344626427ff20996a0bc19a609c8b6b0f80f6755eb51110fb2fe64ef4534d7542a7ccace2633d2cf4c7090995fe4093f2c02c81072d6afc96f006510600a382f585189d9c2a9afe56a8233b8d4bfc044de64769d6cf4e7ff22813907816c042392d3adb273a3cae3578d5527ee3e727728f59b6b63ec8ec78f7612e9e1a85f7fb04802820962f9733975edeae522ded831e5a75db6b7c2ab446a81ccdde83e18c8e3c469d13dc5ef78cb089dccb84d8342b308a5bb2f0f02ee35164d68424be22e2797223efc4f883890426629c100b429ca456bccf5ad5d3861efaaac992d49a87c046bd03bf0119c7fa4e88dcc260b46beee57d4424497e73898a6495f388360f328944d68e7bf2f41e69c585461428245b97c262925668cdfceb271b72ee9433056a262d2c13c2bf1261a0278eb29b0e101b5b279c2aa54858bbf5f64c9bdf702a4aa5a28c21cfc61b323d8a29f5bbcb8f933312219e9abd4b01a0fbdf33de61eefba41af3061eeca765508fbc27df8d52a494edec93ce8aece680eca8abd866129250641dfde217135e53da49c3f81804daad3a2fa7dc4b6daf0380d8653457224c4943942e71b4e1b1da915b64ce2f3d219740a175250c2f7ee07845e1dffde30503eb39897d99af4f56b5154f02446cdaae9fbbe09212a3bb8ad5ad8fd9ed904ceb3046109d3635386e74e729142d524f46dacc46953e00abdd7fba71d3b16ec5d338ebbca08dd3445891ab1cd3517610f415f770e6c86842c3d6cb09fae76e850becb7610bdfc819d5b914894f3e03bd65bf653a7aacb54d7b944e90bcc0475d5651c7c1c7f22080f392a705a22380e2ad52e8575725a90dba74a18c3a1e30b79354ac8baa5b58ac9d2c67efb3d4d64db0b52aee36053a9cb99e04fecfab393508d219e05bd89482e5c1809b6c05e71abfbb61b4eee869195ff75d3e4811b6a104473985500087fafbff85264b7bc1f91b98c3875684445ac89bd49492090a645bd3efd6edfa5eae62c7a0b77039b49a44ccd8b281dfc74e69dbac1154826d8d71dd37ee77f0f1510db7c330ae34636bb7675afb5746520217f15674b85073ef622238c4d245c7dc766257ee9d033bca77c429199ff2f1a9c97d50cefe4cc49affb90d7afaebefcbdfd3e10ea69e3e2a5466c18be82ada73e3678eaf110f84c1c025c07f0175fa3e293ef402fbaba5c4a27a9b4534507d8516e71add14d5acc4b93ccedb4b768e6e920188c9b096b6f21a25aa1459a74680c70f1afc23b93ffd7addc9edae4866dac34851a00ddfc6955ca4fcbf28b4938979325c5f0c96508dbc4cdd307a091aa7a488ed190ad8a5eab425e6d3439c0128f6da3364873a7765130f9fe273feea95ea84c2b322e4ad9f514867be61dae1df9b0b73791d83cb04ff62cabaca943d1b28b29fa529595c1ac8a085133ae5a0f4d2e61df788d181adaf4c96ccaf39f82d94725624a4f5720b3003975ed002c4a755bc4337ec81093fb5b14da6b34f41485edecd52126b27723abb9aa08d9da679a08c63bbfc36ea295b9a765ec11e6248e8cb91a2dd635eca9c8d6b55be0220d8bde4afc8b4697079fd8d373bd20894d616c104ed2f8be5a1dab1adb4a3b4b852445d0a83b01f1bc1ded287b5f421c01c39dc99693a2676a5bce017439a6395e26f12d80d60543d1de72366c3b24934871c2037ff828c79fde0a5a435552316d51b451427373a8f383e60b1902f9c489f545dc9e6395d87271b3efed5e7ae9aa433ee83925f5c19b6716b29c296f55cc7a11ca6df7e059d8bc06016b8a233ae9c1286f1e7b7e0fa61610126d514c2df9bf4580c687249ca9c4572d4ec51f494c0c86807e92eae5acedf20da85592fb1266ff573b470a01b4e0b8e64cf857b9daa240bef21d47ff8984f71aa11907eefb43163bc12ef5fa2a291b595cea41421793a3f3f4af35053c0edd5523e9b85de973a15d34cccf034e83d26a6d62dc4b15e54668f033af325e45ae72ba7a093809726256cb121ef4a70289f5d6fdfcf95a484c78baa78bfe837ca7c6019b994a1bf206415d3b80519df9882689b142fce4a6e37fe4bd42f51323aae80efabe491a8d6a40ec5beed2ca95de8750a37761c10af6e59eda0785b0105e42cac1d4e885dec848e907125f1765a6e2b52762a7fd6f9fe7bb276ce925ad79d9190c2bdda5225ff9ffbbf5dcaae8648d5697116ead67627bd93a2e9afddace45547ea3c8a7e458b1c2acedb4eac1746df3b5f3b0f4c32e36f91373ca51ab0d6482e63c396c65dc3b0197a3099c039d484e5f73173c19a4e5a44e3700d51ee278245079c41b5ec9164e33f655b84c4843322405f2d34537e4cbfcdd52fea9a8bcd59256f0d0f3c21b8a26e61655fa0f587b945460d20238ae069e80b18a50b9efe1f8e41187d6f1569680ed78a84c536d21e1bd96c5fa3cf2cc93d297f166ccfbd3ba3a906e50c73252dd7b9d12be3e86324a46337d506e127bfe4d9af0b7ce59d6a2cf89255ec49d89414171e17e21d28c610b330f86fc492efe5ae43d89ac132dd9babb29cf630fdfe3fefcc73007bd2e6b3d992f6973927d6354f96090e38d90406bab53e34400ef6f12a11cb1caaba3cf684e0bd6dc81d7b86e891bf1740097630bc02b068d8c2ed96d5c8657bc78feb61115fa94c4eaa67fa7592fbc25faa99a7d6cc671aa7b6cd8eae0d53c4c213d43a9c5d0a1ef47b929299343aa59e0a8d52f1869d2ac732bd60e8243b78fe5a52d4c31a311a2c438d2267fab5d04a06183835fa3e83e09cd0c98aada95ba16da233afbb53bcaf5f5cb96197775a17746da3fa71a774761bf8ba7211bd3d13a6eb0054075a4c9c765f20fd9e2c130f8f03b725fb5dfb739249ae2e49d7abd9547d39c19d161c78f35153fc4fe8944236e15bb173505c85984af5fe8ddb5b035c460d6af621d3f47cd12e90220621806b7dca4481699aa5ffe5c462f9f4f18443117a22cb64ad8e2dae6f4c2c16b04857d78b7fe2cd42fc598fa1785eec2d43937fa0b092fbafe48b39bb2930a0030c5751a83c6385a9eb496ac5c524184497c91caf91ad428fd73a59b63e8cba37190afe10c51aa2963a1e496ee1464b8184d969c8613eb88099586afa0503d511c12cbd156b8977f5cb46bdbebc27338a552ffd49acf6958cde248041d6db9cd0dde6753f7564a8e520939fc115e65cfc8e3ab4cdd12ec425c136e9ceea5cac480a6dcc5b0d64437b053fe4c1865c3e219ac9d549c4451ee8dcdc7b54c6d45576a9f8e3be523e0c2c85e10228dd81141e676052bbc8101620894fd6737415faab193fffef134f0394f921538bffbb06ee84a410e1021a884ac265e3bf746d75d98fee6f090c78b8ad852241c68e640e34d80e678bbb775291d4eb3f3ee450f9ae5f202e2b534c892bace2ca28879c301cd5f20b2a3b32fabed0c27eb95bce33511d9bd0d764cfe1839dce2c83c809a864f1560083f082876bb3b5a531ffa05d8b8afa0a26ca12a7914386ef40c26b7e9ca1ac8ecf7514d5c5a033403350b8ea9334efd7d41614113c43abb32f4f299f5ee4b121119d7f839c60b22639f5508bfa061b8ca6536f588b587f96d1f325d4aaa25d428f753f7e70be92624bbb3b2d8828b3020a4403c9ff84aca50502702ff6e34c2c927aa5fbbc8be29b64c055db2b92d4044c2c6f858d3c8209488531520d52053f53f76d9ca00a594250292bce167e875c35dc6015fcdd0b1312094b184f2e0c2731a6239530a1d7753e1576f9516ab96a19ff0cd4d72a1fe03dccc0acfc0aa62d992174207da87e105a4b8ebeb08853bd4faca4cda0bdb687e0b24fc0b7952e16f2a2c97d6fb04c3e79b0deb9f0bcc9e17f66bdc584c543571d90eccea01f0a9bbbb8c5c18b1c7c421970636e8af4f255ca32fabec10f0af8055769fc815d509e688159a3e8769d61f1bb0961b969e3c1e62b3f15bdbba920077f41d210d46fe3ede40cf0f1e4c2799cd5c93796d76072ad19ec344ab67c501e73efc683b826fcae01d98fa72305ee7be19f400cdd588ca1f7228a1b4f2ba4b14a1c516a6647a1d67af09546c32551f3a431795d7a1e604db73be9a1dfef1ac9ad674c69df54d1217bfb48f1d85860dae65ec2c24811cb7a6fb34f1b12a4ff53bf299560b1bc75322a162c5d2600925453c66cc53b099640e92408199ffc0a1016527d42559934c06935ef8f05a176fb4e28284fa50538236b5a770391f212ccdebe1392ff24559df7b84f996f04813b6e899a2dc14e35ee0741f16e6ee7a5cab6a17f447dff1d91fc2db98e848ec453d48aba1a1d2d27033863dc41b7a32129fb636e53106966b269b3abc97360da20a7ddcc5c0adf96aeff8c9d3378d4033c085366d842652fe8c2efb2d57df6afa0d65d82fa728ffa13c21215d352d6343da581fd24befe6a29207abfeace76649901d6175785f2edf545d27cedc55af7441979dc1cbabcaed58c36aba833413bd605dbf0741de15f162444facd9e7d5e634a1554a60e74a3461f6b70dbfdae08bfa89b552835b608a1a2afa369df30491886a5d3beca7b5d8dae85c51372e24c333be568fccab2cf10207f31cd9a19b37f476777565ccd36df46008b19da07302742d70f7d4c693e54a9cb8f7ab94f424dfc1a86a5d4eee7576228bf9aec7f42f158755207973b4fca36c9ce77450c6f77a3944150483320caccb5d28d8df51cd108b5532a1df1e9cc702f38710cca7d6b0d767eeb66a59a4e74c118bab0baee73", 0x1000}, {&(0x7f0000009040)="5acb982f62e380b1c2e075fc060ad3dfe04b11f87c6c66fb8c70b4c8ef46063a670780e5966936387b94ef7de4dad3e6ebc769e0d20235c461b03ff6cc0d510fb37d2d6ac7c2c18061258460afc6cb5fa99a1a9060efb4eb1dd28df93f028a2231fe9b159b69aa87bf06a15f52dcf905bb70d78d839137f6678e3023ed4900034edd2ac814c89827a4028dacfa9b884f48519cd34a0b68710a25faf39add0929bf672847a693951b9ebdd95bf051d838c13ac19c686bd628b67b4ba4951368dfc2ae6a2fd07c6b415f96f68f5943d6b7a7a0cbfbb9002558d418bb07bd9f", 0xde}, {&(0x7f0000009140)="5581578b2443b8637fa0c1fa901b47534f728ee085c0c9a7758d06ecf5a8a33f399c94a290652f86a15684a5141fbb5c59e9292c909c0f3550a4c9d091c5edfc0d721430df49a7b22f92dec353b4594bd06e334f4915ffacdb6e1025c1a730f0ca5d17e05e9f693c36b37bfe20732a5218ad152cb67597fe58d425370d49c5d239952d527304873ef407ca9ec0ffafe03069c43615289555356b3b6128f3518bae5dccd3560e24bbc186753d67261dbe0b8b00554b73405ae63d64b1d58cfd6c2ab0b2f78f05350f87845d3daf32af38340b6e67110370184cc599048ba7016d7843623e180e3f", 0xe7}, {&(0x7f0000009240)="632b3be727aa3d0bf7de56417eb442e32acb3eabd3825a6fdb1b3831f2f3edcc3b4f24172241b48b609d8bb05d926bafc803d29f9993bc8dc738ab153b82f7b8db03067b4d782e21f3f6ca50001b06e347dd1a66265398a9b45ff55f135441bf1c6c65d21536302d3de1e6b2d635a74b63e778a7df763cba3ba37f82860c7759da1e9b4093979664ac8ba1765a1af624271b75ffcef6ea4810f8ad6737777454db2f0aec2911e331129ab96e91f8f2bcf711a4fb66b76116ff2d6d4ea42945b34f16350f", 0xc4}, {&(0x7f0000009340)="8e30ce081a70d5fab852828e76d99aeb7553c317ccd565df47ed2a7d35359887ba11a1ac7a23079d81c35fc8d263aed34aa6d71198c377b9ac1875fe9163714405c6f4750e76ce380ab2ad2b3e3504d40520c0767de68042eeddc6538ef3241e2db9e783a93b18eee06618584ed78969fb32f333a64e1a6cc69f1adc0b61d35458f6320ed4cbb6cd9c4dee6be63dfce25df26f610bb09612963c8ab3d20ec71e9362b4854e332b10497dbc3849b96ab787b861249f1555d66846f303bffa2ee9cb9ac0644829fc997d45cfc63f7fcd332b063df1d0fdfc707bca3c3a315c28e01474a095bc9d881c3d256cf4f7e83684f862f2e3", 0xf4}, {&(0x7f0000009440)="8ad1804ac6fe463726946649426dfa7f9856d811bd6500a8760c6e8e6e7257a68876b773f6b9c9f24701a10938aeca2d3a047efa7343076f2db40d84a633b9170f6720845f78b394179780bc00a6eef8e2f40d41684f1c11ce11d81c029aca3754ad4719d348fc4190d55b6b34b7d8cdbea6a0b35251fb1dd5d12549ecb8b9c39d4c1e164b08860b95d86343f7a4be9bdf05ca2bc1dd79da17b6960e414edcb27a31c789d693907a07da3c49b1e0c0f2793d617b3686546836faaf9be6784220", 0xc0}, {&(0x7f0000009500)="a1d45a8b6ef618244412823281059e6c19939c53b6bbb00346d59fca21b475804b4a14b7aeef2722d08ef2ec04e0b858e4a36084f4d194746affa811df4738aa8a3f092d1864c1d949a4b996c80ceeb8f8f1a67483f26138e5cbc97971d97274735151fc970d23980f05c98d4ecbaf912d73c5afb43a57fa4f7170253e82163388e69c54eaa1404ec6f3372cacd40679c580c63014aa16c5", 0x98}, {&(0x7f00000095c0)="cf34ac320a42504668119fffe0e1377370c5f0a730d690ade3e8b6e3987238091db714acd01de888e982d8e673d1c40fc0564560ace6e8afb759553bb074dcba1b7847f87ac8bd244fbedfddab0c1db71c14bc2cdff3c70c986580289ab2c6976002e05703b50a2aab7396f0e13244229030005e64f1f0abe4f46a280b58ea609c9e48a4b84924f570a70fb1e3121aa15598bd0263ec318810990be19783dc3e88ff9a1d", 0xa4}], 0x9, &(0x7f0000009740)=[{0x108, 0x107, 0x7612, "e2d4f974e59f1d23fee9ba0e6c3153e2bbb8ebd45d4f8d229d2df4c513ef1e413bb2d11f30c214608adf03c5fdc995eccb5ecfed8fc8aff88f0b0ff8427ca8822880cfd3d8e20432312615f8b77d54513fc3c6fe56a91060085b0524678a8444c8a850efde1e0d8d4f548f19f83ba71b278f599f2aea58edd120023757bc92a64360f0f71636e56b19057d27d0be65e50b5f9b43cef1d6f8b11bcbb3fe6d5439e218da351dcfb8faada7e8ef70c20445b33bc44d283adb93ce6a9f641fa8800b550605488044bc39ceebfee62d7c1e74aff976b679cdcd6c03fca9fb7ca413d07a269dcf875ea6c02460f653d0ca858b3a7fc20218"}, {0x1010, 0x101, 0x5, "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"}, {0xe0, 0x6, 0x9, "44d0230052267812e1ddba2a00fc15021d2ba2e57ddcc50badbb4e75e849669246bcad6fc1e9dad7ae6a91a571ee99d7cec22124948f3401c3c9a1b1e5677e497aef72908d2db37bc8dae0920773ce13b0a8272820457ff5fb21abbee060bf819330333c9d1cb2a4e46a113a436b80df772a7a148cf7c45c8f025f05e3d34cd8874b37c2d86c7911b0db80d6631c94ad9d266b46c95669cc30ab5158016da42d8af2e843fabb55b7b24316589602bad413b991256cfb02a07977b87ea4dc4d0f71a1f83a7610c5422893"}, {0xb0, 0x117, 0x100, "570a25f615379ff1855dd28a9fb726808fdbec9f82efcb602a208bf2b8c947c924e0303caf660428597f55900cc4b527fb10bea923111da648a9306e73a032160400a59cb342cf59fb5b117dd309350753dd82a937b68c2f51f125d8952ed1664fe8e16093a59ebd54f07c19aa89d6bff293a4c5bb173f2062d2217331bdd650d157feeef1d53e8f60f5ea90baaaaa3aed1711b5d0a4c12a5fd471bd"}, {0x100, 0x11, 0x7, "30a92a5974c1a7631abdabfbd9adfd27a8751045704efc35cd4d460997bfdd8f0990a53e6af2c2b51bce3dd0d49304027937e450c0352ec07db10bcacf936ed89b413f16c5efac6f046479aeb37a10b1b88c82c9c945d2a5711c85e45272300e4d8ba0a5c1994fde240ca60b3a200ede3dac4b9a89ba2a3d5a4a5a2e85e688532a06cb5db5acb215cae80c33988ccab6e648c97472df1e2fcb1eca6c943abe2c184a534f338876367ee50ab6b21920231709cc1d9f349eab9ddedce73072d6922e4b32f5aab96fbced4fc218ef3e629fa501fc93a010de925e70d54b6e7a6babd7a5eba7a3447483e34e62b234"}, {0x98, 0x0, 0x20, "6f459ad25f2bb9ed28bca6901e2c573ff7e51e5756adcddcca80f81c95e63cf24ebf6ec57b5fe28e27bf8a34e2df896380c90fe47752e503d8a355e6911be2fa9bc339f18052e46239b97781f371ccdc3055f035e0ceb1441c20b74040033866c9c108b11380f385056509150107ab11ea2d36c0d349932be1393dcc2cdf19358dd8d6b78b7910"}], 0x1440}}, {{0x0, 0x0, &(0x7f000000ad80)=[{&(0x7f000000ab80)="fe25f9b0020d729c3f1f55e5dade1647d21e10cc8986aa500a6f9233573b166a1a953f9060f2fff5b2a7180b2a4f8ae8d19bd3d6f02facc850bf149d669fa73eebc52b2db9c986b261a1f2596cbde86283b7851230f2559fa467c8ff815223add594b9598194f4918b8951204e1c1616e5", 0x71}, {&(0x7f000000ac00)="4f084fe8fbe94acdafa4faf497ab40db4dc8440a15b7e83f19e27e254dfdbe8edfc77eeafb4b8b30bafc12c61ebdfce5e1633380929f03f1f9e0fd65a0b5d934d7c8fed54d917563cd8ee6a13cc51de8b3d4eec224140ec20d2a3517498dda4c1d1af791cefe5a6e759579e8a31ef612c49bb5ae3b2968954ad6581236d5f857f4c4f69d625223d01fa32f8ee1fbe7735ead6abb8ef2483132990abb317cd7047bd1a0e075da6195fb9fcdc2b6d783897b3d00ba02c3fc14fd2180e9108bb2c575b36530030032b8b0ece9dac7f5a879e12a50bba78d6b6037f05ad27c4610865c3fb00f058ca7bd", 0xe8}, {&(0x7f000000ad00)="9a774da09245c87e20558baf9174f33242dca0b384c515ceb2bea3d3a56f82a58c4d648ca49f02216f0b13f217ea4ed999a035891cc27d3a1a9c44031b34c39ceee23a4d81a7cf05e18aa14d87c45b0df0597d2dd2304fde9f2b6a44ef989c2571e983043ce70c8117c6", 0x6a}], 0x3, &(0x7f000000adc0)=[{0x30, 0x10b, 0xdf, "7b123ccb689d49626f8884bf6a7471a45eaac8db67922a6025"}, {0x60, 0x1, 0x6, "271f7fb9389b9a55c267d83c4883662bc72606354b70dc96abac502dbd9ff12b02a8b48d7c870eac2cf4b0b16e92b9f7814c3cdfd1fa1da044912c5081ae87c9611e122288942176dffb3586afc32fe1"}], 0x90}}], 0x7, 0x8000004) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wNd}G=', @ANYRESHEX=r0, @ANYBLOB=',\x00']) (async) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/devices/pnp0', 0x80104, 0x108) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x19, 0xb, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7}, [@map_idx={0x18, 0x2, 0x5, 0x0, 0xc}, @initr0={0x18, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x380}, @exit, @cb_func={0x18, 0x5, 0x4, 0x0, 0xffffffffffffffff}, @func={0x85, 0x0, 0x1, 0x0, 0x1}]}, &(0x7f0000000080)='GPL\x00', 0x1, 0x8c, &(0x7f0000000100)=""/140, 0x41000, 0x2, '\x00', 0x0, 0x1b, r1, 0x8, &(0x7f00000001c0)={0x4, 0x5}, 0x8, 0x10, &(0x7f0000000200)={0x1, 0x3, 0xffffffff, 0x1f}, 0x10, 0x0, r3, 0x0, &(0x7f0000000300)=[0xffffffffffffffff]}, 0x80) 00:11:52 executing program 2: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0xcf1d023ba33169ba, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, 0x0, 0x400, 0x70bd26, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x841}, {0x6, 0x11, 0x7613}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x24048886) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x7}}, './file0\x00'}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) r5 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) sendto$inet6(r5, &(0x7f0000000480)="948682dc89a351008eca6cac1590e4c56e18521b8bc260b409d36bb5252d80bd9ca0262a3a3977eb716ccfdfce1209a5b4dcbd816925542ea0d08b55c9c36589736c4359a61e9700dd8bfb3a977563a7d75edd882acbdaba4bea78878eef9e2fbda0d51551f1d06435a615a4efabce27703151105fcb57d11926eab481f2ed401e4c656289d5cde0f53818ee9c4ad90ea0f1913e3f707adf386b20cce06e030aeb06b85d9195f273270e7ecba4fc6d5ff565dec77d696c2b3046009004fcf1a8d3fc", 0xc2, 0x40005, &(0x7f0000000580)={0xa, 0x4e24, 0x20, @empty, 0x7}, 0x1c) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000440)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x34, r4, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_EXTENDED_ADDR={0xc}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan4\x00'}]}, 0x34}}, 0x0) sendmsg$IEEE802154_LLSEC_ADD_KEY(r2, &(0x7f0000000440)={&(0x7f0000000340), 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x64, 0x0, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0xff}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_COMMANDS={0x24, 0x32, "51821ddd22bad97f39265018e66780621d0fc6e0bcdda8cfc79cc855ce45b081"}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x6}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r7}]}, 0x64}, 0x1, 0x0, 0x0, 0x24004001}, 0x4000090) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x5c, r8, 0x8, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x8}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}, @NL80211_ATTR_SCAN_SSIDS={0x1c, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ibss_ssid}]}, @NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x6}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x4810) 00:11:52 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x5, 0x5}}}, 0x90) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {}, 0x5, 0x5}}}, 0x90) 00:11:52 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x5, 0x5}}}, 0x90) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {}, 0x5, 0x5}}}, 0x90) 00:11:52 executing program 2: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0xcf1d023ba33169ba, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, 0x0, 0x400, 0x70bd26, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x841}, {0x6, 0x11, 0x7613}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x24048886) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x7}}, './file0\x00'}) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) (async) r5 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) (async) sendto$inet6(r5, &(0x7f0000000480)="948682dc89a351008eca6cac1590e4c56e18521b8bc260b409d36bb5252d80bd9ca0262a3a3977eb716ccfdfce1209a5b4dcbd816925542ea0d08b55c9c36589736c4359a61e9700dd8bfb3a977563a7d75edd882acbdaba4bea78878eef9e2fbda0d51551f1d06435a615a4efabce27703151105fcb57d11926eab481f2ed401e4c656289d5cde0f53818ee9c4ad90ea0f1913e3f707adf386b20cce06e030aeb06b85d9195f273270e7ecba4fc6d5ff565dec77d696c2b3046009004fcf1a8d3fc", 0xc2, 0x40005, &(0x7f0000000580)={0xa, 0x4e24, 0x20, @empty, 0x7}, 0x1c) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000440)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x34, r4, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_EXTENDED_ADDR={0xc}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan4\x00'}]}, 0x34}}, 0x0) sendmsg$IEEE802154_LLSEC_ADD_KEY(r2, &(0x7f0000000440)={&(0x7f0000000340), 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x64, 0x0, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0xff}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_COMMANDS={0x24, 0x32, "51821ddd22bad97f39265018e66780621d0fc6e0bcdda8cfc79cc855ce45b081"}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x6}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r7}]}, 0x64}, 0x1, 0x0, 0x0, 0x24004001}, 0x4000090) (async) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x5c, r8, 0x8, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x8}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}, @NL80211_ATTR_SCAN_SSIDS={0x1c, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ibss_ssid}]}, @NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x6}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x4810) 00:11:52 executing program 3: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000800000/0x800000)=nil, &(0x7f0000e1f000/0x2000)=nil, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240), 0x0) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf0d]}, 0x8) 00:11:52 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x5, 0x5}}}, 0x90) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {}, 0x5, 0x5}}}, 0x90) 00:11:52 executing program 5: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0xe, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="1802000000000000000000000000000061106000"/32], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) r0 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) (async) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56) (async) sendmmsg(r2, &(0x7f000000ae80)=[{{&(0x7f00000004c0)=@sco={0x1f, @none}, 0x80, &(0x7f0000000b00)=[{&(0x7f0000000540)="6bee62773073765a63f990bb72c4c0f8a6e548cc20baae0268cbcb7aad85c8123dcafbd69eed710ead4ef16a1a8bf36c244809b16030cef686c98f6fb60a7989813fbb3e973d3e24846828e1", 0x4c}, {&(0x7f00000003c0)="b156be0912326353c141becee5b533f41425e59bf10de7ee8e99ff74e6", 0x1d}, {&(0x7f00000005c0)="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", 0xfa}, {&(0x7f00000006c0)="df5848719a5fd9c6f921a9404f82f234c516da9a4e199b1317c0a7b3789380ace5e3d8b987e16fdc79699a18dc155b67232a85d092979f75ff8d612be188c81b5b9762b82212fbfa47606b72ae", 0x4d}, {&(0x7f0000000440)="6f3d12924b890672ebb1ec1c35e915", 0xf}, {&(0x7f0000000740)="56b44f7e080de9ba414a7e551c48658c3cbd795708145257ab25a72f6f3c6717b490ce110c05cce04c83ec59044ce85ec2d59e71c2503102f909718d3def89154033392bde1049398fb2f6b35e42d183600a690c279a7415e0d3f46baa56f76d954e21857b553c0f8faa0248a5cb241696afba3ee64867b45d4130dcd8ea8f519a", 0x81}, {&(0x7f0000000800)="e46f659978583f11ffa91a2e752c7933ee07d1da8cf403658032cb10c78c477db1ad4bf64f5816c42258d2a76a853c95", 0x30}, {&(0x7f0000000840)="6b2f578f41ed0cc0b982fee257cafb44e6b72d7d080336b65f6d5af842200719b88e1f8004f7cf9441dcdc8e9caad2d8534fa2e9af6e7e4f50ab879dbe0409e236ee057123de26d16a1b6218987f2cb78c274aec14d9f40b27de228a759d9b6a01548ae2d96de7be9741fb9f9497760ea29ceb65a363dff2c1793cb0a2421f6e1ee7d9bb40da313c7f1a1e947a05c7ea7299b43cb0afd16fcd459127e6aedf49e83a349528ff68b301408e4b70b9357820131d97", 0xb4}, {&(0x7f0000000900)="0ede297dbd517c4be4b627a88d8c20e171f5cb7428d130282e28a8df9e4bc90e0e071afce72fec300cd2e3f03f744d2703ba876209cc3a16455c733159687c83d9daafa26e218a3bc22a1e06e06499d38560b76f553dc54dfe82ca10b6cc08ba064a4fcfaa3887ebc9c4509e43f690065f78ea3ed1cfa08439a9c263e4410b469f7ba211c11b2cf21ec89e484a94fc4ed697c246e77784fd2a8b773e876358a43cab04697bb3ab97ed5f409fde6cc0bfd7e4e06504f9511604051931a03d4191114468d3933f09960370cd7d742dbfbf77547a9c4eab9c", 0xd7}, {&(0x7f0000000a00)="9096d29e50496e4e1266a79becf078d78ece9e52466952c682941030f398998b33b98ab27164f4f0beb9e553850b8c2346ba4c06da8eefc26ef78ec957492b313a130292d9094033cb6ae6ea22612b28311a6ddc3a52244e3a5328c53f366a9b84daa39eb71eab63c4f06e3166ae2c252f689d03be74f16e28d027ea76c74b51d5214e8530bdea1b0f72ad3c852d015cc4fbec8fb7980ba18f93008fa7ed85421c90b043a0ab34d4a46471bfd7715fc59ec5c96474d6566607ea8e72c978e96e20b50c6cedcff5401cfedc1def38685ae3077f7570195ebfa9e7", 0xda}], 0xa}}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000bc0)="bda8e2a3771e453ed9a824016bce93249a36970dd6d2ed21f66f3e11e2ea5213b72de3ab0e0f23dc175a53b57fc16edf01b9b0c521b38ab02afe27c7a37d9f227be37846529031e90c09adcb5e99ee161592f89930fc36ec5d4e7cc994ad280fab5eafe6cc5068fe1f9ad0e8c568130af553dcc315895a515fe4ebb20dd4c4dd6eca1cadaa1f69e06239d7a4", 0x8c}, {&(0x7f0000000c80)="d01902a2066b20ebf20f612766dece4042c606c3dbcd531aece622a3355a7d72fa63ad6f67a1b3b5903843de64b355aa3c6346b59dc59f269e76c2edbfb4bf68325c05fd6aa365bc37ae31abd61ccdd2f7f72d46e84db10608760b19ae8ba307740119a640722fadb0723ba16aeebb326a99d4882f7763ad8e541f493178b4ce43d0b438e803ef098410a848a83a1491f608db42deac5175ffe2129c3030aa889a5e4c2a31", 0xa5}], 0x2, &(0x7f0000000d80)=[{0x28, 0x115, 0x100, "5502cdb8f32cdeaabfb402bd3f00e7a4371e"}, {0x1010, 0x102, 0x0, "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"}, {0x98, 0x102, 0x7fffffff, "6bab958955407b2135008ac6616f19d333803e47dfcd1daf14d94fb1e846747adeb45a8db2bb4a58d7a6eddbf1b8b469d6ffc204f98a62c7540c5d923d0d0091642487a46b1b2601e0ce63eb2c13ec3749854bae3c5b47af178ac9f2fd0f47b8c5827299f75ec15f4f4739fda4785f9889eef37b8bdab8384a05b6a3ea90ca888a74d510eb5d56"}, {0x88, 0x7a, 0x0, "6f19af8936760c0fe3dd7223304b0538e1b1a7c785537f0aeed91fb998bebf3a3561359b56bb597cf63021606c75dc8534d8ff56bd035ab098c9b21c8b4535cf6e1059036f9256184a8def968fa0b27490f5be06b2011223c2cc829dc664cb8305efd3ec675eb3d60baa23d4531a145349d3eb01d3b891"}, {0x1010, 0x102, 0x80, "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"}, {0xc8, 0x0, 0x101, "963cb3c4ab8c76acf90ab51101246937e0b09b32613dd72febd5a33163a15e5902a26e15c548cfa2416788d676f5cac6f6d40cafbe0919a54bbfc23b702cdb6c5ffb512706ba21a5d4f0d90c9897f684f2a187e5a8f07ba306b53c0908dd68627cd98dc3d8a0964c8b8f19acf0dc976cdddbb55774010be8094950dc928d10325c6759c7e534471a5e004aafc1ac84a485a2d7abbc2290bdd5445df253862a4e71fb32542607d842876e1cb57ed4aa3fd22fdd"}, {0x38, 0xff, 0x3, "475506dc35f95f9c0ca3d8eae37e171f776e3667939a1f048fbb38fa3ed7338c5f8437d5eea1"}, {0xa0, 0x101, 0x7, "de3e836286d85ca915f3535c8097531e765edd2b1a52c7166c7fbfcc201e97c4965789baf820107df1b80f3fe5a8f6d35862e4af1c736bf7d46aa1cb81991b1d0d2cf0bf131c5f274d06f67a93c219cad8c41a6e95934757bf2323545cc7b1f39ad018bede8a723e8f7483dfccba6f07e31d1e0b28538be4ca8b14e72b93609903678b5d0c2dfa231a"}, {0xa8, 0x104, 0x4, "8d533c09b2760616438eafa33eb10c29789ce3a70464dc208b35338b969220f00eda0a4679ac78d5900d5b25a57385fbd6d0c204844e27d2ee5599378c7e8aef06b3f1c0ff5a8ae02788416672eee654bf1e9a7900512c67e210bdbefa46fd3daf6deedf69f588e7a1bdf37a0eaacb64f7eb0131a7b2caa1a78a232e10d9101ff2bd64543700c4615d3e0fa8330b7e5678b1d1092b6a"}], 0x23b0}}, {{&(0x7f0000003140)=@generic={0x11, "2aba39fecea00488098395ae21c3f9b3b26e182c8026bbaf8bfdb2b53579df9a61a2baeb40cab16517f64b8121e9fb18f77b25c017ae13af72396bd79ff94d665571a336feb43c6d8d94ddbb93701bfecea65bb4c8bbf976e98a5df701f85c692dcb21f342f3bcbc7fe177abe31613b06a9902fb12cc1b51d506c920cf1a"}, 0x80, &(0x7f0000003580)=[{&(0x7f00000031c0)="e9622509b1106441cc238c17129195bfb337f4507e8acc1764030ed501d463949ba51a9ab26208018a1423ea68cabb0a66c10b43932a7765d3f4832143bb19e680ad486c8b672dbf7e6a7eeb83e08718aa02f9b35e2cffb0460139f83c60294027387ff5520fc340a102ba19e34fd07255c218f54c04139436f089115a8c72116d16cf422bf7ce8e04075983b267c4d93e8e89d8ffc6e0b6220da6facfa15332009c7e30bd788e4d3b9373fc412039fe6300341d0de6af4a69f880c6273349423c2d976d", 0xc4}, {&(0x7f00000032c0)="d12f6ef682085e75812027b7c47c52358ab013f654cb1b41125289335dc5f883a67a052ee81c7d4a2b484149e9374f41fb4183a8308146fde15aba35f06fad9cb7bdba9f32dc4aaf3c0279d6a9e87dcad348af41ab223be421a47dc20937aa1e2cb0686a99320d025eb8b61f32f35397f64dd7ceba78bb07c4bddcc8218722d91ba48500ad9adf9ec0ebe48a68f7c09bb9", 0x91}, {&(0x7f0000003380)="6ff95deacd92577acf436c882455ba8634ce0d232ec4756052e3a7a8fbcc1f8daa1f96419071b04df91cd545790725d6ded17927eb11bf4236253bb58c884b0597331f55a4433317717abcba5bc5ccd80bf1bba385d9b2661fd7489bbc5e15a493efff848e3564c5957b4cf6577e7576d63fd804536ea66eabbd56b522bc7db9c9acc2977450c02b3fcdff", 0x8b}, {&(0x7f0000003440)="730daa0739336e927945e2e8c2aa38dcf3e4c84abe37356c13f2af012d9bc31d2b7fc127fd6bbef908cde463a9197456b60805884eede53bb6b643367d5a8667b8cb4079c99699e95f7739f3c207162ea8c5d4c7fe2ef5a0ab72dbb1d5ca42da63ea7e2412bd03d78af71af78decf9eabfa46cd264a4882211ee3b795b0168dde3289d008f1d9e0586a7f95a1083ed28648f870832a2bfd3de1013b4eba8330ff009f575daa1a7527df4e023", 0xac}, {&(0x7f0000003500)="6e8a461999ea60a7995a2bce9e53fb33f707368878ba3800a6", 0x19}, {&(0x7f0000003540)}], 0x6, &(0x7f0000003600)=[{0xd0, 0x11, 0x5, "59a7b82f9a883cbf192e87e2bf71da504d5a12998ee12d470787d163b1e972693de999a38be4b92a16006b31719cd602da992a06adb60af1536edd4c5a6c330a10a9035b7610e6cc4ff025e983bc9b36a0300095b07805bb9df1a6f4713fa7eb9176adb4f47a49e24d381164fdd00e0df37b32966b070b9a5e0d965bbbdbe8231cbd3d317669811b5d91e15112297736e995aa2bf2d10cc683946cc521f317bd0c7a67c89344a9b48af181b782a0a602f8bad6b9432f49171f8e4bd9e5"}, {0x48, 0x111, 0x9, "5592fdc2950a905a75f31104664ce2f50addaa82b07d9f5e831b9e7b03fdafe09f6e38e1f938ab4b8c24c2228e390c5144827630"}, {0xd8, 0x117, 0x7fffffff, "bbe23294238f49c0401eac8b60d796555c4dc34d1e234fe38a9d4676e7df08e8521de5584b8a9dfb31ab730fd558186d052fad338b8615e00a194b13e7c0087bd7c95e6099efdf45e67130814bf6336efc70e2df256e11f2fffc36ac4d8c07f67a3274317ff9c4ae4e5a3c3304691636c69c17e4d4fc7121cf383248317f4fb47fa70814cf8f2a6d6268ffa5ffdcae4575ff26dba08947958a299896d8c6b5ee374544bc6930e0ed208bf1dd10e2089b5fbd907acfa568dc5db83cf15314c99702e2"}, {0xb8, 0x103, 0xffffffff, "aa8f6cdd1a66c5c0c4003106e8cec2da318fbc58f55ccf946e8077e87b369609eff69a9f43db0a459dc1cd5c7a603b7e8fa2e9346d2077bf03018d51ff19673b6613c7264a6a3bc6c54e1d9f51316177080ba54666423828bfcba2607f7e6a0b23f9767399377f43ab3137565c7a1162d08b10743cb825edc487bb1df18fe98d54c165799cdfca7b94b99d9f8d2a5f1cd433f2882af8c59e9648623f590ed03a2eb9"}, {0x100, 0x3a, 0x0, "38f4e0bfe923414cc607485670d274fb686339f6e88a4007ed85546f3bc3347e0b6b5b1c10c37b9565250f5f5d247e35bb292e4750cb708b29ec392da9d8cc7e9739a6d28b2bebe997cef477a0b375cfd8ead35d5b1f63f50f78bbc4f059a2b6ded032f90b2caac96ffcb8d7e93b361a9b92fab4ab3e5540ed6221f188863d8463e3ff294e98ab2491c5938de644c4c61751197faed9b909c3b9fa5c6fc41c54e2dfbde0789b6859240cff46561fc411b05698ad59fd1582f1e8f3b5c81e4ebefffa8167ba0398e5ab7a31b8eef7bd5b187f084b6f22d092ea6c9e88758fdedc2a1b710f2c177c47ac3002"}], 0x3a8}}, {{&(0x7f00000039c0)=@llc={0x1a, 0x102, 0x8, 0x58, 0x9, 0x20, @multicast}, 0x80, &(0x7f0000003b80)=[{&(0x7f0000003a40)="9dd95e48c938d8562970fafa93cf6c50dc8d467c4bf9ff63610a664d1e434f81a9a6ae8db7524f7fbfeb78454a7d714f247a6b6777bb4f4646a3005a6b33f1582726bbcb3d10e9c1f287007ca3f0e9c183ae02211c52ac0f9f0bfd24484aee5dbb0bb683", 0x64}, {&(0x7f0000003ac0)="50a1aaef4a9d421f7ec65fb3326bc06a99759b84a9cc52d175a6c97641f4e132e9f769b40b9539f5c2a27c0308a52d4945db9c69cbcd6adc09e5b05565816770e57883c0e9cdc4468725addf7230ca3c16560bdfc07c62353f07caf49503705e55a2dcc1b6bfce7abc5338bb54fd98ed59573eb3622ba18902e1def69156d722f33dc7b2e7f7c7a9e3f44cedad9092425770f58384a1d6b491da527ff1db19a8b98aa5a4649efa93", 0xa8}], 0x2, &(0x7f0000003bc0)=[{0x68, 0x3a, 0x5, "276ece1d300a9fbb64ddfee930c9b3fded2137d00ea98c854207eae33de3e1c6d48f7e893ca2a5759e4448a6d73dd49f1f43601a9c8a26332a0eb98f49d213c35dbceb123b1704dded178c915294840e23dcc77711a0"}, {0x1010, 0x107, 0x6, "9db48289e27abb8cdb259f87bed6762b9df43e021c137f0d1ed28e38a98235ec6b927b67d665004dac3aeb15248fbdc47ec0c381875e8c931aaee78079c0b6ff7da2c13fd927dc089256446d00b104e873c46baef3bf52080a7933a15443a5133e836b89d4d4ab72a7621af7adbe9b65a657c3bdb372cf728b4d62d4b22d4ee76df4a4a2865be99057da62dd76396af4034fd94d0158961c419e351fd51c8df15112d4795cbb19bc957ab5d1c7a85de7350498e98e3f37b738ac892fec8b8e08f8a96e505a455bb615835362fa26d25b99d4164f7febe4bc810c29a3f639bd393cf8a2a8e3d5627c5c9b08b323183e64a0eb03685d3416683ff77ddaaf96e406b7c98b542e63f060910f5e4c1a7d1b4a8c1820e9009ec902d27e25f9f3f2c8ce52c3b009402cfc40ffa5d30bdb996cf77019949c83291210ecb837105e6f7e1b7f897747519607dd35c59e321dbbe034c6dc56f3aa9a91767e2edbed3952837a8f3d3aaca2d4f13b00732e3e368d3968b6ba86732e021df14e43cbe5c5189aa44b57ad283e1ae2b4eb0f0e4ca17674d50d1ad416d35098ffe763b9225ad96faafccd436e5171b6ebbf1d5febdfa4974a4589cd2876f4a87313d32e17fd683260c813fa2a4066622bf5005e7126b43472fd44971be1ed87b3270b06d704d1db6435ec54072a98949e4626b08d42f0cc74f4364c12537d994b47c2c4289b7b6f66d26e083472fdf07a463de1ada36394d127ee9999fdbbe933687bf29b30fb43efda0aa15c8ba51368471b25fc37c791e711b3de4c946660274eb9351cddee5ccab45b2bd0b48806ff2778498aa5e27da1f8460089e832682ac33c959edc19237de94866396d66266d9b1db699c4af7d206ecd3f56c021e20f0e8fabd7c16c7aa4fb31225cd92f4fca2b3959f07483dc19650fd83587cbaefd63d38f880c5875f178ce5aae3db0592a552bd0bad45fc1e36e677c362da37ac165f3beb42f85b8d5cdb013a2fd22664fd52dcadbd698ced9b88cd1ad9c10d9ed7857d4109f749ba266a1e71d77ca7edf8e89e97c116ec6deb30e39555fc1b5d53c7c4686aacfe21e86c8afa8cd6d3a2fc5fd938bd0f962a46a6b589773aab42826d06dcd38316c8c7b953ff4de5971feb6bbdeedc20356ddc4f05a21487062957470bf1b36f400cee0b35bc221f7e3bdc2576c58351c53fcb5b8c48905caf145f7a452f92089e8356a839b2fecd893f9392188b01bf863af96093266d73768f9ebc117a98b8d7dd0e41fd78083bd62e1b5e19a86712e63eabe90cea686eb403c82634ab760f29e5ca2dc572acb8ea8e3c30205ad44ed8d3ccecfc20548cf26d7593119090c58d95020a8141e0b1ede7b349331f54268ee6e90532442a51a13b493a11290f4713d1a3065b40fc87fc4c5fc87a37686134aa9bd3ab8ba6e0fca654247ac43568118c2acf77c8bc716ac75f39c67252b411a28a854f1269c76e04e02f41490f4035a2bb7659698fed6d5a928854194826da469d113b120e1660d9909bc92e2be9d678cc919f785badc0ea9bb24fd010c0268f5042cc5ae40bb422a7f867f08d4a482266abeec3787f5453883d852f65cb45b1023041c98ead60bfb742cbdb8ac5ee73dba3865bd0ceb9faf1510be4e711d758e83c36b6be6e4e4b19beafe7875cdf81746ea60822f8cea67b5ccedef99de9496a3a3653f5d33b96b1f58a0e2c6676a76853408306c6f3cc2f50fcadeb88a78481e60ffd43fed2eed0ae06bf361bd0de9a0b3b0fd71f5e43feeec918713d18ba229099a3cda777c28988c0fb0cffc05c37717e9f66bc73a2091120181a21764862a282daa2e42d81268b25097aae417e7d9bbf6ee4903c6b57bcdd0eb28c3dc12b7891333a9d7c44e01fd95e1081e0f0a0bb83128eb60459b22f239a351847b1a9a036e57466fb24b2501aba7d1ef21eebdb4d4931b7aea0828131250023648ed92c25660e13c1d6c08f0a68b27c941d7a663f8faf25cd5c1b653197fbb033cac2e1459ad2e6e801320d42cf44371eb5542df858c62caa2a60807433394c9caaecf0b73654c20d2e10c08c50d798213ff1a3ed25217f02cf28ca809bbda2a16017fb79ae067d46928840db9566b365b5d67f5e08292a1cfe3cea566dc21c5a7cb796f5936e8b13167a239a3f17ab22d2d7f803366cb835b3f2a9e39539d5c38d3923a1d31c5919f9351aa1c0ed97c68852e3e4639c90dbd0ca59aa793ff9853a83afdfd9c095db859568e5dc45d66dd0d786c99dbb26d9cc1d5a5741cf553c7cc45c3739f38b6c588e3cf368f246a472811178e366ef3e5a6e78d27d7e9eb17c942afdb7109fbc8edfc3ca306545c610052285b5436b6e645f14a8528f8cb3212ea5883da61fff5de7d4836d81d238f06c52699148a3d183c381dd638f7ab66f081088ec547a5f5222c881018d716ef356dbc42fb5a925856ba5ffe22c2d493370336d7bd2823eba11e4a61b51ac268d03ae475a7cc07847e38425c2a74e0c5df20d261c76776526acecd1ddcaa1adceeb5daf188c3d319e6338f283dd00f49d1d1e4bf909984ee7b98ca8100bb08d2be089b6a89a1025495a31c88d59952c486e62d138627f7fac8ec118e09500c82f45bebfb6f91ed9ca646e8167195e808061613a974532f96354de5554318fa163ee42eb9de6772d6579be551d8a689f071503fc1bd7946054d583824d1bc01d3f084399d2474cfb144bacc28ccca306f1989655b042cfa04e743872b8d4608d63dcb1c816e3aa79a18d1b6ec875d993d290a347ddf843d883d3ee4c5a727189a24a4569ba93f32ad1d353fd8124e200481f8c31c233878fe614760ea26eb03ab3a9afc31ca19fde4a1f438ca1db8576f96e49492a4164d1aa45265379f9c5f3507bea55fc492091d5b721200b1a574c8acf9293f3ea996b525eef99da1c0e30e6310a437d780c6767b23a1865c2ad10a5275a37cd25e0a2ad8a25c73f40bf4b02b7cc7b0a527f7dbc96d53eeb0cef7d8fb63b522e420c3553ee0eada9123c3168787497974f7ae6fc0d38739f39f51cea97801607f7007052802b8f32b540e0f1fb096798aca3753abe8ffcb246a0fa90eee82d6a6822c2908d318908532a83de88522410e72c8bcda8cb7a320e10dd41c013fbcb924002f7ee7084511f1a4c14f40996becd269e36fcb65bbaf933fe1ddd380c7a5a5081fa95ad8462c6fb02057aa531753da1ebeefabcc89e3f11e1696921ed792c90edc62ea2a11e740475d35bc7da81ce12e8952c2299d2e4b024fb7104c6aa769872b4ae3832ad8c895aa35693c249ad002ec7085ec1b5f76541b1199e7615ffb6c6795c58557a11e92a14436eb4a49d9e389631bfe86e7d4d0d3d1fedd8f171b7a61aa968a2f98caabe68dd6553de6b73aa988ce0827aaa06d95e76c47d912f8e529078b5487f4fb720fd745e38b0281c59ca9458b8d8c7d1995f64dc31ca082c5ff3fbc76091b31ec0305f9e9f167941fd36ff1e98a266e3bae53fb2f97953d08fe09bfe2fabc1bf84cb84bba1e232bfb57cb6339e0ec9be216118e0156e433d7b73ba8f03677b06630661771a53b74574cda7683a5105ddecaaabc0658434edf060177d65ad0ebc85ce2b2148d11396427ae18d7b26e817d7068693a5d2c5a696cc73788d1c547e527f40eabf6aad916a56189bc9579f8cc17a2f985605d13ce6334d06f130762218eb50ecab17b5ddf0e5cce90a20ff88e2886d8c98f6096f387dbc8529d22460ad891775ea1212139d5d4bd963bd50d9358e0b61693e77c6d6098816baae88eaed0a58ca31f5ad86f614da911b0b1c506c4857ac2b5ea0cac9d3e05b87f99812e4512bdfe6844975d8e6d92aa26d71309e767ba1ccd122ae95eb359cb7aadea84c3369d74a38e43acc8d290f8d59a0deaa2c5baab3a8f2a31245983566435fbaa02c6a8078c211b86829f3b7315a0875a751ee8ed1827689d601ff30709d8b89bc650cdfe14cb0c0ab993b81af73bdec0e45d216ecdb11269e20fb65ee8a31343ccb101d52630953dd9382cf238640529c3fb74d5509cb2f9c0ff3acfe9042a1923c1f610d93a7bd1be0f005a53052579b721d4e55d7b8a3a41f886e078e25656c3e40380e6708f1f464a056681e92596c2e8dee1060ba84d83b957e86f046ab7c9c11cdbb064ea69dde5859dca213ca9c06a8cee031ac6400427d200b3cf43674afb70c50b8fcd950fb93c8ca0546a54ff44ef4c1684bef90824f8c243f182fa97bebcf802854cd4722cbc81761b1a7f6c2f7d77869b746db4542717ecd10c1dc2e7a846aebb54c6db69e510e3e24e90a05089c4a80ee61bc53f16448f468c8b5f6e08d955ad463b0c51097d2d771367efc27f649452d30a147875b3d613332a792f174091f9ad6a344548974b83862a545bb357b959084d788128636ae8cb368fda6d1911c5f4ffd33682dfe046e3f4c4e0c84e54271982d235e65a2a3fcd815b693561f796dfb1e95acf384ff960c7be2d1f61ad40d9fbe77ed3d62cc8ce4d8ad094d58cdf224eae0c75ed6268d08259c2477d38c3334d9dae5598a42d42cb5fce353e6961fad49cd3b7740fac5e6ced23c4ff26a1835571d80bdaafe75f42e676a2916d37be94cdc5bb34985084dbda4dd44fdf7ff2ac6df398666904c9eb24f8d39dd15f0ad5ba5d66d8c9b2d7d1a33ca95e30ba68f205e02264aa641094a35e4ef2093f6c748858ea3c1ca25074f21a8ad6eb7f96a4ee661d842b18fbd69e8c3622f2d7ff9cdca4714b4de4fed6ef34db51cfbc2bd1c4b79caccd462e88f0fd633f78d4df8becb4f53d03f243405577c785407962541fc73d8bb798e2aa4491dfdc196032d3158b50dd950800b2df7dd803130affc2c09fb9b8dc623c2d79c0024591437db33314700b3a31f19148ffa6e5713fd9e24de8dc5ef28c82f4434fd320b7b495f25d9e09a89dcaa6faec33b492baf39b3bcd23b32f5766032250f1a4ab6fb5c1ca9f763e8cc4d47d212bc458a89d1685414d25ae2b3803084e9cf72984b4c9e9d091f2916387a6ad8a55b1e6d6b7989f0ffd8c5e19a70c1922cc1302b5edfd5077ab416dc2b814b80fd892aa6577c8397499801b2d2e9f9ce732ae128d5b385409d1aae7939f469768061c03bdbd6745b3f004bc5e1c5a02c0bd987a890d2483063ba9c8808e1cd7cfd97ac20b4e5fefa5ca03f88484907da3af5d511d3287b46fa528446b03ca00d16cc4f6732fed6b464c8a3f27f1c93379e2f6bd6afdc07434080837043c638c91892c18bc9f9990f6355c77dbf40667806cb518b7aa653ead19d0c7bca5d68146d40c9e2848d136682743f834e86b4c01642294ac2899a584969d5b0229b82ec24f6f5251eb49b1a848734c6a55922208f2bf9ae488bf64334dc212109308856110e3746248e717877fe68b3690ca710c598af05037b16d3ce2b4016ec606780745911228567052c250b71c1ca918569f867a24189d355d063a54b4b37eb37a773506fef20c4ee4c1fc691150976831bc60d9b9d51cc83cff1156dc8511f42ba5fc67f6aa44761688e75e0d72e49fb07a2e276dcb4bbad378feb4401527d50570bd3a333d9dc92ca2d5c2ac6f83ffa19e5da3e6e94b2e8a48ebbdd68c0cef9f23adbd488d26289238eca4b5044a6beb7d8eec6c90907e247dab2b9a7bce3747bcf8343b59300db95e74575c7f558780c6d8b3e8b8887aa44cf377208e3de81d2b7f3c25a8b6285c65245056386566e6a78252b5e49469fde4bcb97e879b46246a0798a50b2462a2b21b2921049c15fcc9b1e4"}, {0x40, 0x112, 0x6, "0037c45d400d1caa43d3ed3b5f95e459d4c928c9f8e93c82dd173bf2398e44e0f1273a8264de23c12f"}, {0x18, 0x101, 0x0, "16"}, {0x1010, 0x104, 0x9, "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"}, {0x1010, 0x119, 0xf8, "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"}, {0xc8, 0x104, 0xfffff801, "1d657db760958c954ef0488e187b6a7a27a8685e8d9f9adbf3b53bf8eb11c528ad3246e27dfc8720c2bd0affae2514c7eb3982b4cbd8ea9d2af3f88200c07aa9379ff83c2dafaabd994bd0113dd7f85169748c7b81ff9a7570c3c9828dcd8667ccc9b639f8fc825d521429239b8b59d232f0a7faa0d32f974d347b10fef88c6269829206f7f106f4bdb988a2d9c2ff59bddd894b7aac06ed86e2700115f2b279748c6fdab521ce3ef8079ed51649787136"}], 0x31b8}}, {{0x0, 0x0, &(0x7f0000007ec0)=[{&(0x7f0000006d80)="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", 0x1000}, {&(0x7f0000007d80)="fed8057a7a04bf6e4c399e2287563d649f919acb2b7ac351622645c67edf501bf5b0a4048af1c5030f5aacb75121227db7f5dad5b71acedaebb66bc2c3d627151ffdfe0701bf76547a12b042f22123fdca7d1876b51bbee9d4bfda9bf72366fbc5f1654bcfc1ab60328c60f1fb26a23c70cb47d4b5e9e992a8de647aeadb1681e73d602e611d421a3d8276222d2c604708c997a141c2d815fc0c83643c6807d7353b37eb7e4ca4cfe746ffbd67912ecb61927e86240ccf1d0eaaabefe90459fc173c2ca73c584f77762be4ed6b33fcbc39d7c62e291f57863f68111120c838405f4725506c", 0xe5}, {&(0x7f0000007e80)="6ae585766f1a399825d4f30fc26314d827edb7a972", 0x15}], 0x3, &(0x7f0000007f00)=[{0x50, 0x84, 0x4, "872f0787303897651f98d81b804d5c6c14ad9503f192af3226fb51e7acaf74e597adbd27626a11aae8b1261d7e8362842ab25b8dd63eeb6dcb6264650a80"}], 0x50}}, {{&(0x7f0000007f80)=@l2tp6={0xa, 0x0, 0xfc, @remote, 0x4049, 0x3}, 0x80, &(0x7f0000009680)=[{&(0x7f0000008000)="ed36ab9757e381019d68c6d4b115d132e4c0bac3722d711e", 0x18}, {&(0x7f0000008040)="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", 0x1000}, {&(0x7f0000009040)="5acb982f62e380b1c2e075fc060ad3dfe04b11f87c6c66fb8c70b4c8ef46063a670780e5966936387b94ef7de4dad3e6ebc769e0d20235c461b03ff6cc0d510fb37d2d6ac7c2c18061258460afc6cb5fa99a1a9060efb4eb1dd28df93f028a2231fe9b159b69aa87bf06a15f52dcf905bb70d78d839137f6678e3023ed4900034edd2ac814c89827a4028dacfa9b884f48519cd34a0b68710a25faf39add0929bf672847a693951b9ebdd95bf051d838c13ac19c686bd628b67b4ba4951368dfc2ae6a2fd07c6b415f96f68f5943d6b7a7a0cbfbb9002558d418bb07bd9f", 0xde}, {&(0x7f0000009140)="5581578b2443b8637fa0c1fa901b47534f728ee085c0c9a7758d06ecf5a8a33f399c94a290652f86a15684a5141fbb5c59e9292c909c0f3550a4c9d091c5edfc0d721430df49a7b22f92dec353b4594bd06e334f4915ffacdb6e1025c1a730f0ca5d17e05e9f693c36b37bfe20732a5218ad152cb67597fe58d425370d49c5d239952d527304873ef407ca9ec0ffafe03069c43615289555356b3b6128f3518bae5dccd3560e24bbc186753d67261dbe0b8b00554b73405ae63d64b1d58cfd6c2ab0b2f78f05350f87845d3daf32af38340b6e67110370184cc599048ba7016d7843623e180e3f", 0xe7}, {&(0x7f0000009240)="632b3be727aa3d0bf7de56417eb442e32acb3eabd3825a6fdb1b3831f2f3edcc3b4f24172241b48b609d8bb05d926bafc803d29f9993bc8dc738ab153b82f7b8db03067b4d782e21f3f6ca50001b06e347dd1a66265398a9b45ff55f135441bf1c6c65d21536302d3de1e6b2d635a74b63e778a7df763cba3ba37f82860c7759da1e9b4093979664ac8ba1765a1af624271b75ffcef6ea4810f8ad6737777454db2f0aec2911e331129ab96e91f8f2bcf711a4fb66b76116ff2d6d4ea42945b34f16350f", 0xc4}, {&(0x7f0000009340)="8e30ce081a70d5fab852828e76d99aeb7553c317ccd565df47ed2a7d35359887ba11a1ac7a23079d81c35fc8d263aed34aa6d71198c377b9ac1875fe9163714405c6f4750e76ce380ab2ad2b3e3504d40520c0767de68042eeddc6538ef3241e2db9e783a93b18eee06618584ed78969fb32f333a64e1a6cc69f1adc0b61d35458f6320ed4cbb6cd9c4dee6be63dfce25df26f610bb09612963c8ab3d20ec71e9362b4854e332b10497dbc3849b96ab787b861249f1555d66846f303bffa2ee9cb9ac0644829fc997d45cfc63f7fcd332b063df1d0fdfc707bca3c3a315c28e01474a095bc9d881c3d256cf4f7e83684f862f2e3", 0xf4}, {&(0x7f0000009440)="8ad1804ac6fe463726946649426dfa7f9856d811bd6500a8760c6e8e6e7257a68876b773f6b9c9f24701a10938aeca2d3a047efa7343076f2db40d84a633b9170f6720845f78b394179780bc00a6eef8e2f40d41684f1c11ce11d81c029aca3754ad4719d348fc4190d55b6b34b7d8cdbea6a0b35251fb1dd5d12549ecb8b9c39d4c1e164b08860b95d86343f7a4be9bdf05ca2bc1dd79da17b6960e414edcb27a31c789d693907a07da3c49b1e0c0f2793d617b3686546836faaf9be6784220", 0xc0}, {&(0x7f0000009500)="a1d45a8b6ef618244412823281059e6c19939c53b6bbb00346d59fca21b475804b4a14b7aeef2722d08ef2ec04e0b858e4a36084f4d194746affa811df4738aa8a3f092d1864c1d949a4b996c80ceeb8f8f1a67483f26138e5cbc97971d97274735151fc970d23980f05c98d4ecbaf912d73c5afb43a57fa4f7170253e82163388e69c54eaa1404ec6f3372cacd40679c580c63014aa16c5", 0x98}, {&(0x7f00000095c0)="cf34ac320a42504668119fffe0e1377370c5f0a730d690ade3e8b6e3987238091db714acd01de888e982d8e673d1c40fc0564560ace6e8afb759553bb074dcba1b7847f87ac8bd244fbedfddab0c1db71c14bc2cdff3c70c986580289ab2c6976002e05703b50a2aab7396f0e13244229030005e64f1f0abe4f46a280b58ea609c9e48a4b84924f570a70fb1e3121aa15598bd0263ec318810990be19783dc3e88ff9a1d", 0xa4}], 0x9, &(0x7f0000009740)=[{0x108, 0x107, 0x7612, "e2d4f974e59f1d23fee9ba0e6c3153e2bbb8ebd45d4f8d229d2df4c513ef1e413bb2d11f30c214608adf03c5fdc995eccb5ecfed8fc8aff88f0b0ff8427ca8822880cfd3d8e20432312615f8b77d54513fc3c6fe56a91060085b0524678a8444c8a850efde1e0d8d4f548f19f83ba71b278f599f2aea58edd120023757bc92a64360f0f71636e56b19057d27d0be65e50b5f9b43cef1d6f8b11bcbb3fe6d5439e218da351dcfb8faada7e8ef70c20445b33bc44d283adb93ce6a9f641fa8800b550605488044bc39ceebfee62d7c1e74aff976b679cdcd6c03fca9fb7ca413d07a269dcf875ea6c02460f653d0ca858b3a7fc20218"}, {0x1010, 0x101, 0x5, "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"}, {0xe0, 0x6, 0x9, "44d0230052267812e1ddba2a00fc15021d2ba2e57ddcc50badbb4e75e849669246bcad6fc1e9dad7ae6a91a571ee99d7cec22124948f3401c3c9a1b1e5677e497aef72908d2db37bc8dae0920773ce13b0a8272820457ff5fb21abbee060bf819330333c9d1cb2a4e46a113a436b80df772a7a148cf7c45c8f025f05e3d34cd8874b37c2d86c7911b0db80d6631c94ad9d266b46c95669cc30ab5158016da42d8af2e843fabb55b7b24316589602bad413b991256cfb02a07977b87ea4dc4d0f71a1f83a7610c5422893"}, {0xb0, 0x117, 0x100, "570a25f615379ff1855dd28a9fb726808fdbec9f82efcb602a208bf2b8c947c924e0303caf660428597f55900cc4b527fb10bea923111da648a9306e73a032160400a59cb342cf59fb5b117dd309350753dd82a937b68c2f51f125d8952ed1664fe8e16093a59ebd54f07c19aa89d6bff293a4c5bb173f2062d2217331bdd650d157feeef1d53e8f60f5ea90baaaaa3aed1711b5d0a4c12a5fd471bd"}, {0x100, 0x11, 0x7, "30a92a5974c1a7631abdabfbd9adfd27a8751045704efc35cd4d460997bfdd8f0990a53e6af2c2b51bce3dd0d49304027937e450c0352ec07db10bcacf936ed89b413f16c5efac6f046479aeb37a10b1b88c82c9c945d2a5711c85e45272300e4d8ba0a5c1994fde240ca60b3a200ede3dac4b9a89ba2a3d5a4a5a2e85e688532a06cb5db5acb215cae80c33988ccab6e648c97472df1e2fcb1eca6c943abe2c184a534f338876367ee50ab6b21920231709cc1d9f349eab9ddedce73072d6922e4b32f5aab96fbced4fc218ef3e629fa501fc93a010de925e70d54b6e7a6babd7a5eba7a3447483e34e62b234"}, {0x98, 0x0, 0x20, "6f459ad25f2bb9ed28bca6901e2c573ff7e51e5756adcddcca80f81c95e63cf24ebf6ec57b5fe28e27bf8a34e2df896380c90fe47752e503d8a355e6911be2fa9bc339f18052e46239b97781f371ccdc3055f035e0ceb1441c20b74040033866c9c108b11380f385056509150107ab11ea2d36c0d349932be1393dcc2cdf19358dd8d6b78b7910"}], 0x1440}}, {{0x0, 0x0, &(0x7f000000ad80)=[{&(0x7f000000ab80)="fe25f9b0020d729c3f1f55e5dade1647d21e10cc8986aa500a6f9233573b166a1a953f9060f2fff5b2a7180b2a4f8ae8d19bd3d6f02facc850bf149d669fa73eebc52b2db9c986b261a1f2596cbde86283b7851230f2559fa467c8ff815223add594b9598194f4918b8951204e1c1616e5", 0x71}, {&(0x7f000000ac00)="4f084fe8fbe94acdafa4faf497ab40db4dc8440a15b7e83f19e27e254dfdbe8edfc77eeafb4b8b30bafc12c61ebdfce5e1633380929f03f1f9e0fd65a0b5d934d7c8fed54d917563cd8ee6a13cc51de8b3d4eec224140ec20d2a3517498dda4c1d1af791cefe5a6e759579e8a31ef612c49bb5ae3b2968954ad6581236d5f857f4c4f69d625223d01fa32f8ee1fbe7735ead6abb8ef2483132990abb317cd7047bd1a0e075da6195fb9fcdc2b6d783897b3d00ba02c3fc14fd2180e9108bb2c575b36530030032b8b0ece9dac7f5a879e12a50bba78d6b6037f05ad27c4610865c3fb00f058ca7bd", 0xe8}, {&(0x7f000000ad00)="9a774da09245c87e20558baf9174f33242dca0b384c515ceb2bea3d3a56f82a58c4d648ca49f02216f0b13f217ea4ed999a035891cc27d3a1a9c44031b34c39ceee23a4d81a7cf05e18aa14d87c45b0df0597d2dd2304fde9f2b6a44ef989c2571e983043ce70c8117c6", 0x6a}], 0x3, &(0x7f000000adc0)=[{0x30, 0x10b, 0xdf, "7b123ccb689d49626f8884bf6a7471a45eaac8db67922a6025"}, {0x60, 0x1, 0x6, "271f7fb9389b9a55c267d83c4883662bc72606354b70dc96abac502dbd9ff12b02a8b48d7c870eac2cf4b0b16e92b9f7814c3cdfd1fa1da044912c5081ae87c9611e122288942176dffb3586afc32fe1"}], 0x90}}], 0x7, 0x8000004) (async) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wNd}G=', @ANYRESHEX=r0, @ANYBLOB=',\x00']) (async) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/devices/pnp0', 0x80104, 0x108) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x19, 0xb, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7}, [@map_idx={0x18, 0x2, 0x5, 0x0, 0xc}, @initr0={0x18, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x380}, @exit, @cb_func={0x18, 0x5, 0x4, 0x0, 0xffffffffffffffff}, @func={0x85, 0x0, 0x1, 0x0, 0x1}]}, &(0x7f0000000080)='GPL\x00', 0x1, 0x8c, &(0x7f0000000100)=""/140, 0x41000, 0x2, '\x00', 0x0, 0x1b, r1, 0x8, &(0x7f00000001c0)={0x4, 0x5}, 0x8, 0x10, &(0x7f0000000200)={0x1, 0x3, 0xffffffff, 0x1f}, 0x10, 0x0, r3, 0x0, &(0x7f0000000300)=[0xffffffffffffffff]}, 0x80) 00:11:52 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x5, 0x5}}}, 0x90) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {}, 0x5, 0x5}}}, 0x90) 00:11:52 executing program 2: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0xcf1d023ba33169ba, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, 0x0, 0x400, 0x70bd26, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x841}, {0x6, 0x11, 0x7613}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x24048886) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x7}}, './file0\x00'}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) (async) r5 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) (async) sendto$inet6(r5, &(0x7f0000000480)="948682dc89a351008eca6cac1590e4c56e18521b8bc260b409d36bb5252d80bd9ca0262a3a3977eb716ccfdfce1209a5b4dcbd816925542ea0d08b55c9c36589736c4359a61e9700dd8bfb3a977563a7d75edd882acbdaba4bea78878eef9e2fbda0d51551f1d06435a615a4efabce27703151105fcb57d11926eab481f2ed401e4c656289d5cde0f53818ee9c4ad90ea0f1913e3f707adf386b20cce06e030aeb06b85d9195f273270e7ecba4fc6d5ff565dec77d696c2b3046009004fcf1a8d3fc", 0xc2, 0x40005, &(0x7f0000000580)={0xa, 0x4e24, 0x20, @empty, 0x7}, 0x1c) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000440)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x34, r4, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_EXTENDED_ADDR={0xc}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan4\x00'}]}, 0x34}}, 0x0) (async) sendmsg$IEEE802154_LLSEC_ADD_KEY(r2, &(0x7f0000000440)={&(0x7f0000000340), 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x64, 0x0, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0xff}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_COMMANDS={0x24, 0x32, "51821ddd22bad97f39265018e66780621d0fc6e0bcdda8cfc79cc855ce45b081"}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x6}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r7}]}, 0x64}, 0x1, 0x0, 0x0, 0x24004001}, 0x4000090) (async) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x5c, r8, 0x8, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x8}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}, @NL80211_ATTR_SCAN_SSIDS={0x1c, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ibss_ssid}]}, @NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x6}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x4810) 00:11:52 executing program 4: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) (async) r1 = syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000800000/0x800000)=nil, &(0x7f0000e1f000/0x2000)=nil, 0x0, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[r2], 0x1) (async) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r4, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r3, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r4, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x5, 0x5}}}, 0x90) (async) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, &(0x7f0000000400)={{r3}, "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"}) (async) r5 = accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000280)) fsetxattr$security_capability(r5, &(0x7f00000002c0), &(0x7f0000000300)=@v2={0x2000000, [{0x2, 0xe894}, {0x9, 0xfffffffc}]}, 0x14, 0x1) (async) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf02]}, 0x8) (async) io_uring_enter(r1, 0x39f5, 0xedbb, 0x8949e547b723b702, &(0x7f00000000c0)={[0xfffffffffffffff7]}, 0x8) 00:11:52 executing program 5: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0xe, 0x1, &(0x7f00000000c0)=@raw=[@alu={0x7, 0x1, 0x6, 0x7, 0xa, 0x4, 0x1}], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:11:52 executing program 3: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000800000/0x800000)=nil, &(0x7f0000e1f000/0x2000)=nil, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240), 0x0) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf0d]}, 0x8) 00:11:52 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, 0xffffffffffffffff, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x5, 0x5}}}, 0x90) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r2, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r2, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {}, 0x5, 0x5}}}, 0x90) 00:11:52 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0xe, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@map_idx={0x18, 0x0, 0x5, 0x0, 0x2}]}, &(0x7f0000000400)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:11:52 executing program 4: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)=0x0) r2 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB="2c776664e66f3d", @ANYRESHEX=r2, @ANYBLOB=',\x00']) syz_io_uring_setup(0xfffffffe, &(0x7f0000000000)={0x0, 0xfffffffc, 0x0, 0x0, 0x2, 0x0, r3}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000e1f000/0x2000)=nil, 0x0, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r4, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r5, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {}, 0x5, 0x5}}}, 0x90) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000004c0)=ANY=[@ANYRES16=r1, @ANYRES32=r0, @ANYRES32=r5]) syz_io_uring_setup(0x563f, &(0x7f00000002c0)={0x0, 0xb3fc, 0x800, 0x2, 0x24d, 0x0, r6}, &(0x7f0000b72000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000380)) syz_io_uring_setup(0xfa, &(0x7f0000000180)={0x0, 0xb650, 0x80, 0x3, 0x19d}, &(0x7f0000be5000/0x4000)=nil, &(0x7f0000c94000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000200)) r7 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[r7], 0x1) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf02]}, 0x8) 00:11:52 executing program 1: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x0) io_uring_enter(r0, 0x53ef, 0x566e, 0x4, &(0x7f00000000c0)={[0x80]}, 0x8) (async) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[r1], 0x1) (async) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf09]}, 0x8) 00:11:53 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0xe, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@map_idx={0x18, 0x0, 0x5, 0x0, 0x2}]}, &(0x7f0000000400)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0xe, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@map_idx={0x18, 0x0, 0x5, 0x0, 0x2}]}, &(0x7f0000000400)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) 00:11:53 executing program 5: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0xe, 0x1, &(0x7f00000000c0)=@raw=[@alu={0x7, 0x1, 0x6, 0x7, 0xa, 0x4, 0x1}], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:11:53 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, 0xffffffffffffffff, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x5, 0x5}}}, 0x90) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r2, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r2, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {}, 0x5, 0x5}}}, 0x90) 00:11:53 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0xe, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@map_idx={0x18, 0x0, 0x5, 0x0, 0x2}]}, &(0x7f0000000400)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:11:53 executing program 5: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0xe, 0x1, &(0x7f00000000c0)=@raw=[@alu={0x7, 0x1, 0x6, 0x7, 0xa, 0x4, 0x1}], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:11:53 executing program 3: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000800000/0x800000)=nil, &(0x7f0000e1f000/0x2000)=nil, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[0xffffffffffffffff], 0x1) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf0d]}, 0x8) 00:11:53 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, 0xffffffffffffffff, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x5, 0x5}}}, 0x90) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r2, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r2, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {}, 0x5, 0x5}}}, 0x90) 00:11:53 executing program 2: mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x800002, 0x1010, 0xffffffffffffffff, 0x764c000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0xe, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000060106c00000000009500000000000000957244221cf10ca350a24f84c01b9071dcde41b84becf69fe9ee44d34eabacccc3465ecf7fb77cfe55132152fa4dcb8bcdaffcda715dc04a0cd0b0f9fdaa2f52a8b0ac5cd3d25bfa971826224040bc31ec3923d93b78915429b9391803e5c223aa593afc83d583eeaa07daa6623378f7bfb8c569c8e8e64d41f416dffe037f99e0129f1b267b80d39786cb6ca7789312935fe9356841d2731e"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:11:53 executing program 5: lsetxattr$trusted_overlay_redirect(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x8, 0x3) unlinkat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x200) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0/file0\x00', 0x460800, 0xa) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x10200, 0x1e4) linkat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', r0, &(0x7f00000001c0)='./file0\x00', 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0xe, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="1802000000000000000000000100000061106000000000009500000000000000"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:11:53 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, 0xffffffffffffffff, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x5, 0x5}}}, 0x90) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r2, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r2, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {}, 0x5, 0x5}}}, 0x90) 00:11:53 executing program 2: mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x800002, 0x1010, 0xffffffffffffffff, 0x764c000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0xe, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000060106c00000000009500000000000000957244221cf10ca350a24f84c01b9071dcde41b84becf69fe9ee44d34eabacccc3465ecf7fb77cfe55132152fa4dcb8bcdaffcda715dc04a0cd0b0f9fdaa2f52a8b0ac5cd3d25bfa971826224040bc31ec3923d93b78915429b9391803e5c223aa593afc83d583eeaa07daa6623378f7bfb8c569c8e8e64d41f416dffe037f99e0129f1b267b80d39786cb6ca7789312935fe9356841d2731e"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0xe, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000060106c00000000009500000000000000957244221cf10ca350a24f84c01b9071dcde41b84becf69fe9ee44d34eabacccc3465ecf7fb77cfe55132152fa4dcb8bcdaffcda715dc04a0cd0b0f9fdaa2f52a8b0ac5cd3d25bfa971826224040bc31ec3923d93b78915429b9391803e5c223aa593afc83d583eeaa07daa6623378f7bfb8c569c8e8e64d41f416dffe037f99e0129f1b267b80d39786cb6ca7789312935fe9356841d2731e"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:11:53 executing program 1: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) (async) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x0) io_uring_enter(r0, 0x53ef, 0x566e, 0x4, &(0x7f00000000c0)={[0x80]}, 0x8) (async) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[r1], 0x1) (async) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf09]}, 0x8) 00:11:53 executing program 5: lsetxattr$trusted_overlay_redirect(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x8, 0x3) (async) unlinkat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x200) (async) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0/file0\x00', 0x460800, 0xa) (async) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x10200, 0x1e4) linkat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', r0, &(0x7f00000001c0)='./file0\x00', 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0xe, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="1802000000000000000000000100000061106000000000009500000000000000"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:11:53 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, 0xffffffffffffffff, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x5, 0x5}}}, 0x90) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r2, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r2, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {}, 0x5, 0x5}}}, 0x90) 00:11:53 executing program 3: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000800000/0x800000)=nil, &(0x7f0000e1f000/0x2000)=nil, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[0xffffffffffffffff], 0x1) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf0d]}, 0x8) 00:11:53 executing program 4: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)=0x0) (async) r2 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) (async) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB="2c776664e66f3d", @ANYRESHEX=r2, @ANYBLOB=',\x00']) syz_io_uring_setup(0xfffffffe, &(0x7f0000000000)={0x0, 0xfffffffc, 0x0, 0x0, 0x2, 0x0, r3}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000e1f000/0x2000)=nil, 0x0, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r4, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r5, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {}, 0x5, 0x5}}}, 0x90) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000004c0)=ANY=[@ANYRES16=r1, @ANYRES32=r0, @ANYRES32=r5]) syz_io_uring_setup(0x563f, &(0x7f00000002c0)={0x0, 0xb3fc, 0x800, 0x2, 0x24d, 0x0, r6}, &(0x7f0000b72000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000380)) syz_io_uring_setup(0xfa, &(0x7f0000000180)={0x0, 0xb650, 0x80, 0x3, 0x19d}, &(0x7f0000be5000/0x4000)=nil, &(0x7f0000c94000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000200)) (async) r7 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[r7], 0x1) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf02]}, 0x8) 00:11:53 executing program 2: mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x800002, 0x1010, 0xffffffffffffffff, 0x764c000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0xe, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000060106c00000000009500000000000000957244221cf10ca350a24f84c01b9071dcde41b84becf69fe9ee44d34eabacccc3465ecf7fb77cfe55132152fa4dcb8bcdaffcda715dc04a0cd0b0f9fdaa2f52a8b0ac5cd3d25bfa971826224040bc31ec3923d93b78915429b9391803e5c223aa593afc83d583eeaa07daa6623378f7bfb8c569c8e8e64d41f416dffe037f99e0129f1b267b80d39786cb6ca7789312935fe9356841d2731e"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:11:53 executing program 5: lsetxattr$trusted_overlay_redirect(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x8, 0x3) unlinkat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x200) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0/file0\x00', 0x460800, 0xa) (async) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x10200, 0x1e4) linkat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', r0, &(0x7f00000001c0)='./file0\x00', 0x0) (async, rerun: 64) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0xe, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="1802000000000000000000000100000061106000000000009500000000000000"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (rerun: 64) 00:11:53 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, 0xffffffffffffffff, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x5, 0x5}}}, 0x90) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r2, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r2, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {}, 0x5, 0x5}}}, 0x90) 00:11:53 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0xe, 0x4, &(0x7f00000000c0)=@framed={{0x18, 0x2}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x6c}]}, &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000180)={'syztnl1\x00', &(0x7f0000000100)={'syztnl0\x00', 0x0, 0x29, 0x5, 0x2, 0x1, 0x2c, @private2={0xfc, 0x2, '\x00', 0x1}, @private2, 0x80, 0x1, 0x3, 0x3f}}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000002c0)=@bpf_lsm={0x1d, 0x6, &(0x7f0000000000)=@raw=[@map_idx={0x18, 0x6, 0x5, 0x0, 0xc}, @map_idx={0x18, 0xb}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x8}], &(0x7f0000000040)='syzkaller\x00', 0x9, 0x2e, &(0x7f0000000080)=""/46, 0x41000, 0x2, '\x00', r0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000000200)={0x3, 0x8, 0x8, 0x2}, 0x10, 0xffffffffffffffff}, 0x80) 00:11:53 executing program 3: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000800000/0x800000)=nil, &(0x7f0000e1f000/0x2000)=nil, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[0xffffffffffffffff], 0x1) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf0d]}, 0x8) 00:11:53 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x5, 0x5}}}, 0x90) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {}, 0x5, 0x5}}}, 0x90) 00:11:53 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0xe, 0x4, &(0x7f00000000c0)=@framed={{0x18, 0x2}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x6c}]}, &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000180)={'syztnl1\x00', &(0x7f0000000100)={'syztnl0\x00', 0x0, 0x29, 0x5, 0x2, 0x1, 0x2c, @private2={0xfc, 0x2, '\x00', 0x1}, @private2, 0x80, 0x1, 0x3, 0x3f}}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000002c0)=@bpf_lsm={0x1d, 0x6, &(0x7f0000000000)=@raw=[@map_idx={0x18, 0x6, 0x5, 0x0, 0xc}, @map_idx={0x18, 0xb}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x8}], &(0x7f0000000040)='syzkaller\x00', 0x9, 0x2e, &(0x7f0000000080)=""/46, 0x41000, 0x2, '\x00', r0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000000200)={0x3, 0x8, 0x8, 0x2}, 0x10, 0xffffffffffffffff}, 0x80) 00:11:53 executing program 1: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[r1], 0x1) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6}}, './file0\x00'}) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000480), 0x10000, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r5, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r4, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r5, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x5, 0x5}}}, 0x90) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r6, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r7, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {}, 0x5, 0x5}}}, 0x90) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r8, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r9, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r8, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r9, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x5, 0x5}}}, 0x90) io_uring_register$IORING_REGISTER_FILES(r3, 0x2, &(0x7f00000004c0)=[r2, r4, r0, r6, r2, r8, r1], 0x7) io_uring_register$IORING_REGISTER_BUFFERS2(r2, 0xf, &(0x7f0000000400)={0x2, 0x1, 0x0, &(0x7f0000000200)=[{&(0x7f0000000280)=""/218, 0xda}, {&(0x7f0000000180)=""/122, 0x7a}], &(0x7f0000000380)=[0xffffffffffff7fff]}, 0x20) io_uring_register$IORING_REGISTER_RESTRICTIONS(r2, 0xb, &(0x7f0000000440)=[@ioring_restriction_register_op={0x0, 0x14}, @ioring_restriction_register_op={0x0, 0x6}, @ioring_restriction_sqe_flags_required={0x3, 0x17}], 0x3) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf09]}, 0x8) 00:11:53 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x5, 0x5}}}, 0x90) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {}, 0x5, 0x5}}}, 0x90) 00:11:53 executing program 4: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)=0x0) r2 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) (async) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB="2c776664e66f3d", @ANYRESHEX=r2, @ANYBLOB=',\x00']) (async) syz_io_uring_setup(0xfffffffe, &(0x7f0000000000)={0x0, 0xfffffffc, 0x0, 0x0, 0x2, 0x0, r3}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000e1f000/0x2000)=nil, 0x0, 0x0) (async) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r4, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r5, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {}, 0x5, 0x5}}}, 0x90) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000004c0)=ANY=[@ANYRES16=r1, @ANYRES32=r0, @ANYRES32=r5]) (async) syz_io_uring_setup(0x563f, &(0x7f00000002c0)={0x0, 0xb3fc, 0x800, 0x2, 0x24d, 0x0, r6}, &(0x7f0000b72000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000380)) (async) syz_io_uring_setup(0xfa, &(0x7f0000000180)={0x0, 0xb650, 0x80, 0x3, 0x19d}, &(0x7f0000be5000/0x4000)=nil, &(0x7f0000c94000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000200)) (async) r7 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[r7], 0x1) (async) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf02]}, 0x8) 00:11:53 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0xe, 0x4, &(0x7f00000000c0)=@framed={{0x18, 0x2}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x6c}]}, &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000180)={'syztnl1\x00', &(0x7f0000000100)={'syztnl0\x00', 0x0, 0x29, 0x5, 0x2, 0x1, 0x2c, @private2={0xfc, 0x2, '\x00', 0x1}, @private2, 0x80, 0x1, 0x3, 0x3f}}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000002c0)=@bpf_lsm={0x1d, 0x6, &(0x7f0000000000)=@raw=[@map_idx={0x18, 0x6, 0x5, 0x0, 0xc}, @map_idx={0x18, 0xb}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x8}], &(0x7f0000000040)='syzkaller\x00', 0x9, 0x2e, &(0x7f0000000080)=""/46, 0x41000, 0x2, '\x00', r0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000000200)={0x3, 0x8, 0x8, 0x2}, 0x10, 0xffffffffffffffff}, 0x80) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0xe, 0x4, &(0x7f00000000c0)=@framed={{0x18, 0x2}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x6c}]}, &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000180)={'syztnl1\x00', &(0x7f0000000100)={'syztnl0\x00', 0x0, 0x29, 0x5, 0x2, 0x1, 0x2c, @private2={0xfc, 0x2, '\x00', 0x1}, @private2, 0x80, 0x1, 0x3, 0x3f}}) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000002c0)=@bpf_lsm={0x1d, 0x6, &(0x7f0000000000)=@raw=[@map_idx={0x18, 0x6, 0x5, 0x0, 0xc}, @map_idx={0x18, 0xb}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x8}], &(0x7f0000000040)='syzkaller\x00', 0x9, 0x2e, &(0x7f0000000080)=""/46, 0x41000, 0x2, '\x00', r0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000000200)={0x3, 0x8, 0x8, 0x2}, 0x10, 0xffffffffffffffff}, 0x80) (async) 00:11:53 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x5, 0x5}}}, 0x90) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {}, 0x5, 0x5}}}, 0x90) 00:11:53 executing program 5: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0xe, 0x4, &(0x7f00000000c0)=@raw=[@map_fd={0x18, 0xe}, @generic={0x86, 0x0, 0xf, 0x1, 0x6}, @call={0x85, 0x0, 0x0, 0x35}], &(0x7f0000000400)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r0 = fsmount(0xffffffffffffffff, 0x1, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r0, 0x0, 0x25, 0x4}, 0x10) 00:11:53 executing program 2: r0 = syz_open_dev$audion(&(0x7f00000006c0), 0xfffffffffffffc01, 0x400043) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0xe, 0x7, &(0x7f00000000c0)=@framed={{0x18, 0x2}, [@map_fd={0x18, 0x5, 0x1, 0x0, r0}, @map_val={0x18, 0x7, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x2}]}, &(0x7f0000000400)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00', 0x0}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r1, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000200)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, &(0x7f00000002c0)=[0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0], 0x0, 0x8, &(0x7f0000000340)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f00000003c0), &(0x7f0000000440), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000480)}}, 0x10) r4 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r4}}) r6 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) r7 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r6}}) r8 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) r9 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r9}, 0x2c, {'wfdno', 0x3d, r8}}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000640)=@bpf_lsm={0x1d, 0xf, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x5}, [@ldst={0x1, 0x1, 0x0, 0x8, 0xd, 0x20, 0x1}, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0xfff}, @exit, @map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x6}, @map_fd={0x18, 0x3, 0x1, 0x0, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xf0}, @cb_func={0x18, 0x1, 0x4, 0x0, 0x2}]}, &(0x7f0000000080)='GPL\x00', 0xb3, 0x22, &(0x7f0000000100)=""/34, 0x40f00, 0x1, '\x00', r2, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x5, 0x3}, 0x8, 0x10, &(0x7f00000001c0)={0x2, 0x5, 0x3f, 0x1}, 0x10, r3, 0x0, 0x0, &(0x7f0000000600)=[r5, r7, r9, 0x1, 0x1, 0xffffffffffffffff]}, 0x80) 00:11:53 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x5, 0x5}}}, 0x90) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {}, 0x5, 0x5}}}, 0x90) 00:11:53 executing program 3: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000800000/0x800000)=nil, &(0x7f0000e1f000/0x2000)=nil, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[r1], 0x1) io_uring_enter(0xffffffffffffffff, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf0d]}, 0x8) 00:11:53 executing program 5: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0xe, 0x4, &(0x7f00000000c0)=@raw=[@map_fd={0x18, 0xe}, @generic={0x86, 0x0, 0xf, 0x1, 0x6}, @call={0x85, 0x0, 0x0, 0x35}], &(0x7f0000000400)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) r0 = fsmount(0xffffffffffffffff, 0x1, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r0, 0x0, 0x25, 0x4}, 0x10) 00:11:54 executing program 3: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000800000/0x800000)=nil, &(0x7f0000e1f000/0x2000)=nil, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[r1], 0x1) io_uring_enter(0xffffffffffffffff, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf0d]}, 0x8) 00:11:54 executing program 5: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0xe, 0x4, &(0x7f00000000c0)=@raw=[@map_fd={0x18, 0xe}, @generic={0x86, 0x0, 0xf, 0x1, 0x6}, @call={0x85, 0x0, 0x0, 0x35}], &(0x7f0000000400)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) r0 = fsmount(0xffffffffffffffff, 0x1, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r0, 0x0, 0x25, 0x4}, 0x10) 00:11:54 executing program 1: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x0) (async) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[r1], 0x1) (async) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[r1], 0x1) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6}}, './file0\x00'}) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000480), 0x10000, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) (async) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r5, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r4, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r5, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x5, 0x5}}}, 0x90) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x111}}, 0x20) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r6, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r7, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {}, 0x5, 0x5}}}, 0x90) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r8, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r9, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r8, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r9, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x5, 0x5}}}, 0x90) io_uring_register$IORING_REGISTER_FILES(r3, 0x2, &(0x7f00000004c0)=[r2, r4, r0, r6, r2, r8, r1], 0x7) (async) io_uring_register$IORING_REGISTER_FILES(r3, 0x2, &(0x7f00000004c0)=[r2, r4, r0, r6, r2, r8, r1], 0x7) io_uring_register$IORING_REGISTER_BUFFERS2(r2, 0xf, &(0x7f0000000400)={0x2, 0x1, 0x0, &(0x7f0000000200)=[{&(0x7f0000000280)=""/218, 0xda}, {&(0x7f0000000180)=""/122, 0x7a}], &(0x7f0000000380)=[0xffffffffffff7fff]}, 0x20) io_uring_register$IORING_REGISTER_RESTRICTIONS(r2, 0xb, &(0x7f0000000440)=[@ioring_restriction_register_op={0x0, 0x14}, @ioring_restriction_register_op={0x0, 0x6}, @ioring_restriction_sqe_flags_required={0x3, 0x17}], 0x3) (async) io_uring_register$IORING_REGISTER_RESTRICTIONS(r2, 0xb, &(0x7f0000000440)=[@ioring_restriction_register_op={0x0, 0x14}, @ioring_restriction_register_op={0x0, 0x6}, @ioring_restriction_sqe_flags_required={0x3, 0x17}], 0x3) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf09]}, 0x8) 00:11:54 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x5, 0x5}}}, 0x90) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {}, 0x5, 0x5}}}, 0x90) 00:11:54 executing program 4: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x80080, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000800000/0x800000)=nil, &(0x7f0000e1f000/0x2000)=nil, 0x0, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[r2], 0x1) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf02]}, 0x8) 00:11:54 executing program 2: r0 = syz_open_dev$audion(&(0x7f00000006c0), 0xfffffffffffffc01, 0x400043) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0xe, 0x7, &(0x7f00000000c0)=@framed={{0x18, 0x2}, [@map_fd={0x18, 0x5, 0x1, 0x0, r0}, @map_val={0x18, 0x7, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x2}]}, &(0x7f0000000400)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0xe, 0x7, &(0x7f00000000c0)=@framed={{0x18, 0x2}, [@map_fd={0x18, 0x5, 0x1, 0x0, r0}, @map_val={0x18, 0x7, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x2}]}, &(0x7f0000000400)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00', 0x0}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r1, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000200)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, &(0x7f00000002c0)=[0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0], 0x0, 0x8, &(0x7f0000000340)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f00000003c0), &(0x7f0000000440), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000480)}}, 0x10) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r1, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000200)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, &(0x7f00000002c0)=[0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0], 0x0, 0x8, &(0x7f0000000340)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f00000003c0), &(0x7f0000000440), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000480)}}, 0x10) r4 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r4}}) r6 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) (async) r7 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r6}}) r8 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) (async) r9 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r9}, 0x2c, {'wfdno', 0x3d, r8}}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000640)=@bpf_lsm={0x1d, 0xf, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x5}, [@ldst={0x1, 0x1, 0x0, 0x8, 0xd, 0x20, 0x1}, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0xfff}, @exit, @map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x6}, @map_fd={0x18, 0x3, 0x1, 0x0, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xf0}, @cb_func={0x18, 0x1, 0x4, 0x0, 0x2}]}, &(0x7f0000000080)='GPL\x00', 0xb3, 0x22, &(0x7f0000000100)=""/34, 0x40f00, 0x1, '\x00', r2, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x5, 0x3}, 0x8, 0x10, &(0x7f00000001c0)={0x2, 0x5, 0x3f, 0x1}, 0x10, r3, 0x0, 0x0, &(0x7f0000000600)=[r5, r7, r9, 0x1, 0x1, 0xffffffffffffffff]}, 0x80) 00:11:54 executing program 3: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000800000/0x800000)=nil, &(0x7f0000e1f000/0x2000)=nil, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[r1], 0x1) io_uring_enter(0xffffffffffffffff, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf0d]}, 0x8) 00:11:54 executing program 5: r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0xe, 0x4, &(0x7f00000000c0)=@framed={{0x18, 0x2}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x60}]}, &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0x5) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000050423eeffffffffffff02000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) bind$packet(r2, &(0x7f0000000100)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f00000009c0)={{0x1, 0x1, 0x18, r0, {0x8}}, './file0\x00'}) r7 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) r8 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r7}}) r9 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) r10 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r10}, 0x2c, {'wfdno', 0x3d, r9}}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000ac0)={0x6, 0xf, &(0x7f0000000940)=@framed={{0x18, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x7f}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @call={0x85, 0x0, 0x0, 0xaa}, @generic={0x1, 0x1, 0x1, 0x1ff, 0x5}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x63, 0x0, 0x0, 0x0, 0x20}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x3}, @ldst={0x0, 0x2, 0x6, 0x1, 0x0, 0x0, 0x1}, @call={0x85, 0x0, 0x0, 0x15}]}, &(0x7f00000003c0)='syzkaller\x00', 0x3ff, 0x0, 0x0, 0x41000, 0x4, '\x00', r5, 0x25, r6, 0x8, &(0x7f0000000a00)={0x3, 0x1}, 0x8, 0x10, &(0x7f0000000a40)={0x4, 0x8, 0x2, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000a80)=[r8, r10]}, 0x80) sendmsg$sock(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000100)="d71b3c2afcfb7211072632c610d0c6d3ce48e12590b10f19bb717638b0b9def933280230c5e6d0c658b78f1f7fb0611c353ce545390151763c212d0fb1b6e6ca107cc0f802eec31920acd820bdb230bdd799e0d29a9a4776b812158917ef80b3a068ddf13d4bd0e0d77f28eee187d7b43e0d2436369829245b7134443c5c3dfcc5caaae9dba537062c669dd3c82c68e3f12f47c72aa2552d6d29cfa9555904e13e01fd8d51c13e8180f7bdc2dbd8639d7526f7b57114cd0e7b9aa8500cb58a5dc8", 0xc1}, {&(0x7f0000000000)="c5e1e641d6e6302e", 0x8}, {&(0x7f00000002c0)="05c7383623cfd38ad6c1e83ce68204b6385a60ccc752a64dba4bc97a426e5632f2ece11fa721dc59f9fe5458ddc06e3c56bfa4bc7f5ebd3aa16859737798b00256f039e9791b7a5483fad6b61612b6d21a3a28e4cdfa48d753e87521d73929177af1eeb6a0f3ebdf29d0fc1a2052f08b026f019961e043919871812e3d41f141870dc7653041ca557eb5c8b63d80a0e8cbc290fa6db2e3e3c6fa6ddfc749f51cdf79e18dd2db64bce0bd785907b4557336217cc33f939f516b04318c35396f28178ca4b607a91cf251d909a4cbe18d61c94e94b16c1a1f10f08f087002aa3d4da38c4cdbf72e1c017e44686770b9c16833e9b5fc65380de7", 0xf8}, {&(0x7f0000000440)="2d34825e721bccc69868cc34a94b223feca3da8c401306b5058331cfa435e0e8fe4ff97c613ee3709778aa090b9f89baaf374d331f121c6b465fbe2bb17e7f01e3d7cec623cb2f78a0900fc7de84a6e2f5817a9df3a7639e96440e8c74f2ac5b7859953011aeaea3e68531339bb4b26aa306e7ac7fdb0b29c3a6efdc8ca6b1397b88b97fd9c0c12ea79b6bc524ab2ce4a8", 0x91}, {&(0x7f0000000500)="b218a24af1612bb4dc5ca4e88fc70d4774b713a3b58b1ec2fc9e3771a5908128ef4f077b1153b8ac2a15984d97d9b71671a97207c1fd41e5158e8c32403deb203939944c9db9f66c3513feb129627d114a38632f664b066296c803a49287f12af0ee0b6a3e1843fffdd8fe6d5749f89175a6410deb33fd6131427f5fd56a91c05b37e676af", 0x85}, {&(0x7f0000000040)="3ad6b2", 0x3}, {&(0x7f00000005c0)="cf426f31434d7d302686fc125eaf9154a8fd5e9f40e1fde839e98b8c96477c8a0fb1d094381321b7748c3a2c182752f08d5924eb9c39806571f608b56bd710c50673a2bae09ac26517996336dbe941fb5d4b696c0e7a6b392c7fede77d2cad115d1a9e6bbc2bd1e58249d58afb0a163bf7f5d699657eae0558a5668d059f5c400fbbdca3518cc30cdb8037d7335bfea17ee061afdff871b0d4f615e4135848deb999a2e03ebe1b053e98d5fa11b26eeac94318e1aa", 0xb5}, {&(0x7f0000000680)="41d27e870fba6f822f2da74700f97cde834bebebdbb4eeaa0366dd0dc85e9d192fea289136e26cdc7d0e0a69d0993c197d00dfba5057740b9e6cc89722044d7fd24fcd36730c940fd9bad7e7dc9d7e5990005414df578bf442300bbec5f4ba984f36768b1bcfb23b91f6a0eaec1bd92b053b67cff4feb7364c78e5ba4a357859c45b9a64bd465cd54fff75f0b235a14d991b422af5577aea514686a870e51df335", 0xa1}, {&(0x7f0000000740)="1eda383a77be894cdda5f31643381e76a12d64fb447c2cbad7038a901133c7558cdee2e5021ac10512060ebecd372a0d6ffa21d6dd03623f42e8d0d2995072e432acb494", 0x44}, {&(0x7f00000007c0)="0f52c67da3e370abc84fb75f308a3975ad0a01640be2cb3e87338d3b276aa203da1051a7d467657eaa6bb7192807e1454991f25ba89360a890d36a7cfcf1771df1b17ee9bbdb2b885f02db72ed046c5e11e5e2ecf5c5a7157708e8312c2110153b9ee3028e64e8de5968b449802f13f36b34795674c6c61352c509ba09068d696eed2c40c1fae6ff7930ad56a366", 0x8e}], 0xa, &(0x7f0000000080)=[@timestamping={{0x14, 0x1, 0x25, 0xfffffff6}}, @mark={{0x14, 0x1, 0x24, 0x2}}], 0x30}, 0x4000000) 00:11:54 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x5, 0x5}}}, 0x90) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {}, 0x5, 0x5}}}, 0x90) [ 714.295537][ T6889] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 00:11:54 executing program 3: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000800000/0x800000)=nil, &(0x7f0000e1f000/0x2000)=nil, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[r1], 0x1) io_uring_enter(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={[0xf0d]}, 0x8) 00:11:54 executing program 2: r0 = syz_open_dev$audion(&(0x7f00000006c0), 0xfffffffffffffc01, 0x400043) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0xe, 0x7, &(0x7f00000000c0)=@framed={{0x18, 0x2}, [@map_fd={0x18, 0x5, 0x1, 0x0, r0}, @map_val={0x18, 0x7, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x2}]}, &(0x7f0000000400)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00', 0x0}) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r1, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000200)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, &(0x7f00000002c0)=[0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0], 0x0, 0x8, &(0x7f0000000340)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f00000003c0), &(0x7f0000000440), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000480)}}, 0x10) (async) r4 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r4}}) (async) r6 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) (async) r7 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r6}}) r8 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) (async) r9 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r9}, 0x2c, {'wfdno', 0x3d, r8}}) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000640)=@bpf_lsm={0x1d, 0xf, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x5}, [@ldst={0x1, 0x1, 0x0, 0x8, 0xd, 0x20, 0x1}, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0xfff}, @exit, @map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x6}, @map_fd={0x18, 0x3, 0x1, 0x0, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xf0}, @cb_func={0x18, 0x1, 0x4, 0x0, 0x2}]}, &(0x7f0000000080)='GPL\x00', 0xb3, 0x22, &(0x7f0000000100)=""/34, 0x40f00, 0x1, '\x00', r2, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x5, 0x3}, 0x8, 0x10, &(0x7f00000001c0)={0x2, 0x5, 0x3f, 0x1}, 0x10, r3, 0x0, 0x0, &(0x7f0000000600)=[r5, r7, r9, 0x1, 0x1, 0xffffffffffffffff]}, 0x80) 00:11:54 executing program 3: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000800000/0x800000)=nil, &(0x7f0000e1f000/0x2000)=nil, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[r1], 0x1) io_uring_enter(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={[0xf0d]}, 0x8) 00:11:54 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x5, 0x5}}}, 0x90) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {}, 0x5, 0x5}}}, 0x90) 00:11:54 executing program 2: ioctl$DRM_IOCTL_AGP_RELEASE(0xffffffffffffffff, 0x6431) 00:11:54 executing program 1: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[r1], 0x1) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6}}, './file0\x00'}) (async, rerun: 64) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000480), 0x10000, 0x0) (async, rerun: 64) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r5, 0x0, 0x1, 0x4}}, 0x20) (async, rerun: 64) write$RDMA_USER_CM_CMD_BIND(r4, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r5, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x5, 0x5}}}, 0x90) (rerun: 64) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r6, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r7, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {}, 0x5, 0x5}}}, 0x90) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r8, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r9, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r8, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r9, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x5, 0x5}}}, 0x90) (async, rerun: 32) io_uring_register$IORING_REGISTER_FILES(r3, 0x2, &(0x7f00000004c0)=[r2, r4, r0, r6, r2, r8, r1], 0x7) (async, rerun: 32) io_uring_register$IORING_REGISTER_BUFFERS2(r2, 0xf, &(0x7f0000000400)={0x2, 0x1, 0x0, &(0x7f0000000200)=[{&(0x7f0000000280)=""/218, 0xda}, {&(0x7f0000000180)=""/122, 0x7a}], &(0x7f0000000380)=[0xffffffffffff7fff]}, 0x20) (async) io_uring_register$IORING_REGISTER_RESTRICTIONS(r2, 0xb, &(0x7f0000000440)=[@ioring_restriction_register_op={0x0, 0x14}, @ioring_restriction_register_op={0x0, 0x6}, @ioring_restriction_sqe_flags_required={0x3, 0x17}], 0x3) (async) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf09]}, 0x8) 00:11:54 executing program 5: ioctl$sock_inet_SIOCSIFBRDADDR(0xffffffffffffffff, 0x891a, &(0x7f0000000180)={'veth0_to_hsr\x00', {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}) r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x6f, 0xc800) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[r1], 0x1) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf09]}, 0x8) ioctl$USBDEVFS_RESETEP(r1, 0x80045503, &(0x7f00000000c0)={0x9}) 00:11:54 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x5, 0x5}}}, 0x90) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {}, 0x5, 0x5}}}, 0x90) 00:11:54 executing program 3: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000800000/0x800000)=nil, &(0x7f0000e1f000/0x2000)=nil, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[r1], 0x1) io_uring_enter(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={[0xf0d]}, 0x8) 00:11:54 executing program 4: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) (async) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x80080, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000800000/0x800000)=nil, &(0x7f0000e1f000/0x2000)=nil, 0x0, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[r2], 0x1) (async) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf02]}, 0x8) 00:11:54 executing program 2: ioctl$DRM_IOCTL_AGP_RELEASE(0xffffffffffffffff, 0x6431) 00:11:54 executing program 2: ioctl$DRM_IOCTL_AGP_RELEASE(0xffffffffffffffff, 0x6431) 00:11:54 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x5, 0x5}}}, 0x90) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {}, 0x5, 0x5}}}, 0x90) 00:11:54 executing program 3: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000800000/0x800000)=nil, &(0x7f0000e1f000/0x2000)=nil, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[r1], 0x1) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, 0x0, 0x0) 00:11:54 executing program 2: r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0xe, 0x4, &(0x7f00000000c0)=@framed={{0x18, 0x2}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x6c}]}, &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x4, 0xff, 0x1f, 0x6, 0x0, @mcast2, @local, 0x80, 0x40, 0x0, 0x3}}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000100)={r0, r1, 0x25, 0x1b}, 0x10) 00:11:54 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={0x0, r1}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x5, 0x5}}}, 0x90) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {}, 0x5, 0x5}}}, 0x90) 00:11:54 executing program 4: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x80080, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000800000/0x800000)=nil, &(0x7f0000e1f000/0x2000)=nil, 0x0, 0x0) (async, rerun: 32) r2 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) (rerun: 32) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[r2], 0x1) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf02]}, 0x8) 00:11:54 executing program 1: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100)={0x0, 0x1de4}, &(0x7f0000000000/0x4000)=nil, &(0x7f0000001000/0x3000)=nil, &(0x7f00000002c0), &(0x7f00000003c0)) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[r1], 0x1) r2 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f00000004c0)=ANY=[@ANYBLOB="010000005d040000180000002c5934922d9dd4927c19a80aec3e825bb067fad5e5338f752bc619251a4748cd5207042277b8ed4b648a35190c982a390d662a09619921f813a954de1a24be3d50d9b8778ee49845c3bbd2554c26f22dc91cc8097cdef2ef8aac734eeee9baaf06023c26f0b8751b733051a958bd6138a8a2a50261291fb080df0586a19861f5abc4e2e9ec3e13e9d6c196ba2efafaca7399c2e3b697ead476e30d0c005de591b7cb240e9bb90eb621416109c5b41b18cbca1c8e9b93cffa1a3b4fefcb26e82574844e2db1f3c09d5cc7146de6fa", @ANYRES32=r1, @ANYBLOB="01000000000000002e2f66696c653000"]) ioctl$USBDEVFS_REAPURB(r1, 0x4008550c, &(0x7f0000000200)) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf09]}, 0x8) 00:11:54 executing program 3: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000800000/0x800000)=nil, &(0x7f0000e1f000/0x2000)=nil, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[r1], 0x1) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, 0x0, 0x0) 00:11:54 executing program 5: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000800000/0x800000)=nil, &(0x7f0000e1f000/0x2000)=nil, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[r1], 0x1) io_uring_enter(r0, 0x80040b3, 0x10, 0x0, &(0x7f0000000000)={[0xf02]}, 0x8) 00:11:54 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={0x0, r1}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x5, 0x5}}}, 0x90) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {}, 0x5, 0x5}}}, 0x90) 00:11:54 executing program 2: r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0xe, 0x4, &(0x7f00000000c0)=@framed={{0x18, 0x2}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x6c}]}, &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x4, 0xff, 0x1f, 0x6, 0x0, @mcast2, @local, 0x80, 0x40, 0x0, 0x3}}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000100)={r0, r1, 0x25, 0x1b}, 0x10) 00:11:54 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={0x0, r1}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x5, 0x5}}}, 0x90) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {}, 0x5, 0x5}}}, 0x90) 00:11:54 executing program 3: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000800000/0x800000)=nil, &(0x7f0000e1f000/0x2000)=nil, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[r1], 0x1) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, 0x0, 0x0) 00:11:54 executing program 2: r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0xe, 0x4, &(0x7f00000000c0)=@framed={{0x18, 0x2}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x6c}]}, &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x4, 0xff, 0x1f, 0x6, 0x0, @mcast2, @local, 0x80, 0x40, 0x0, 0x3}}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000100)={r0, r1, 0x25, 0x1b}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0xe, 0x4, &(0x7f00000000c0)=@framed={{0x18, 0x2}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x6c}]}, &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x4, 0xff, 0x1f, 0x6, 0x0, @mcast2, @local, 0x80, 0x40, 0x0, 0x3}}) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000100)={r0, r1, 0x25, 0x1b}, 0x10) (async) 00:11:54 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000), r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x5, 0x5}}}, 0x90) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {}, 0x5, 0x5}}}, 0x90) 00:11:54 executing program 3: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000800000/0x800000)=nil, &(0x7f0000e1f000/0x2000)=nil, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[r1], 0x1) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000), 0x8) 00:11:54 executing program 1: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100)={0x0, 0x1de4}, &(0x7f0000000000/0x4000)=nil, &(0x7f0000001000/0x3000)=nil, &(0x7f00000002c0), &(0x7f00000003c0)) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[r1], 0x1) (async) r2 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) (async) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f00000004c0)=ANY=[@ANYBLOB="010000005d040000180000002c5934922d9dd4927c19a80aec3e825bb067fad5e5338f752bc619251a4748cd5207042277b8ed4b648a35190c982a390d662a09619921f813a954de1a24be3d50d9b8778ee49845c3bbd2554c26f22dc91cc8097cdef2ef8aac734eeee9baaf06023c26f0b8751b733051a958bd6138a8a2a50261291fb080df0586a19861f5abc4e2e9ec3e13e9d6c196ba2efafaca7399c2e3b697ead476e30d0c005de591b7cb240e9bb90eb621416109c5b41b18cbca1c8e9b93cffa1a3b4fefcb26e82574844e2db1f3c09d5cc7146de6fa", @ANYRES32=r1, @ANYBLOB="01000000000000002e2f66696c653000"]) (async) ioctl$USBDEVFS_REAPURB(r1, 0x4008550c, &(0x7f0000000200)) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf09]}, 0x8) 00:11:55 executing program 4: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000003c0)=0x0) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000800000/0x800000)=nil, &(0x7f0000e1f000/0x2000)=nil, 0x0, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SHUTDOWN={0x22, 0x22, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xda) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[r3], 0x1) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf02]}, 0x8) 00:11:55 executing program 2: r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0xe, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="188a5bd30200002387b1a9cd270172135ec2790000000000000000001c61106c00c8767ed8baaae977089589634f2c3ace5d5576afddce46e2f43f400f0a89d5badced98bb68bcf78e476e88038cd24bbdd71856309abf23ccab172c2bca2d9f7cae50ffec448d958e23825a727201fbc63d2f20d02db3dbc3a56f73049046f881a53b17309deb02448e256a898cb138fc4fe61679b0b52c0f875d9736890d9f9f7e21b600c82ec2b0aa41cdf6"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}}) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000001c0), 0x400480, 0x0) r4 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) r6 = syz_open_dev$cec(&(0x7f00000000c0), 0x1, 0x2) fcntl$setsig(r6, 0xa, 0x1d) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r4}}) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000200), 0x101000, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xd, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x6}, [@ldst={0x3, 0x3, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @cb_func={0x18, 0x3, 0x4, 0x0, 0xfffffffffffffffb}, @map_val={0x18, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8}]}, &(0x7f0000000040)='syzkaller\x00', 0x20, 0x41, &(0x7f0000000100)=""/65, 0x0, 0x18, '\x00', 0x0, 0x22, r2, 0x8, &(0x7f0000000080)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000180)={0x1, 0x4, 0x2, 0x5}, 0x10, 0xffffffffffffffff, r3, 0x0, &(0x7f0000000300)}, 0x80) 00:11:55 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000), r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x5, 0x5}}}, 0x90) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {}, 0x5, 0x5}}}, 0x90) 00:11:55 executing program 5: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000800000/0x800000)=nil, &(0x7f0000e1f000/0x2000)=nil, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[r1], 0x1) io_uring_enter(r0, 0x80040b3, 0x7, 0x0, &(0x7f0000000000)={[0xf02]}, 0x8) 00:11:55 executing program 1: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100)={0x0, 0x1de4}, &(0x7f0000000000/0x4000)=nil, &(0x7f0000001000/0x3000)=nil, &(0x7f00000002c0), &(0x7f00000003c0)) (async) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[r1], 0x1) r2 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) (async) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) (async) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f00000004c0)=ANY=[@ANYBLOB="010000005d040000180000002c5934922d9dd4927c19a80aec3e825bb067fad5e5338f752bc619251a4748cd5207042277b8ed4b648a35190c982a390d662a09619921f813a954de1a24be3d50d9b8778ee49845c3bbd2554c26f22dc91cc8097cdef2ef8aac734eeee9baaf06023c26f0b8751b733051a958bd6138a8a2a50261291fb080df0586a19861f5abc4e2e9ec3e13e9d6c196ba2efafaca7399c2e3b697ead476e30d0c005de591b7cb240e9bb90eb621416109c5b41b18cbca1c8e9b93cffa1a3b4fefcb26e82574844e2db1f3c09d5cc7146de6fa", @ANYRES32=r1, @ANYBLOB="01000000000000002e2f66696c653000"]) (async) ioctl$USBDEVFS_REAPURB(r1, 0x4008550c, &(0x7f0000000200)) (async) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf09]}, 0x8) 00:11:55 executing program 3: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000800000/0x800000)=nil, &(0x7f0000e1f000/0x2000)=nil, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[r1], 0x1) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000), 0x8) 00:11:55 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000), r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x5, 0x5}}}, 0x90) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {}, 0x5, 0x5}}}, 0x90) 00:11:55 executing program 1: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0)='\'', 0x1, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='westwood\x00', 0x9) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000000c0)=ANY=[], 0xfffffd9d) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendfile(r1, r2, 0x0, 0x8000002b) r3 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[r3], 0x1) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf09]}, 0x8) 00:11:55 executing program 2: r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0xe, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="188a5bd30200002387b1a9cd270172135ec2790000000000000000001c61106c00c8767ed8baaae977089589634f2c3ace5d5576afddce46e2f43f400f0a89d5badced98bb68bcf78e476e88038cd24bbdd71856309abf23ccab172c2bca2d9f7cae50ffec448d958e23825a727201fbc63d2f20d02db3dbc3a56f73049046f881a53b17309deb02448e256a898cb138fc4fe61679b0b52c0f875d9736890d9f9f7e21b600c82ec2b0aa41cdf6"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}}) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000001c0), 0x400480, 0x0) r4 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) r6 = syz_open_dev$cec(&(0x7f00000000c0), 0x1, 0x2) fcntl$setsig(r6, 0xa, 0x1d) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r4}}) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000200), 0x101000, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xd, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x6}, [@ldst={0x3, 0x3, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @cb_func={0x18, 0x3, 0x4, 0x0, 0xfffffffffffffffb}, @map_val={0x18, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8}]}, &(0x7f0000000040)='syzkaller\x00', 0x20, 0x41, &(0x7f0000000100)=""/65, 0x0, 0x18, '\x00', 0x0, 0x22, r2, 0x8, &(0x7f0000000080)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000180)={0x1, 0x4, 0x2, 0x5}, 0x10, 0xffffffffffffffff, r3, 0x0, &(0x7f0000000300)}, 0x80) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0xe, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="188a5bd30200002387b1a9cd270172135ec2790000000000000000001c61106c00c8767ed8baaae977089589634f2c3ace5d5576afddce46e2f43f400f0a89d5badced98bb68bcf78e476e88038cd24bbdd71856309abf23ccab172c2bca2d9f7cae50ffec448d958e23825a727201fbc63d2f20d02db3dbc3a56f73049046f881a53b17309deb02448e256a898cb138fc4fe61679b0b52c0f875d9736890d9f9f7e21b600c82ec2b0aa41cdf6"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) (async) openat$vcs(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) (async) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}}) (async) openat$dlm_control(0xffffffffffffff9c, &(0x7f00000001c0), 0x400480, 0x0) (async) openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) (async) openat$vcs(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) (async) syz_open_dev$cec(&(0x7f00000000c0), 0x1, 0x2) (async) fcntl$setsig(r6, 0xa, 0x1d) (async) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r4}}) (async) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000200), 0x101000, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xd, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x6}, [@ldst={0x3, 0x3, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @cb_func={0x18, 0x3, 0x4, 0x0, 0xfffffffffffffffb}, @map_val={0x18, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8}]}, &(0x7f0000000040)='syzkaller\x00', 0x20, 0x41, &(0x7f0000000100)=""/65, 0x0, 0x18, '\x00', 0x0, 0x22, r2, 0x8, &(0x7f0000000080)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000180)={0x1, 0x4, 0x2, 0x5}, 0x10, 0xffffffffffffffff, r3, 0x0, &(0x7f0000000300)}, 0x80) (async) 00:11:55 executing program 3: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000800000/0x800000)=nil, &(0x7f0000e1f000/0x2000)=nil, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[r1], 0x1) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000), 0x8) 00:11:55 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, 0xffffffffffffffff, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x5, 0x5}}}, 0x90) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {}, 0x5, 0x5}}}, 0x90) 00:11:55 executing program 3: setreuid(0x0, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x5, 0x5}}}, 0x90) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000101"}, 0x5, 0x5}}}, 0x90) 00:11:55 executing program 4: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000003c0)=0x0) (async) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000800000/0x800000)=nil, &(0x7f0000e1f000/0x2000)=nil, 0x0, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SHUTDOWN={0x22, 0x22, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xda) (async) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[r3], 0x1) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf02]}, 0x8) 00:11:55 executing program 2: r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0xe, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="188a5bd30200002387b1a9cd270172135ec2790000000000000000001c61106c00c8767ed8baaae977089589634f2c3ace5d5576afddce46e2f43f400f0a89d5badced98bb68bcf78e476e88038cd24bbdd71856309abf23ccab172c2bca2d9f7cae50ffec448d958e23825a727201fbc63d2f20d02db3dbc3a56f73049046f881a53b17309deb02448e256a898cb138fc4fe61679b0b52c0f875d9736890d9f9f7e21b600c82ec2b0aa41cdf6"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) r1 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) (async) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}}) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000001c0), 0x400480, 0x0) (async) r4 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) (async) r6 = syz_open_dev$cec(&(0x7f00000000c0), 0x1, 0x2) fcntl$setsig(r6, 0xa, 0x1d) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r4}}) (async) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000200), 0x101000, 0x0) (async, rerun: 64) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) (rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xd, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x6}, [@ldst={0x3, 0x3, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @cb_func={0x18, 0x3, 0x4, 0x0, 0xfffffffffffffffb}, @map_val={0x18, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8}]}, &(0x7f0000000040)='syzkaller\x00', 0x20, 0x41, &(0x7f0000000100)=""/65, 0x0, 0x18, '\x00', 0x0, 0x22, r2, 0x8, &(0x7f0000000080)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000180)={0x1, 0x4, 0x2, 0x5}, 0x10, 0xffffffffffffffff, r3, 0x0, &(0x7f0000000300)}, 0x80) 00:11:55 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, 0xffffffffffffffff, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x5, 0x5}}}, 0x90) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {}, 0x5, 0x5}}}, 0x90) 00:11:55 executing program 3: setreuid(0x0, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x5, 0x5}}}, 0x90) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000010000000001"}, 0x5, 0x5}}}, 0x90) 00:11:55 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x5, 0x5}}}, 0x90) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x5, 0x5}}}, 0x90) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r5, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r4, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r5, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000020000000001"}, 0x5, 0x5}}}, 0x90) 00:11:55 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, 0xffffffffffffffff, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x5, 0x5}}}, 0x90) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {}, 0x5, 0x5}}}, 0x90) 00:11:55 executing program 2: r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0xe, 0x3, &(0x7f00000000c0)=@framed={{0x18, 0x2}}, &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180), 0x10000, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x5}}, './file0\x00'}) r3 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) r5 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000340)={'wlan1\x00'}) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r3}}) ioctl$SIOCAX25CTLCON(r2, 0x89e8, &(0x7f0000000380)={@null, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0xac40b9be0f26c4e8, 0x1ff, 0x6, [@null, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="0c84200004000000052400080215000008d19b00dffa00008fa4f4ff01000000"], &(0x7f0000000040)='syzkaller\x00', 0x9, 0x3b, &(0x7f0000000080)=""/59, 0x41000, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x6, 0x3}, 0x8, 0x10, &(0x7f0000000140)={0x0, 0x8, 0x6}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000200)=[r1, 0x1, 0xffffffffffffffff, r2, r4]}, 0x80) 00:11:56 executing program 1: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0)='\'', 0x1, 0x0, 0x0, 0x0) (async) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='westwood\x00', 0x9) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000000c0)=ANY=[], 0xfffffd9d) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) sendfile(r1, r2, 0x0, 0x8000002b) r3 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[r3], 0x1) (async) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf09]}, 0x8) 00:11:56 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x5, 0x5}}}, 0x90) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x5, 0x5}}}, 0x90) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r5, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r4, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r5, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000020000000001"}, 0x5, 0x5}}}, 0x90) 00:11:56 executing program 5: setreuid(0x0, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x5, 0x5}}}, 0x90) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000002000000000001"}, 0x5, 0x5}}}, 0x90) 00:11:56 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x5, 0x5}}}, 0x90) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {}, 0x5, 0x5}}}, 0x90) 00:11:56 executing program 4: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000003c0)=0x0) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000800000/0x800000)=nil, &(0x7f0000e1f000/0x2000)=nil, 0x0, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SHUTDOWN={0x22, 0x22, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xda) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[r3], 0x1) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf02]}, 0x8) syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) (async) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000800000/0x800000)=nil, &(0x7f0000e1f000/0x2000)=nil, 0x0, 0x0) (async) syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) (async) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SHUTDOWN={0x22, 0x22, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xda) (async) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[r3], 0x1) (async) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf02]}, 0x8) (async) 00:11:56 executing program 2: r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0xe, 0x3, &(0x7f00000000c0)=@framed={{0x18, 0x2}}, &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180), 0x10000, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x5}}, './file0\x00'}) r3 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) r5 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000340)={'wlan1\x00'}) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r3}}) ioctl$SIOCAX25CTLCON(r2, 0x89e8, &(0x7f0000000380)={@null, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0xac40b9be0f26c4e8, 0x1ff, 0x6, [@null, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="0c84200004000000052400080215000008d19b00dffa00008fa4f4ff01000000"], &(0x7f0000000040)='syzkaller\x00', 0x9, 0x3b, &(0x7f0000000080)=""/59, 0x41000, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x6, 0x3}, 0x8, 0x10, &(0x7f0000000140)={0x0, 0x8, 0x6}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000200)=[r1, 0x1, 0xffffffffffffffff, r2, r4]}, 0x80) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0xe, 0x3, &(0x7f00000000c0)=@framed={{0x18, 0x2}}, &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180), 0x10000, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x5}}, './file0\x00'}) (async) openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) (async) openat$vcs(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) (async) socket$igmp6(0xa, 0x3, 0x2) (async) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000340)={'wlan1\x00'}) (async) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r3}}) (async) ioctl$SIOCAX25CTLCON(r2, 0x89e8, &(0x7f0000000380)={@null, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0xac40b9be0f26c4e8, 0x1ff, 0x6, [@null, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="0c84200004000000052400080215000008d19b00dffa00008fa4f4ff01000000"], &(0x7f0000000040)='syzkaller\x00', 0x9, 0x3b, &(0x7f0000000080)=""/59, 0x41000, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x6, 0x3}, 0x8, 0x10, &(0x7f0000000140)={0x0, 0x8, 0x6}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000200)=[r1, 0x1, 0xffffffffffffffff, r2, r4]}, 0x80) (async) 00:11:56 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x5, 0x5}}}, 0x90) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {}, 0x5, 0x5}}}, 0x90) 00:11:56 executing program 5: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000800000/0x800000)=nil, &(0x7f0000e1f000/0x2000)=nil, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[r1], 0x1) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf0d]}, 0x8) (fail_nth: 1) 00:11:56 executing program 3: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000800000/0x800000)=nil, &(0x7f0000e1f000/0x2000)=nil, 0x0, 0x0) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf13]}, 0x8) (fail_nth: 1) [ 716.153709][ T7048] FAULT_INJECTION: forcing a failure. [ 716.153709][ T7048] name failslab, interval 1, probability 0, space 0, times 0 [ 716.162718][ T7051] FAULT_INJECTION: forcing a failure. [ 716.162718][ T7051] name failslab, interval 1, probability 0, space 0, times 0 00:11:56 executing program 2: r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0xe, 0x3, &(0x7f00000000c0)=@framed={{0x18, 0x2}}, &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180), 0x10000, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x5}}, './file0\x00'}) (async) r3 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) (async) r5 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000340)={'wlan1\x00'}) (async, rerun: 32) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r3}}) (async, rerun: 32) ioctl$SIOCAX25CTLCON(r2, 0x89e8, &(0x7f0000000380)={@null, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0xac40b9be0f26c4e8, 0x1ff, 0x6, [@null, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="0c84200004000000052400080215000008d19b00dffa00008fa4f4ff01000000"], &(0x7f0000000040)='syzkaller\x00', 0x9, 0x3b, &(0x7f0000000080)=""/59, 0x41000, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x6, 0x3}, 0x8, 0x10, &(0x7f0000000140)={0x0, 0x8, 0x6}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000200)=[r1, 0x1, 0xffffffffffffffff, r2, r4]}, 0x80) [ 716.179232][ T7048] CPU: 0 PID: 7048 Comm: syz-executor.5 Not tainted 5.15.120-syzkaller #0 [ 716.181051][ T7048] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 00:11:56 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x5, 0x5}}}, 0x90) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {}, 0x5, 0x5}}}, 0x90) [ 716.183152][ T7048] Call trace: [ 716.183858][ T7048] dump_backtrace+0x0/0x530 [ 716.184872][ T7048] show_stack+0x2c/0x3c [ 716.185787][ T7048] dump_stack_lvl+0x108/0x170 [ 716.186798][ T7048] dump_stack+0x1c/0x58 [ 716.187729][ T7048] should_fail+0x400/0x5cc [ 716.188641][ T7048] __should_failslab+0xbc/0x110 [ 716.189619][ T7048] should_failslab+0x10/0x28 [ 716.190596][ T7048] slab_pre_alloc_hook+0x64/0xe8 [ 716.191709][ T7048] kmem_cache_alloc_bulk+0x50/0x4c0 [ 716.192818][ T7048] io_submit_sqes+0x4f00/0x8970 [ 716.193822][ T7048] __arm64_sys_io_uring_enter+0x2a0/0x1cb8 [ 716.195111][ T7048] invoke_syscall+0x98/0x2b8 [ 716.196160][ T7048] el0_svc_common+0x138/0x258 [ 716.197220][ T7048] do_el0_svc+0x58/0x14c [ 716.198095][ T7048] el0_svc+0x7c/0x1f0 [ 716.199047][ T7048] el0t_64_sync_handler+0x84/0xe4 [ 716.200180][ T7048] el0t_64_sync+0x1a0/0x1a4 [ 716.206891][ T7051] CPU: 0 PID: 7051 Comm: syz-executor.3 Not tainted 5.15.120-syzkaller #0 [ 716.208618][ T7051] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 716.210632][ T7051] Call trace: [ 716.211329][ T7051] dump_backtrace+0x0/0x530 [ 716.212295][ T7051] show_stack+0x2c/0x3c [ 716.213169][ T7051] dump_stack_lvl+0x108/0x170 [ 716.214069][ T7051] dump_stack+0x1c/0x58 [ 716.214985][ T7051] should_fail+0x400/0x5cc [ 716.215874][ T7051] __should_failslab+0xbc/0x110 [ 716.216990][ T7051] should_failslab+0x10/0x28 [ 716.218002][ T7051] slab_pre_alloc_hook+0x64/0xe8 [ 716.219069][ T7051] kmem_cache_alloc_bulk+0x50/0x4c0 [ 716.220070][ T7051] io_submit_sqes+0x4f00/0x8970 [ 716.221200][ T7051] __arm64_sys_io_uring_enter+0x2a0/0x1cb8 [ 716.222369][ T7051] invoke_syscall+0x98/0x2b8 [ 716.223309][ T7051] el0_svc_common+0x138/0x258 [ 716.224271][ T7051] do_el0_svc+0x58/0x14c [ 716.225197][ T7051] el0_svc+0x7c/0x1f0 [ 716.226043][ T7051] el0t_64_sync_handler+0x84/0xe4 [ 716.227049][ T7051] el0t_64_sync+0x1a0/0x1a4 00:11:56 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, 0x0, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {}, 0x5, 0x5}}}, 0x90) 00:11:56 executing program 1: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0)='\'', 0x1, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='westwood\x00', 0x9) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000000c0)=ANY=[], 0xfffffd9d) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendfile(r1, r2, 0x0, 0x8000002b) r3 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[r3], 0x1) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf09]}, 0x8) syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) (async) sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0)='\'', 0x1, 0x0, 0x0, 0x0) (async) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='westwood\x00', 0x9) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) (async) write$binfmt_script(r2, &(0x7f00000000c0)=ANY=[], 0xfffffd9d) (async) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendfile(r1, r2, 0x0, 0x8000002b) (async) syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x0) (async) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[r3], 0x1) (async) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf09]}, 0x8) (async) 00:11:56 executing program 4: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x800000, 0x0, 0x0, 0x3dd}, &(0x7f0000800000/0x800000)=nil, &(0x7f0000e1f000/0x2000)=nil, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[r1], 0x1) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf02]}, 0x8) 00:11:56 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0xe, 0x4, &(0x7f00000000c0)=@framed={{0x18, 0x2}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x6c}]}, &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000001c0), 0x509040, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000340)={r5, r4, 0x25, 0x2}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000050423eeffffffffffff02000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) bind$packet(r1, &(0x7f0000000100)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r8, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000050423eeffffffffffff02000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) bind$packet(r6, &(0x7f0000000100)={0x11, 0x0, r9, 0x1, 0x0, 0x6, @multicast}, 0x14) sendmsg$nl_route(r5, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)=@ipv4_getnexthop={0x2c, 0x6a, 0x4, 0x70bd2c, 0x25dfdbff, {}, [@NHA_OIF={0x8, 0x5, r4}, @NHA_FDB={0x4}, @NHA_OIF={0x8, 0x5, r9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008000}, 0x24000000) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r10}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, {{0x8}, {0x8}}}}}]}, 0x40}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x6, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0xde}, [@map_fd={0x18, 0x4, 0x1, 0x0, 0x1}, @generic={0xff, 0x1, 0x1, 0x803, 0x10000}]}, &(0x7f0000000380)='GPL\x00', 0x101, 0x66, &(0x7f0000000100)=""/102, 0x41100, 0x8, '\x00', r10, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000080)={0xa, 0x2}, 0x8, 0x10, &(0x7f0000000180)={0x2, 0x1, 0x9000000, 0x7}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000001c0)}, 0x80) 00:11:56 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, 0x0, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {}, 0x5, 0x5}}}, 0x90) 00:11:56 executing program 5: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000800000/0x800000)=nil, &(0x7f0000e1f000/0x2000)=nil, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[r1], 0x1) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf0d]}, 0x8) (fail_nth: 2) 00:11:56 executing program 3: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000800000/0x800000)=nil, &(0x7f0000e1f000/0x2000)=nil, 0x0, 0x0) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf13]}, 0x8) (fail_nth: 2) [ 716.880769][ T7070] FAULT_INJECTION: forcing a failure. [ 716.880769][ T7070] name failslab, interval 1, probability 0, space 0, times 0 [ 716.883421][ T7070] CPU: 1 PID: 7070 Comm: syz-executor.5 Not tainted 5.15.120-syzkaller #0 [ 716.885281][ T7070] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 716.887443][ T7070] Call trace: [ 716.888145][ T7070] dump_backtrace+0x0/0x530 [ 716.889125][ T7070] show_stack+0x2c/0x3c [ 716.890013][ T7070] dump_stack_lvl+0x108/0x170 [ 716.890994][ T7070] dump_stack+0x1c/0x58 [ 716.891887][ T7070] should_fail+0x400/0x5cc [ 716.892813][ T7070] __should_failslab+0xbc/0x110 [ 716.893923][ T7070] should_failslab+0x10/0x28 [ 716.894913][ T7070] slab_pre_alloc_hook+0x64/0xe8 [ 716.895926][ T7070] kmem_cache_alloc_bulk+0x50/0x4c0 [ 716.897021][ T7070] io_submit_sqes+0x4f00/0x8970 [ 716.898071][ T7070] __arm64_sys_io_uring_enter+0x2a0/0x1cb8 [ 716.899327][ T7070] invoke_syscall+0x98/0x2b8 [ 716.900394][ T7070] el0_svc_common+0x138/0x258 [ 716.901398][ T7070] do_el0_svc+0x58/0x14c [ 716.902247][ T7070] el0_svc+0x7c/0x1f0 [ 716.903039][ T7070] el0t_64_sync_handler+0x84/0xe4 [ 716.904068][ T7070] el0t_64_sync+0x1a0/0x1a4 [ 716.909689][ T7073] FAULT_INJECTION: forcing a failure. [ 716.909689][ T7073] name failslab, interval 1, probability 0, space 0, times 0 [ 716.914819][ T7073] CPU: 0 PID: 7073 Comm: syz-executor.3 Not tainted 5.15.120-syzkaller #0 [ 716.916573][ T7073] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 716.918718][ T7073] Call trace: [ 716.919353][ T7073] dump_backtrace+0x0/0x530 [ 716.920284][ T7073] show_stack+0x2c/0x3c [ 716.921112][ T7073] dump_stack_lvl+0x108/0x170 [ 716.922187][ T7073] dump_stack+0x1c/0x58 [ 716.923034][ T7073] should_fail+0x400/0x5cc [ 716.923997][ T7073] __should_failslab+0xbc/0x110 [ 716.925021][ T7073] should_failslab+0x10/0x28 [ 716.926008][ T7073] slab_pre_alloc_hook+0x64/0xe8 [ 716.927053][ T7073] kmem_cache_alloc_bulk+0x50/0x4c0 [ 716.928072][ T7073] io_submit_sqes+0x4f00/0x8970 [ 716.929147][ T7073] __arm64_sys_io_uring_enter+0x2a0/0x1cb8 [ 716.930368][ T7073] invoke_syscall+0x98/0x2b8 [ 716.931302][ T7073] el0_svc_common+0x138/0x258 [ 716.932239][ T7073] do_el0_svc+0x58/0x14c [ 716.933091][ T7073] el0_svc+0x7c/0x1f0 [ 716.933899][ T7073] el0t_64_sync_handler+0x84/0xe4 [ 716.934986][ T7073] el0t_64_sync+0x1a0/0x1a4 00:11:56 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, 0x0, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {}, 0x5, 0x5}}}, 0x90) [ 716.949421][ T7074] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 716.997880][ T7072] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 00:11:57 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x5, 0x5}}}, 0x90) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {}, 0x5, 0x5}}}, 0x90) 00:11:57 executing program 5: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000800000/0x800000)=nil, &(0x7f0000e1f000/0x2000)=nil, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[r1], 0x1) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf0d]}, 0x8) (fail_nth: 3) 00:11:57 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x5, 0x5}}}, 0x90) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {}, 0x5, 0x5}}}, 0x90) 00:11:57 executing program 4: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x800000, 0x0, 0x0, 0x3dd}, &(0x7f0000800000/0x800000)=nil, &(0x7f0000e1f000/0x2000)=nil, 0x0, 0x0) (async) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[r1], 0x1) (async) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf02]}, 0x8) 00:11:57 executing program 3: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000800000/0x800000)=nil, &(0x7f0000e1f000/0x2000)=nil, 0x0, 0x0) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf13]}, 0x8) (fail_nth: 3) [ 717.179943][ T7084] FAULT_INJECTION: forcing a failure. [ 717.179943][ T7084] name failslab, interval 1, probability 0, space 0, times 0 [ 717.183644][ T7084] CPU: 1 PID: 7084 Comm: syz-executor.5 Not tainted 5.15.120-syzkaller #0 [ 717.185517][ T7084] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 717.187713][ T7084] Call trace: [ 717.188419][ T7084] dump_backtrace+0x0/0x530 [ 717.189386][ T7084] show_stack+0x2c/0x3c [ 717.190324][ T7084] dump_stack_lvl+0x108/0x170 [ 717.191325][ T7084] dump_stack+0x1c/0x58 [ 717.192206][ T7084] should_fail+0x400/0x5cc [ 717.193179][ T7084] __should_failslab+0xbc/0x110 [ 717.194195][ T7084] should_failslab+0x10/0x28 [ 717.195200][ T7084] slab_pre_alloc_hook+0x64/0xe8 [ 717.196225][ T7084] kmem_cache_alloc_bulk+0x50/0x4c0 [ 717.197303][ T7084] io_submit_sqes+0x4f00/0x8970 [ 717.198294][ T7084] __arm64_sys_io_uring_enter+0x2a0/0x1cb8 [ 717.199552][ T7084] invoke_syscall+0x98/0x2b8 [ 717.200567][ T7084] el0_svc_common+0x138/0x258 [ 717.201496][ T7084] do_el0_svc+0x58/0x14c [ 717.202434][ T7084] el0_svc+0x7c/0x1f0 [ 717.203314][ T7084] el0t_64_sync_handler+0x84/0xe4 [ 717.204284][ T7084] el0t_64_sync+0x1a0/0x1a4 [ 717.210148][ T7085] FAULT_INJECTION: forcing a failure. [ 717.210148][ T7085] name failslab, interval 1, probability 0, space 0, times 0 [ 717.226829][ T7085] CPU: 0 PID: 7085 Comm: syz-executor.3 Not tainted 5.15.120-syzkaller #0 [ 717.228746][ T7085] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 717.230899][ T7085] Call trace: [ 717.231582][ T7085] dump_backtrace+0x0/0x530 [ 717.232472][ T7085] show_stack+0x2c/0x3c [ 717.233385][ T7085] dump_stack_lvl+0x108/0x170 [ 717.234401][ T7085] dump_stack+0x1c/0x58 [ 717.235345][ T7085] should_fail+0x400/0x5cc [ 717.236383][ T7085] __should_failslab+0xbc/0x110 [ 717.237521][ T7085] should_failslab+0x10/0x28 [ 717.238491][ T7085] slab_pre_alloc_hook+0x64/0xe8 [ 717.239424][ T7085] kmem_cache_alloc_bulk+0x50/0x4c0 [ 717.240578][ T7085] io_submit_sqes+0x4f00/0x8970 [ 717.241567][ T7085] __arm64_sys_io_uring_enter+0x2a0/0x1cb8 [ 717.242738][ T7085] invoke_syscall+0x98/0x2b8 [ 717.243714][ T7085] el0_svc_common+0x138/0x258 [ 717.244667][ T7085] do_el0_svc+0x58/0x14c [ 717.245532][ T7085] el0_svc+0x7c/0x1f0 [ 717.246334][ T7085] el0t_64_sync_handler+0x84/0xe4 [ 717.247345][ T7085] el0t_64_sync+0x1a0/0x1a4 00:11:57 executing program 1: r0 = syz_io_uring_setup(0x5ac, &(0x7f0000000180)={0x0, 0x48e3, 0x20}, &(0x7f0000000000/0x2000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[r1], 0x1) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf09]}, 0x8) 00:11:57 executing program 3: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000800000/0x800000)=nil, &(0x7f0000e1f000/0x2000)=nil, 0x0, 0x0) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf13]}, 0x8) (fail_nth: 4) 00:11:57 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x5, 0x5}}}, 0x90) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {}, 0x5, 0x5}}}, 0x90) 00:11:57 executing program 4: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) (async) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x800000, 0x0, 0x0, 0x3dd}, &(0x7f0000800000/0x800000)=nil, &(0x7f0000e1f000/0x2000)=nil, 0x0, 0x0) (async) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[r1], 0x1) (async) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf02]}, 0x8) 00:11:57 executing program 5: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000800000/0x800000)=nil, &(0x7f0000e1f000/0x2000)=nil, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[r1], 0x1) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf0d]}, 0x8) (fail_nth: 4) 00:11:57 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0xe, 0x4, &(0x7f00000000c0)=@framed={{0x18, 0x2}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x6c}]}, &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) (async) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000001c0), 0x509040, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000340)={r5, r4, 0x25, 0x2}, 0x10) (async) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000050423eeffffffffffff02000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) (async) bind$packet(r1, &(0x7f0000000100)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) (async) r6 = socket$packet(0x11, 0x3, 0x300) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) (async) getsockname$packet(r8, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000050423eeffffffffffff02000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) bind$packet(r6, &(0x7f0000000100)={0x11, 0x0, r9, 0x1, 0x0, 0x6, @multicast}, 0x14) (async) sendmsg$nl_route(r5, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)=@ipv4_getnexthop={0x2c, 0x6a, 0x4, 0x70bd2c, 0x25dfdbff, {}, [@NHA_OIF={0x8, 0x5, r4}, @NHA_FDB={0x4}, @NHA_OIF={0x8, 0x5, r9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008000}, 0x24000000) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r10}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, {{0x8}, {0x8}}}}}]}, 0x40}}, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x6, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0xde}, [@map_fd={0x18, 0x4, 0x1, 0x0, 0x1}, @generic={0xff, 0x1, 0x1, 0x803, 0x10000}]}, &(0x7f0000000380)='GPL\x00', 0x101, 0x66, &(0x7f0000000100)=""/102, 0x41100, 0x8, '\x00', r10, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000080)={0xa, 0x2}, 0x8, 0x10, &(0x7f0000000180)={0x2, 0x1, 0x9000000, 0x7}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000001c0)}, 0x80) [ 717.522239][ T7116] FAULT_INJECTION: forcing a failure. [ 717.522239][ T7116] name failslab, interval 1, probability 0, space 0, times 0 [ 717.533133][ T7112] FAULT_INJECTION: forcing a failure. [ 717.533133][ T7112] name failslab, interval 1, probability 0, space 0, times 0 [ 717.537752][ T7112] CPU: 1 PID: 7112 Comm: syz-executor.5 Not tainted 5.15.120-syzkaller #0 [ 717.539586][ T7112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 717.541656][ T7112] Call trace: [ 717.542346][ T7112] dump_backtrace+0x0/0x530 [ 717.543332][ T7112] show_stack+0x2c/0x3c [ 717.544204][ T7112] dump_stack_lvl+0x108/0x170 [ 717.545215][ T7112] dump_stack+0x1c/0x58 [ 717.546111][ T7112] should_fail+0x400/0x5cc [ 717.546986][ T7112] __should_failslab+0xbc/0x110 [ 717.547940][ T7112] should_failslab+0x10/0x28 [ 717.548954][ T7112] slab_pre_alloc_hook+0x64/0xe8 [ 717.549996][ T7112] kmem_cache_alloc_bulk+0x50/0x4c0 [ 717.551143][ T7112] io_submit_sqes+0x4f00/0x8970 [ 717.552129][ T7112] __arm64_sys_io_uring_enter+0x2a0/0x1cb8 [ 717.553363][ T7112] invoke_syscall+0x98/0x2b8 [ 717.554281][ T7112] el0_svc_common+0x138/0x258 [ 717.555278][ T7112] do_el0_svc+0x58/0x14c [ 717.556211][ T7112] el0_svc+0x7c/0x1f0 [ 717.556395][ T7117] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 717.557011][ T7112] el0t_64_sync_handler+0x84/0xe4 [ 717.557029][ T7112] el0t_64_sync+0x1a0/0x1a4 00:11:57 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r1, 0x0, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x5, 0x5}}}, 0x90) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {}, 0x5, 0x5}}}, 0x90) 00:11:57 executing program 1: r0 = syz_io_uring_setup(0x5ac, &(0x7f0000000180)={0x0, 0x48e3, 0x20}, &(0x7f0000000000/0x2000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) (async) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[r1], 0x1) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf09]}, 0x8) [ 717.596739][ T7116] CPU: 0 PID: 7116 Comm: syz-executor.3 Not tainted 5.15.120-syzkaller #0 [ 717.598410][ T7116] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 717.600593][ T7116] Call trace: [ 717.601243][ T7116] dump_backtrace+0x0/0x530 [ 717.602186][ T7116] show_stack+0x2c/0x3c [ 717.603076][ T7116] dump_stack_lvl+0x108/0x170 [ 717.603998][ T7116] dump_stack+0x1c/0x58 [ 717.604917][ T7116] should_fail+0x400/0x5cc [ 717.605952][ T7116] __should_failslab+0xbc/0x110 [ 717.607009][ T7116] should_failslab+0x10/0x28 [ 717.607927][ T7116] slab_pre_alloc_hook+0x64/0xe8 [ 717.609049][ T7116] kmem_cache_alloc_bulk+0x50/0x4c0 [ 717.610141][ T7116] io_submit_sqes+0x4f00/0x8970 [ 717.611078][ T7116] __arm64_sys_io_uring_enter+0x2a0/0x1cb8 [ 717.612243][ T7116] invoke_syscall+0x98/0x2b8 [ 717.613220][ T7116] el0_svc_common+0x138/0x258 [ 717.614276][ T7116] do_el0_svc+0x58/0x14c [ 717.615093][ T7116] el0_svc+0x7c/0x1f0 [ 717.615947][ T7116] el0t_64_sync_handler+0x84/0xe4 [ 717.616981][ T7116] el0t_64_sync+0x1a0/0x1a4 00:11:57 executing program 4: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000800000/0x800000)=nil, &(0x7f0000e1f000/0x2000)=nil, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) r2 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000000c0)=@urb_type_interrupt={0x1, {0x6}, 0x5, 0x4, &(0x7f0000000180)="a76a41a885df572cf38e094628ece2c0204e1f9fea6c4058a45349fb5368266855f2d8acf4e9a67fee2ec116a05e0e909cb106dac68ebf9d13803e1e8d828de621fe01d2b3a88f5e3f977b07b0c7ce66bdc1e349a66357156dcbcc844c525e5ad8ff777599595e86", 0x68, 0x2, 0x7f, 0x0, 0x101, 0x24, &(0x7f0000000400)="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"}) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[r1], 0x1) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf02]}, 0x8) 00:11:57 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r1, 0x0, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x5, 0x5}}}, 0x90) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {}, 0x5, 0x5}}}, 0x90) 00:11:57 executing program 1: r0 = syz_io_uring_setup(0x5ac, &(0x7f0000000180)={0x0, 0x48e3, 0x20}, &(0x7f0000000000/0x2000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) (async) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[r1], 0x1) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf09]}, 0x8) 00:11:57 executing program 5: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000800000/0x800000)=nil, &(0x7f0000e1f000/0x2000)=nil, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[r1], 0x1) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf0d]}, 0x8) (fail_nth: 5) [ 717.753052][ T7134] FAULT_INJECTION: forcing a failure. [ 717.753052][ T7134] name failslab, interval 1, probability 0, space 0, times 0 00:11:57 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0xe, 0x4, &(0x7f00000000c0)=@framed={{0x18, 0x2}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x6c}]}, &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) (async) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) (async) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000001c0), 0x509040, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000340)={r5, r4, 0x25, 0x2}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000050423eeffffffffffff02000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) bind$packet(r1, &(0x7f0000000100)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) r6 = socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) (async) sendmsg$BATADV_CMD_GET_MESH(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r8, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000050423eeffffffffffff02000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) bind$packet(r6, &(0x7f0000000100)={0x11, 0x0, r9, 0x1, 0x0, 0x6, @multicast}, 0x14) (async) bind$packet(r6, &(0x7f0000000100)={0x11, 0x0, r9, 0x1, 0x0, 0x6, @multicast}, 0x14) sendmsg$nl_route(r5, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)=@ipv4_getnexthop={0x2c, 0x6a, 0x4, 0x70bd2c, 0x25dfdbff, {}, [@NHA_OIF={0x8, 0x5, r4}, @NHA_FDB={0x4}, @NHA_OIF={0x8, 0x5, r9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008000}, 0x24000000) (async) sendmsg$nl_route(r5, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)=@ipv4_getnexthop={0x2c, 0x6a, 0x4, 0x70bd2c, 0x25dfdbff, {}, [@NHA_OIF={0x8, 0x5, r4}, @NHA_FDB={0x4}, @NHA_OIF={0x8, 0x5, r9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008000}, 0x24000000) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r10}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, {{0x8}, {0x8}}}}}]}, 0x40}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x6, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0xde}, [@map_fd={0x18, 0x4, 0x1, 0x0, 0x1}, @generic={0xff, 0x1, 0x1, 0x803, 0x10000}]}, &(0x7f0000000380)='GPL\x00', 0x101, 0x66, &(0x7f0000000100)=""/102, 0x41100, 0x8, '\x00', r10, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000080)={0xa, 0x2}, 0x8, 0x10, &(0x7f0000000180)={0x2, 0x1, 0x9000000, 0x7}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000001c0)}, 0x80) [ 717.769184][ T7134] CPU: 1 PID: 7134 Comm: syz-executor.5 Not tainted 5.15.120-syzkaller #0 [ 717.771073][ T7134] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 717.773114][ T7134] Call trace: [ 717.773711][ T7134] dump_backtrace+0x0/0x530 [ 717.774653][ T7134] show_stack+0x2c/0x3c [ 717.775583][ T7134] dump_stack_lvl+0x108/0x170 [ 717.776541][ T7134] dump_stack+0x1c/0x58 [ 717.777357][ T7134] should_fail+0x400/0x5cc [ 717.778219][ T7134] __should_failslab+0xbc/0x110 [ 717.779177][ T7134] should_failslab+0x10/0x28 [ 717.780134][ T7134] slab_pre_alloc_hook+0x64/0xe8 [ 717.781134][ T7134] kmem_cache_alloc_bulk+0x50/0x4c0 [ 717.782204][ T7134] io_submit_sqes+0x4f00/0x8970 [ 717.783202][ T7134] __arm64_sys_io_uring_enter+0x2a0/0x1cb8 [ 717.784442][ T7134] invoke_syscall+0x98/0x2b8 [ 717.785489][ T7134] el0_svc_common+0x138/0x258 [ 717.786464][ T7134] do_el0_svc+0x58/0x14c [ 717.787293][ T7134] el0_svc+0x7c/0x1f0 [ 717.788141][ T7134] el0t_64_sync_handler+0x84/0xe4 [ 717.789198][ T7134] el0t_64_sync+0x1a0/0x1a4 00:11:57 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r1, 0x0, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x5, 0x5}}}, 0x90) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {}, 0x5, 0x5}}}, 0x90) 00:11:57 executing program 3: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000800000/0x800000)=nil, &(0x7f0000e1f000/0x2000)=nil, 0x0, 0x0) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf13]}, 0x8) (fail_nth: 5) 00:11:57 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0x5) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000000180)=ANY=[@ANYBLOB="6e6174000000000000000000000000000000000000000000000000000000000081000000a8e6798e80a4d6967b67e1e264ee397298cfdcc65e5138c8e46bcbfbb92dccd1c7428ab157a86ac6dc1518c5e8c5d58f606a1f0b2d8217345149eea39e90f5a8aa750f863345c3983fb31e9cd7fde6584d73122bbf642866467133f6b989b1bf09df8037b67ac4414545234bbb9fcb6735c0d5022caf3a1650ddd1e071818d530d"], &(0x7f0000000040)=0xa5) r1 = syz_io_uring_setup(0x5ad, &(0x7f00000002c0), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f00000000c0), &(0x7f00000003c0)) r2 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x0) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000240)=[r2], 0x1) io_uring_enter(r1, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf09]}, 0x8) [ 717.830303][ T7145] FAULT_INJECTION: forcing a failure. [ 717.830303][ T7145] name failslab, interval 1, probability 0, space 0, times 0 [ 717.834485][ T7140] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 717.852973][ T7145] CPU: 0 PID: 7145 Comm: syz-executor.3 Not tainted 5.15.120-syzkaller #0 [ 717.854638][ T7145] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 717.856778][ T7145] Call trace: [ 717.857499][ T7145] dump_backtrace+0x0/0x530 [ 717.858455][ T7145] show_stack+0x2c/0x3c [ 717.859338][ T7145] dump_stack_lvl+0x108/0x170 [ 717.860374][ T7145] dump_stack+0x1c/0x58 [ 717.861242][ T7145] should_fail+0x400/0x5cc [ 717.862139][ T7145] __should_failslab+0xbc/0x110 [ 717.863069][ T7145] should_failslab+0x10/0x28 [ 717.864034][ T7145] slab_pre_alloc_hook+0x64/0xe8 [ 717.865092][ T7145] kmem_cache_alloc_bulk+0x50/0x4c0 [ 717.866143][ T7145] io_submit_sqes+0x4f00/0x8970 [ 717.867197][ T7145] __arm64_sys_io_uring_enter+0x2a0/0x1cb8 [ 717.868400][ T7145] invoke_syscall+0x98/0x2b8 [ 717.869336][ T7145] el0_svc_common+0x138/0x258 [ 717.870313][ T7145] do_el0_svc+0x58/0x14c [ 717.871178][ T7145] el0_svc+0x7c/0x1f0 [ 717.872074][ T7145] el0t_64_sync_handler+0x84/0xe4 [ 717.873079][ T7145] el0t_64_sync+0x1a0/0x1a4 00:11:57 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x0, 0x5}}}, 0x90) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {}, 0x5, 0x5}}}, 0x90) 00:11:57 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0x5) (async, rerun: 64) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000000180)=ANY=[@ANYBLOB="6e6174000000000000000000000000000000000000000000000000000000000081000000a8e6798e80a4d6967b67e1e264ee397298cfdcc65e5138c8e46bcbfbb92dccd1c7428ab157a86ac6dc1518c5e8c5d58f606a1f0b2d8217345149eea39e90f5a8aa750f863345c3983fb31e9cd7fde6584d73122bbf642866467133f6b989b1bf09df8037b67ac4414545234bbb9fcb6735c0d5022caf3a1650ddd1e071818d530d"], &(0x7f0000000040)=0xa5) (async, rerun: 64) r1 = syz_io_uring_setup(0x5ad, &(0x7f00000002c0), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f00000000c0), &(0x7f00000003c0)) r2 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x0) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000240)=[r2], 0x1) io_uring_enter(r1, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf09]}, 0x8) [ 717.929279][ T7140] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 00:11:57 executing program 4: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) (async) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000800000/0x800000)=nil, &(0x7f0000e1f000/0x2000)=nil, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) (async) r2 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) (async) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) (async) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000000c0)=@urb_type_interrupt={0x1, {0x6}, 0x5, 0x4, &(0x7f0000000180)="a76a41a885df572cf38e094628ece2c0204e1f9fea6c4058a45349fb5368266855f2d8acf4e9a67fee2ec116a05e0e909cb106dac68ebf9d13803e1e8d828de621fe01d2b3a88f5e3f977b07b0c7ce66bdc1e349a66357156dcbcc844c525e5ad8ff777599595e86", 0x68, 0x2, 0x7f, 0x0, 0x101, 0x24, &(0x7f0000000400)="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"}) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[r1], 0x1) (async) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf02]}, 0x8) 00:11:57 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x0, 0x5}}}, 0x90) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {}, 0x5, 0x5}}}, 0x90) 00:11:57 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0x5) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000000180)=ANY=[@ANYBLOB="6e6174000000000000000000000000000000000000000000000000000000000081000000a8e6798e80a4d6967b67e1e264ee397298cfdcc65e5138c8e46bcbfbb92dccd1c7428ab157a86ac6dc1518c5e8c5d58f606a1f0b2d8217345149eea39e90f5a8aa750f863345c3983fb31e9cd7fde6584d73122bbf642866467133f6b989b1bf09df8037b67ac4414545234bbb9fcb6735c0d5022caf3a1650ddd1e071818d530d"], &(0x7f0000000040)=0xa5) r1 = syz_io_uring_setup(0x5ad, &(0x7f00000002c0), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f00000000c0), &(0x7f00000003c0)) r2 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x0) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000240)=[r2], 0x1) io_uring_enter(r1, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf09]}, 0x8) socket$inet_udplite(0x2, 0x2, 0x88) (async) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0x5) (async) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000000180)=ANY=[@ANYBLOB="6e6174000000000000000000000000000000000000000000000000000000000081000000a8e6798e80a4d6967b67e1e264ee397298cfdcc65e5138c8e46bcbfbb92dccd1c7428ab157a86ac6dc1518c5e8c5d58f606a1f0b2d8217345149eea39e90f5a8aa750f863345c3983fb31e9cd7fde6584d73122bbf642866467133f6b989b1bf09df8037b67ac4414545234bbb9fcb6735c0d5022caf3a1650ddd1e071818d530d"], &(0x7f0000000040)=0xa5) (async) syz_io_uring_setup(0x5ad, &(0x7f00000002c0), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f00000000c0), &(0x7f00000003c0)) (async) syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x0) (async) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000240)=[r2], 0x1) (async) io_uring_enter(r1, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf09]}, 0x8) (async) 00:11:58 executing program 3: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000800000/0x800000)=nil, &(0x7f0000e1f000/0x2000)=nil, 0x0, 0x0) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf13]}, 0x8) (fail_nth: 6) 00:11:58 executing program 5: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000800000/0x800000)=nil, &(0x7f0000e1f000/0x2000)=nil, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[r1], 0x1) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf0d]}, 0x8) (fail_nth: 6) 00:11:58 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0xe, 0x4, &(0x7f00000000c0)=@framed={{0x18, 0x2}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x6c}]}, &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}}) r3 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="7434c119", @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB=',\x00']) r5 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000002c0), 0x10000, 0x0) r6 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) r7 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r6}}) r8 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) r9 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r9}, 0x2c, {'wfdno', 0x3d, r8}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x7, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd0, 0x0, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0x78}, @jmp={0x5, 0x1, 0x8, 0x3, 0x7, 0xc, 0xffffffffffffffff}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x5e5b}]}, &(0x7f0000000080)='syzkaller\x00', 0x86f, 0x52, &(0x7f0000000100)=""/82, 0x41000, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x4, 0x3}, 0x8, 0x10, &(0x7f00000001c0)={0x4, 0x4, 0x8, 0xfff}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000300)=[r0, r2, r4, 0x1, r5, r7, r9, 0xffffffffffffffff, 0x1]}, 0x80) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'syz_tun\x00'}) [ 718.092742][ T7166] FAULT_INJECTION: forcing a failure. [ 718.092742][ T7166] name failslab, interval 1, probability 0, space 0, times 0 00:11:58 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x0, 0x5}}}, 0x90) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {}, 0x5, 0x5}}}, 0x90) [ 718.103303][ T7166] CPU: 1 PID: 7166 Comm: syz-executor.5 Not tainted 5.15.120-syzkaller #0 [ 718.104988][ T7166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 718.107021][ T7166] Call trace: [ 718.107715][ T7166] dump_backtrace+0x0/0x530 [ 718.108661][ T7166] show_stack+0x2c/0x3c [ 718.109535][ T7166] dump_stack_lvl+0x108/0x170 [ 718.110592][ T7166] dump_stack+0x1c/0x58 [ 718.111490][ T7166] should_fail+0x400/0x5cc [ 718.112399][ T7166] __should_failslab+0xbc/0x110 [ 718.113476][ T7166] should_failslab+0x10/0x28 [ 718.114562][ T7166] slab_pre_alloc_hook+0x64/0xe8 [ 718.115707][ T7166] kmem_cache_alloc_bulk+0x50/0x4c0 [ 718.116927][ T7166] io_submit_sqes+0x4f00/0x8970 [ 718.117942][ T7166] __arm64_sys_io_uring_enter+0x2a0/0x1cb8 [ 718.119189][ T7166] invoke_syscall+0x98/0x2b8 [ 718.120152][ T7166] el0_svc_common+0x138/0x258 [ 718.121080][ T7166] do_el0_svc+0x58/0x14c [ 718.121989][ T7166] el0_svc+0x7c/0x1f0 [ 718.122891][ T7166] el0t_64_sync_handler+0x84/0xe4 [ 718.123928][ T7166] el0t_64_sync+0x1a0/0x1a4 [ 718.132038][ T7173] FAULT_INJECTION: forcing a failure. [ 718.132038][ T7173] name failslab, interval 1, probability 0, space 0, times 0 [ 718.144000][ T7173] CPU: 1 PID: 7173 Comm: syz-executor.3 Not tainted 5.15.120-syzkaller #0 [ 718.145742][ T7173] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 718.147881][ T7173] Call trace: [ 718.148626][ T7173] dump_backtrace+0x0/0x530 [ 718.149556][ T7173] show_stack+0x2c/0x3c [ 718.150362][ T7173] dump_stack_lvl+0x108/0x170 00:11:58 executing program 1: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f00000000c0), &(0x7f00000003c0)) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[r1], 0x1) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf09]}, 0x8) [ 718.150380][ T7173] dump_stack+0x1c/0x58 [ 718.150391][ T7173] should_fail+0x400/0x5cc [ 718.150403][ T7173] __should_failslab+0xbc/0x110 [ 718.150416][ T7173] should_failslab+0x10/0x28 00:11:58 executing program 4: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000800000/0x800000)=nil, &(0x7f0000e1f000/0x2000)=nil, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) (async) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) (async) r2 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) (async) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000000c0)=@urb_type_interrupt={0x1, {0x6}, 0x5, 0x4, &(0x7f0000000180)="a76a41a885df572cf38e094628ece2c0204e1f9fea6c4058a45349fb5368266855f2d8acf4e9a67fee2ec116a05e0e909cb106dac68ebf9d13803e1e8d828de621fe01d2b3a88f5e3f977b07b0c7ce66bdc1e349a66357156dcbcc844c525e5ad8ff777599595e86", 0x68, 0x2, 0x7f, 0x0, 0x101, 0x24, &(0x7f0000000400)="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"}) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[r1], 0x1) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf02]}, 0x8) 00:11:58 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x5}}}, 0x90) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {}, 0x5, 0x5}}}, 0x90) [ 718.150428][ T7173] slab_pre_alloc_hook+0x64/0xe8 [ 718.150441][ T7173] kmem_cache_alloc_bulk+0x50/0x4c0 [ 718.150453][ T7173] io_submit_sqes+0x4f00/0x8970 [ 718.150464][ T7173] __arm64_sys_io_uring_enter+0x2a0/0x1cb8 [ 718.150478][ T7173] invoke_syscall+0x98/0x2b8 [ 718.150490][ T7173] el0_svc_common+0x138/0x258 00:11:58 executing program 1: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f00000000c0), &(0x7f00000003c0)) (async) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[r1], 0x1) (async) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf09]}, 0x8) [ 718.150501][ T7173] do_el0_svc+0x58/0x14c [ 718.150513][ T7173] el0_svc+0x7c/0x1f0 [ 718.150524][ T7173] el0t_64_sync_handler+0x84/0xe4 [ 718.150537][ T7173] el0t_64_sync+0x1a0/0x1a4 00:11:58 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x5}}}, 0x90) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {}, 0x5, 0x5}}}, 0x90) 00:11:58 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0xe, 0x4, &(0x7f00000000c0)=@framed={{0x18, 0x2}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x6c}]}, &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0xe, 0x4, &(0x7f00000000c0)=@framed={{0x18, 0x2}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x6c}]}, &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) (async) r1 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}}) openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) (async) r3 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) (async) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="7434c119", @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB=',\x00']) r5 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000002c0), 0x10000, 0x0) openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) (async) r6 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) r7 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r6}}) r8 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) r9 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r9}, 0x2c, {'wfdno', 0x3d, r8}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x7, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd0, 0x0, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0x78}, @jmp={0x5, 0x1, 0x8, 0x3, 0x7, 0xc, 0xffffffffffffffff}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x5e5b}]}, &(0x7f0000000080)='syzkaller\x00', 0x86f, 0x52, &(0x7f0000000100)=""/82, 0x41000, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x4, 0x3}, 0x8, 0x10, &(0x7f00000001c0)={0x4, 0x4, 0x8, 0xfff}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000300)=[r0, r2, r4, 0x1, r5, r7, r9, 0xffffffffffffffff, 0x1]}, 0x80) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'syz_tun\x00'}) 00:11:58 executing program 1: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f00000000c0), &(0x7f00000003c0)) (async, rerun: 32) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x0) (rerun: 32) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[r1], 0x1) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf09]}, 0x8) 00:11:58 executing program 5: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000800000/0x800000)=nil, &(0x7f0000e1f000/0x2000)=nil, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[r1], 0x1) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf0d]}, 0x8) (fail_nth: 7) 00:11:58 executing program 3: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000800000/0x800000)=nil, &(0x7f0000e1f000/0x2000)=nil, 0x0, 0x0) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf13]}, 0x8) (fail_nth: 7) 00:11:58 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x5}}}, 0x90) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {}, 0x5, 0x5}}}, 0x90) [ 718.401188][ T7199] FAULT_INJECTION: forcing a failure. [ 718.401188][ T7199] name failslab, interval 1, probability 0, space 0, times 0 [ 718.403824][ T7199] CPU: 0 PID: 7199 Comm: syz-executor.5 Not tainted 5.15.120-syzkaller #0 [ 718.405613][ T7199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 718.407685][ T7199] Call trace: [ 718.408377][ T7199] dump_backtrace+0x0/0x530 [ 718.409362][ T7199] show_stack+0x2c/0x3c [ 718.410227][ T7199] dump_stack_lvl+0x108/0x170 [ 718.411260][ T7199] dump_stack+0x1c/0x58 [ 718.412199][ T7199] should_fail+0x400/0x5cc [ 718.413046][ T7199] __should_failslab+0xbc/0x110 [ 718.414083][ T7199] should_failslab+0x10/0x28 [ 718.415076][ T7199] slab_pre_alloc_hook+0x64/0xe8 [ 718.416221][ T7199] kmem_cache_alloc_bulk+0x50/0x4c0 [ 718.417372][ T7199] io_submit_sqes+0x4f00/0x8970 [ 718.418335][ T7199] __arm64_sys_io_uring_enter+0x2a0/0x1cb8 [ 718.419585][ T7199] invoke_syscall+0x98/0x2b8 [ 718.420551][ T7199] el0_svc_common+0x138/0x258 [ 718.421520][ T7199] do_el0_svc+0x58/0x14c [ 718.422387][ T7199] el0_svc+0x7c/0x1f0 [ 718.423192][ T7199] el0t_64_sync_handler+0x84/0xe4 [ 718.424261][ T7199] el0t_64_sync+0x1a0/0x1a4 [ 718.434613][ T7203] FAULT_INJECTION: forcing a failure. [ 718.434613][ T7203] name failslab, interval 1, probability 0, space 0, times 0 [ 718.446775][ T7203] CPU: 1 PID: 7203 Comm: syz-executor.3 Not tainted 5.15.120-syzkaller #0 [ 718.448435][ T7203] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 718.450486][ T7203] Call trace: [ 718.451205][ T7203] dump_backtrace+0x0/0x530 [ 718.452234][ T7203] show_stack+0x2c/0x3c [ 718.453073][ T7203] dump_stack_lvl+0x108/0x170 [ 718.453968][ T7203] dump_stack+0x1c/0x58 [ 718.454827][ T7203] should_fail+0x400/0x5cc [ 718.455790][ T7203] __should_failslab+0xbc/0x110 [ 718.456788][ T7203] should_failslab+0x10/0x28 [ 718.457763][ T7203] slab_pre_alloc_hook+0x64/0xe8 [ 718.458841][ T7203] kmem_cache_alloc_bulk+0x50/0x4c0 [ 718.459937][ T7203] io_submit_sqes+0x4f00/0x8970 [ 718.460971][ T7203] __arm64_sys_io_uring_enter+0x2a0/0x1cb8 [ 718.462186][ T7203] invoke_syscall+0x98/0x2b8 [ 718.463184][ T7203] el0_svc_common+0x138/0x258 [ 718.464142][ T7203] do_el0_svc+0x58/0x14c [ 718.465157][ T7203] el0_svc+0x7c/0x1f0 [ 718.465975][ T7203] el0t_64_sync_handler+0x84/0xe4 [ 718.467005][ T7203] el0t_64_sync+0x1a0/0x1a4 00:11:58 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x5, 0x5}}}, 0x90) r2 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {}, 0x5, 0x5}}}, 0x90) 00:11:58 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0xe, 0x4, &(0x7f00000000c0)=@framed={{0x18, 0x2}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x6c}]}, &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) (async) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}}) r3 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) (async, rerun: 32) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) (rerun: 32) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="7434c119", @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB=',\x00']) (async) r5 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000002c0), 0x10000, 0x0) (async) r6 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) (async, rerun: 32) r7 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) (rerun: 32) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r6}}) r8 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) r9 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r9}, 0x2c, {'wfdno', 0x3d, r8}}) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x7, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd0, 0x0, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0x78}, @jmp={0x5, 0x1, 0x8, 0x3, 0x7, 0xc, 0xffffffffffffffff}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x5e5b}]}, &(0x7f0000000080)='syzkaller\x00', 0x86f, 0x52, &(0x7f0000000100)=""/82, 0x41000, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x4, 0x3}, 0x8, 0x10, &(0x7f00000001c0)={0x4, 0x4, 0x8, 0xfff}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000300)=[r0, r2, r4, 0x1, r5, r7, r9, 0xffffffffffffffff, 0x1]}, 0x80) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'syz_tun\x00'}) 00:11:58 executing program 4: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000800000/0x800000)=nil, &(0x7f0000e1f000/0x2000)=nil, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[r1], 0x1) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf02]}, 0x8) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1, {r1}}, './file0\x00'}) ioctl$USBDEVFS_BULK(r2, 0xc0185502, &(0x7f0000000200)={{{0x5, 0x1}}, 0x65, 0x8, &(0x7f0000000180)="7b2aabc717de1ac4fe65119d32fefa4d1575318dcaf0aa4681eb85eb82fb11d626a45b88ba42e563231bd7bffb72b1e9d571eb84e7eabffe902acab77a8abaa5784313be4ceaa4d21db907965fee6057c27ac697787442e466e0837147a131d1ce100a73e9"}) 00:11:58 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x5, 0x5}}}, 0x90) r2 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {}, 0x5, 0x5}}}, 0x90) 00:11:58 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x5, 0x5}}}, 0x90) r2 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {}, 0x5, 0x5}}}, 0x90) 00:11:58 executing program 3: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000800000/0x800000)=nil, &(0x7f0000e1f000/0x2000)=nil, 0x0, 0x0) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf13]}, 0x8) (fail_nth: 8) 00:11:58 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/netlink\x00') connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x101, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x5, 0x1}, 0xe) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0xe, 0x4, &(0x7f00000000c0)=@framed={{0x18, 0x2}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x6c}]}, &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 718.788179][ T7221] FAULT_INJECTION: forcing a failure. [ 718.788179][ T7221] name failslab, interval 1, probability 0, space 0, times 0 [ 718.791091][ T7221] CPU: 1 PID: 7221 Comm: syz-executor.3 Not tainted 5.15.120-syzkaller #0 [ 718.792806][ T7221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 718.794976][ T7221] Call trace: [ 718.795686][ T7221] dump_backtrace+0x0/0x530 [ 718.796616][ T7221] show_stack+0x2c/0x3c [ 718.797454][ T7221] dump_stack_lvl+0x108/0x170 [ 718.798364][ T7221] dump_stack+0x1c/0x58 [ 718.799342][ T7221] should_fail+0x400/0x5cc [ 718.800280][ T7221] __should_failslab+0xbc/0x110 [ 718.801374][ T7221] should_failslab+0x10/0x28 [ 718.802377][ T7221] slab_pre_alloc_hook+0x64/0xe8 [ 718.803366][ T7221] kmem_cache_alloc_bulk+0x50/0x4c0 [ 718.804393][ T7221] io_submit_sqes+0x4f00/0x8970 [ 718.805376][ T7221] __arm64_sys_io_uring_enter+0x2a0/0x1cb8 [ 718.806636][ T7221] invoke_syscall+0x98/0x2b8 [ 718.807669][ T7221] el0_svc_common+0x138/0x258 [ 718.808638][ T7221] do_el0_svc+0x58/0x14c [ 718.809535][ T7221] el0_svc+0x7c/0x1f0 [ 718.810345][ T7221] el0t_64_sync_handler+0x84/0xe4 [ 718.811482][ T7221] el0t_64_sync+0x1a0/0x1a4 00:11:58 executing program 5: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000800000/0x800000)=nil, &(0x7f0000e1f000/0x2000)=nil, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[r1], 0x1) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf0d]}, 0x8) (fail_nth: 8) 00:11:58 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x5, 0x5}}}, 0x90) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {}, 0x5, 0x5}}}, 0x90) 00:11:58 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/netlink\x00') connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x101, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x5, 0x1}, 0xe) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0xe, 0x4, &(0x7f00000000c0)=@framed={{0x18, 0x2}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x6c}]}, &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/netlink\x00') (async) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x101, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x5, 0x1}, 0xe) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0xe, 0x4, &(0x7f00000000c0)=@framed={{0x18, 0x2}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x6c}]}, &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) [ 718.871964][ T7226] FAULT_INJECTION: forcing a failure. [ 718.871964][ T7226] name failslab, interval 1, probability 0, space 0, times 0 [ 718.878320][ T7226] CPU: 1 PID: 7226 Comm: syz-executor.5 Not tainted 5.15.120-syzkaller #0 [ 718.880200][ T7226] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 718.882279][ T7226] Call trace: [ 718.882939][ T7226] dump_backtrace+0x0/0x530 [ 718.883944][ T7226] show_stack+0x2c/0x3c [ 718.884796][ T7226] dump_stack_lvl+0x108/0x170 [ 718.885744][ T7226] dump_stack+0x1c/0x58 [ 718.886618][ T7226] should_fail+0x400/0x5cc [ 718.887552][ T7226] __should_failslab+0xbc/0x110 [ 718.888531][ T7226] should_failslab+0x10/0x28 [ 718.889529][ T7226] slab_pre_alloc_hook+0x64/0xe8 [ 718.890624][ T7226] kmem_cache_alloc_bulk+0x50/0x4c0 [ 718.891885][ T7226] io_submit_sqes+0x4f00/0x8970 [ 718.892907][ T7226] __arm64_sys_io_uring_enter+0x2a0/0x1cb8 [ 718.894067][ T7226] invoke_syscall+0x98/0x2b8 [ 718.895093][ T7226] el0_svc_common+0x138/0x258 [ 718.896185][ T7226] do_el0_svc+0x58/0x14c [ 718.897023][ T7226] el0_svc+0x7c/0x1f0 [ 718.897835][ T7226] el0t_64_sync_handler+0x84/0xe4 [ 718.898957][ T7226] el0t_64_sync+0x1a0/0x1a4 00:11:58 executing program 1: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x20000000}, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x100000000, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[r1], 0x1) r2 = syz_io_uring_setup(0x7697, &(0x7f00000001c0)={0x0, 0x0, 0x20, 0x2}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000040)=0x0) r5 = socket$inet6_dccp(0xa, 0x6, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f0000000240)=@l2tp6={0xa, 0x0, 0x0, @remote}}, 0x0) syz_io_uring_setup(0x2494, &(0x7f00000001c0), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000040)=0x0) r8 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000001540)=@urb_type_control={0x2, {0xb, 0x1}, 0xffff, 0x62, &(0x7f0000001400)={0x0, 0x17, 0x3, 0xff80, 0x8}, 0x8, 0x9, 0x7, 0x0, 0x5, 0x80, &(0x7f0000001440)="05c573c975ca7b11343e0a611e20fc44a9260b37dec3b84faa63d2a47adf3352926921df1722ad599293439416cafeec615fc53549dbab52f2b42406b7a1f418e6d6fbbcb3374b9b226b31071cd5fd859bcd2c20795332c1552ab827df91c901c576b6685efca8b244482129374bc4de6f9aecb82f50db2be9698fcf1ad62eeb4a18b66571bf42c8304bcd13bd4032d5179c6ffdb4680838ca4d13ef5c797288e100ba91a9a389b2f2ff1d5e6dc3d34a44a3ef5d9c025a4c049ff856338596e6eed2fff3d950b800fab08a21e6622f70ae890c6123925c6f140f419749d55383378bf8e5ef2ca8ebd9fbf08c0cee8adfcb649c715c30b803"}) syz_io_uring_submit(r6, r7, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r8, 0x80, &(0x7f0000000240)=@l2tp6={0xa, 0x0, 0x0, @remote}}, 0x0) r9 = openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f00000000c0), 0x444000, 0x144) syz_io_uring_submit(r3, r7, &(0x7f0000000200)=@IORING_OP_SYMLINKAT={0x26, 0x2, 0x0, r9, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x1}, 0x78) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf09]}, 0x8) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r2, 0x10, &(0x7f0000000380)={0x8, 0x0, &(0x7f0000000300)=[{&(0x7f00000002c0)=""/29, 0x1d}, {&(0x7f0000000400)=""/4096, 0x1000}], &(0x7f0000000340)=[0x9, 0x97d3, 0x1, 0xff, 0x5, 0xb0d, 0x5], 0x2}, 0x20) 00:11:58 executing program 4: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) (async) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000800000/0x800000)=nil, &(0x7f0000e1f000/0x2000)=nil, 0x0, 0x0) (async) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[r1], 0x1) (async) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf02]}, 0x8) (async) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1, {r1}}, './file0\x00'}) ioctl$USBDEVFS_BULK(r2, 0xc0185502, &(0x7f0000000200)={{{0x5, 0x1}}, 0x65, 0x8, &(0x7f0000000180)="7b2aabc717de1ac4fe65119d32fefa4d1575318dcaf0aa4681eb85eb82fb11d626a45b88ba42e563231bd7bffb72b1e9d571eb84e7eabffe902acab77a8abaa5784313be4ceaa4d21db907965fee6057c27ac697787442e466e0837147a131d1ce100a73e9"}) 00:11:58 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x5, 0x5}}}, 0x90) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {}, 0x5, 0x5}}}, 0x90) 00:11:58 executing program 3: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000800000/0x800000)=nil, &(0x7f0000e1f000/0x2000)=nil, 0x0, 0x0) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf13]}, 0x8) (fail_nth: 9) 00:11:58 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/netlink\x00') connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x101, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x5, 0x1}, 0xe) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0xe, 0x4, &(0x7f00000000c0)=@framed={{0x18, 0x2}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x6c}]}, &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 719.044981][ T7240] FAULT_INJECTION: forcing a failure. [ 719.044981][ T7240] name fail_page_alloc, interval 1, probability 0, space 0, times 0 00:11:59 executing program 1: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x20000000}, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x100000000, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[r1], 0x1) r2 = syz_io_uring_setup(0x7697, &(0x7f00000001c0)={0x0, 0x0, 0x20, 0x2}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000040)=0x0) r5 = socket$inet6_dccp(0xa, 0x6, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f0000000240)=@l2tp6={0xa, 0x0, 0x0, @remote}}, 0x0) syz_io_uring_setup(0x2494, &(0x7f00000001c0), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000040)=0x0) r8 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000001540)=@urb_type_control={0x2, {0xb, 0x1}, 0xffff, 0x62, &(0x7f0000001400)={0x0, 0x17, 0x3, 0xff80, 0x8}, 0x8, 0x9, 0x7, 0x0, 0x5, 0x80, &(0x7f0000001440)="05c573c975ca7b11343e0a611e20fc44a9260b37dec3b84faa63d2a47adf3352926921df1722ad599293439416cafeec615fc53549dbab52f2b42406b7a1f418e6d6fbbcb3374b9b226b31071cd5fd859bcd2c20795332c1552ab827df91c901c576b6685efca8b244482129374bc4de6f9aecb82f50db2be9698fcf1ad62eeb4a18b66571bf42c8304bcd13bd4032d5179c6ffdb4680838ca4d13ef5c797288e100ba91a9a389b2f2ff1d5e6dc3d34a44a3ef5d9c025a4c049ff856338596e6eed2fff3d950b800fab08a21e6622f70ae890c6123925c6f140f419749d55383378bf8e5ef2ca8ebd9fbf08c0cee8adfcb649c715c30b803"}) syz_io_uring_submit(r6, r7, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r8, 0x80, &(0x7f0000000240)=@l2tp6={0xa, 0x0, 0x0, @remote}}, 0x0) r9 = openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f00000000c0), 0x444000, 0x144) syz_io_uring_submit(r3, r7, &(0x7f0000000200)=@IORING_OP_SYMLINKAT={0x26, 0x2, 0x0, r9, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x1}, 0x78) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf09]}, 0x8) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r2, 0x10, &(0x7f0000000380)={0x8, 0x0, &(0x7f0000000300)=[{&(0x7f00000002c0)=""/29, 0x1d}, {&(0x7f0000000400)=""/4096, 0x1000}], &(0x7f0000000340)=[0x9, 0x97d3, 0x1, 0xff, 0x5, 0xb0d, 0x5], 0x2}, 0x20) syz_io_uring_setup(0x5ad, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x20000000}, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) (async) syz_open_dev$usbfs(&(0x7f0000000080), 0x100000000, 0x0) (async) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[r1], 0x1) (async) syz_io_uring_setup(0x7697, &(0x7f00000001c0)={0x0, 0x0, 0x20, 0x2}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000040)) (async) socket$inet6_dccp(0xa, 0x6, 0x0) (async) syz_io_uring_submit(r3, r4, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f0000000240)=@l2tp6={0xa, 0x0, 0x0, @remote}}, 0x0) (async) syz_io_uring_setup(0x2494, &(0x7f00000001c0), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000040)) (async) socket$inet6_dccp(0xa, 0x6, 0x0) (async) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000001540)=@urb_type_control={0x2, {0xb, 0x1}, 0xffff, 0x62, &(0x7f0000001400)={0x0, 0x17, 0x3, 0xff80, 0x8}, 0x8, 0x9, 0x7, 0x0, 0x5, 0x80, &(0x7f0000001440)="05c573c975ca7b11343e0a611e20fc44a9260b37dec3b84faa63d2a47adf3352926921df1722ad599293439416cafeec615fc53549dbab52f2b42406b7a1f418e6d6fbbcb3374b9b226b31071cd5fd859bcd2c20795332c1552ab827df91c901c576b6685efca8b244482129374bc4de6f9aecb82f50db2be9698fcf1ad62eeb4a18b66571bf42c8304bcd13bd4032d5179c6ffdb4680838ca4d13ef5c797288e100ba91a9a389b2f2ff1d5e6dc3d34a44a3ef5d9c025a4c049ff856338596e6eed2fff3d950b800fab08a21e6622f70ae890c6123925c6f140f419749d55383378bf8e5ef2ca8ebd9fbf08c0cee8adfcb649c715c30b803"}) (async) syz_io_uring_submit(r6, r7, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r8, 0x80, &(0x7f0000000240)=@l2tp6={0xa, 0x0, 0x0, @remote}}, 0x0) (async) openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f00000000c0), 0x444000, 0x144) (async) syz_io_uring_submit(r3, r7, &(0x7f0000000200)=@IORING_OP_SYMLINKAT={0x26, 0x2, 0x0, r9, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x1}, 0x78) (async) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf09]}, 0x8) (async) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r2, 0x10, &(0x7f0000000380)={0x8, 0x0, &(0x7f0000000300)=[{&(0x7f00000002c0)=""/29, 0x1d}, {&(0x7f0000000400)=""/4096, 0x1000}], &(0x7f0000000340)=[0x9, 0x97d3, 0x1, 0xff, 0x5, 0xb0d, 0x5], 0x2}, 0x20) (async) [ 719.057696][ T7240] CPU: 1 PID: 7240 Comm: syz-executor.3 Not tainted 5.15.120-syzkaller #0 [ 719.059474][ T7240] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 719.061576][ T7240] Call trace: [ 719.062266][ T7240] dump_backtrace+0x0/0x530 [ 719.063215][ T7240] show_stack+0x2c/0x3c [ 719.064045][ T7240] dump_stack_lvl+0x108/0x170 [ 719.064975][ T7240] dump_stack+0x1c/0x58 [ 719.065854][ T7240] should_fail+0x400/0x5cc [ 719.066760][ T7240] should_fail_alloc_page+0x74/0xa8 [ 719.067825][ T7240] prepare_alloc_pages+0x160/0x4cc [ 719.068831][ T7240] __alloc_pages+0x138/0x674 [ 719.069741][ T7240] alloc_pages+0x390/0x634 [ 719.070645][ T7240] new_slab+0xec/0x56c [ 719.071569][ T7240] ___slab_alloc+0x6bc/0xdbc [ 719.072426][ T7240] kmem_cache_alloc_bulk+0x1a0/0x4c0 [ 719.073522][ T7240] io_submit_sqes+0x4f00/0x8970 [ 719.074666][ T7240] __arm64_sys_io_uring_enter+0x2a0/0x1cb8 [ 719.075981][ T7240] invoke_syscall+0x98/0x2b8 [ 719.076903][ T7240] el0_svc_common+0x138/0x258 [ 719.077840][ T7240] do_el0_svc+0x58/0x14c [ 719.078770][ T7240] el0_svc+0x7c/0x1f0 [ 719.079628][ T7240] el0t_64_sync_handler+0x84/0xe4 [ 719.080731][ T7240] el0t_64_sync+0x1a0/0x1a4 00:11:59 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x5, 0x5}}}, 0x90) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {}, 0x5, 0x5}}}, 0x90) 00:11:59 executing program 4: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000800000/0x800000)=nil, &(0x7f0000e1f000/0x2000)=nil, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[r1], 0x1) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf02]}, 0x8) (async) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf02]}, 0x8) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1, {r1}}, './file0\x00'}) ioctl$USBDEVFS_BULK(r2, 0xc0185502, &(0x7f0000000200)={{{0x5, 0x1}}, 0x65, 0x8, &(0x7f0000000180)="7b2aabc717de1ac4fe65119d32fefa4d1575318dcaf0aa4681eb85eb82fb11d626a45b88ba42e563231bd7bffb72b1e9d571eb84e7eabffe902acab77a8abaa5784313be4ceaa4d21db907965fee6057c27ac697787442e466e0837147a131d1ce100a73e9"}) (async) ioctl$USBDEVFS_BULK(r2, 0xc0185502, &(0x7f0000000200)={{{0x5, 0x1}}, 0x65, 0x8, &(0x7f0000000180)="7b2aabc717de1ac4fe65119d32fefa4d1575318dcaf0aa4681eb85eb82fb11d626a45b88ba42e563231bd7bffb72b1e9d571eb84e7eabffe902acab77a8abaa5784313be4ceaa4d21db907965fee6057c27ac697787442e466e0837147a131d1ce100a73e9"}) 00:11:59 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x5, 0x5}}}, 0x90) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, 0xffffffffffffffff, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {}, 0x5, 0x5}}}, 0x90) 00:11:59 executing program 5: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000800000/0x800000)=nil, &(0x7f0000e1f000/0x2000)=nil, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[r1], 0x1) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf0d]}, 0x8) (fail_nth: 9) 00:11:59 executing program 1: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x20000000}, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) (async) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x100000000, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[r1], 0x1) (async) r2 = syz_io_uring_setup(0x7697, &(0x7f00000001c0)={0x0, 0x0, 0x20, 0x2}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000040)=0x0) r5 = socket$inet6_dccp(0xa, 0x6, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f0000000240)=@l2tp6={0xa, 0x0, 0x0, @remote}}, 0x0) (async) syz_io_uring_setup(0x2494, &(0x7f00000001c0), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000040)=0x0) (async, rerun: 64) r8 = socket$inet6_dccp(0xa, 0x6, 0x0) (rerun: 64) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000001540)=@urb_type_control={0x2, {0xb, 0x1}, 0xffff, 0x62, &(0x7f0000001400)={0x0, 0x17, 0x3, 0xff80, 0x8}, 0x8, 0x9, 0x7, 0x0, 0x5, 0x80, &(0x7f0000001440)="05c573c975ca7b11343e0a611e20fc44a9260b37dec3b84faa63d2a47adf3352926921df1722ad599293439416cafeec615fc53549dbab52f2b42406b7a1f418e6d6fbbcb3374b9b226b31071cd5fd859bcd2c20795332c1552ab827df91c901c576b6685efca8b244482129374bc4de6f9aecb82f50db2be9698fcf1ad62eeb4a18b66571bf42c8304bcd13bd4032d5179c6ffdb4680838ca4d13ef5c797288e100ba91a9a389b2f2ff1d5e6dc3d34a44a3ef5d9c025a4c049ff856338596e6eed2fff3d950b800fab08a21e6622f70ae890c6123925c6f140f419749d55383378bf8e5ef2ca8ebd9fbf08c0cee8adfcb649c715c30b803"}) (async) syz_io_uring_submit(r6, r7, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r8, 0x80, &(0x7f0000000240)=@l2tp6={0xa, 0x0, 0x0, @remote}}, 0x0) r9 = openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f00000000c0), 0x444000, 0x144) syz_io_uring_submit(r3, r7, &(0x7f0000000200)=@IORING_OP_SYMLINKAT={0x26, 0x2, 0x0, r9, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x1}, 0x78) (async) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf09]}, 0x8) (async) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r2, 0x10, &(0x7f0000000380)={0x8, 0x0, &(0x7f0000000300)=[{&(0x7f00000002c0)=""/29, 0x1d}, {&(0x7f0000000400)=""/4096, 0x1000}], &(0x7f0000000340)=[0x9, 0x97d3, 0x1, 0xff, 0x5, 0xb0d, 0x5], 0x2}, 0x20) 00:11:59 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0xe, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@exit]}, &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r0 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {}, 0x5, 0x5}}}, 0x90) mmap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x10, r2, 0x49617000) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0xfffffffc, 0x3ff, 0x7, 0x2, r1, 0x3f, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x3, 0x6}, 0x48) 00:11:59 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x5, 0x5}}}, 0x90) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, 0xffffffffffffffff, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {}, 0x5, 0x5}}}, 0x90) 00:11:59 executing program 3: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000800000/0x800000)=nil, &(0x7f0000e1f000/0x2000)=nil, 0x0, 0x0) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf13]}, 0x8) (fail_nth: 10) 00:11:59 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0xe, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@exit]}, &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r0 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {}, 0x5, 0x5}}}, 0x90) mmap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x10, r2, 0x49617000) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0xfffffffc, 0x3ff, 0x7, 0x2, r1, 0x3f, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x3, 0x6}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0xe, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@exit]}, &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) (async) openat$vcs(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x111}}, 0x20) (async) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {}, 0x5, 0x5}}}, 0x90) (async) mmap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x10, r2, 0x49617000) (async) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0xfffffffc, 0x3ff, 0x7, 0x2, r1, 0x3f, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x3, 0x6}, 0x48) (async) [ 719.352903][ T7272] FAULT_INJECTION: forcing a failure. [ 719.352903][ T7272] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 719.379569][ T7274] FAULT_INJECTION: forcing a failure. [ 719.379569][ T7274] name failslab, interval 1, probability 0, space 0, times 0 [ 719.386798][ T7272] CPU: 0 PID: 7272 Comm: syz-executor.5 Not tainted 5.15.120-syzkaller #0 [ 719.388530][ T7272] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 719.390660][ T7272] Call trace: [ 719.391340][ T7272] dump_backtrace+0x0/0x530 [ 719.392421][ T7272] show_stack+0x2c/0x3c [ 719.393309][ T7272] dump_stack_lvl+0x108/0x170 [ 719.394304][ T7272] dump_stack+0x1c/0x58 [ 719.395216][ T7272] should_fail+0x400/0x5cc [ 719.396127][ T7272] should_fail_alloc_page+0x74/0xa8 [ 719.397241][ T7272] prepare_alloc_pages+0x160/0x4cc [ 719.398309][ T7272] __alloc_pages+0x138/0x674 [ 719.399330][ T7272] alloc_pages+0x390/0x634 [ 719.400297][ T7272] new_slab+0xec/0x56c [ 719.401109][ T7272] ___slab_alloc+0x6bc/0xdbc [ 719.402108][ T7272] kmem_cache_alloc_bulk+0x1a0/0x4c0 [ 719.403181][ T7272] io_submit_sqes+0x4f00/0x8970 [ 719.404157][ T7272] __arm64_sys_io_uring_enter+0x2a0/0x1cb8 [ 719.405338][ T7272] invoke_syscall+0x98/0x2b8 [ 719.406320][ T7272] el0_svc_common+0x138/0x258 [ 719.407397][ T7272] do_el0_svc+0x58/0x14c [ 719.408292][ T7272] el0_svc+0x7c/0x1f0 [ 719.409098][ T7272] el0t_64_sync_handler+0x84/0xe4 [ 719.410205][ T7272] el0t_64_sync+0x1a0/0x1a4 [ 719.416340][ T7274] CPU: 1 PID: 7274 Comm: syz-executor.3 Not tainted 5.15.120-syzkaller #0 [ 719.418099][ T7274] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 719.420298][ T7274] Call trace: [ 719.421004][ T7274] dump_backtrace+0x0/0x530 [ 719.421973][ T7274] show_stack+0x2c/0x3c [ 719.422855][ T7274] dump_stack_lvl+0x108/0x170 [ 719.423826][ T7274] dump_stack+0x1c/0x58 [ 719.424750][ T7274] should_fail+0x400/0x5cc [ 719.425680][ T7274] __should_failslab+0xbc/0x110 [ 719.426718][ T7274] should_failslab+0x10/0x28 [ 719.427794][ T7274] slab_pre_alloc_hook+0x64/0xe8 [ 719.428857][ T7274] __kmalloc_node+0xbc/0x5b8 [ 719.429841][ T7274] memcg_alloc_page_obj_cgroups+0x80/0x174 [ 719.431025][ T7274] new_slab+0x120/0x56c [ 719.431930][ T7274] ___slab_alloc+0x6bc/0xdbc [ 719.432942][ T7274] kmem_cache_alloc_bulk+0x1a0/0x4c0 [ 719.433994][ T7274] io_submit_sqes+0x4f00/0x8970 [ 719.434972][ T7274] __arm64_sys_io_uring_enter+0x2a0/0x1cb8 [ 719.436162][ T7274] invoke_syscall+0x98/0x2b8 [ 719.437203][ T7274] el0_svc_common+0x138/0x258 [ 719.438166][ T7274] do_el0_svc+0x58/0x14c [ 719.439040][ T7274] el0_svc+0x7c/0x1f0 [ 719.439834][ T7274] el0t_64_sync_handler+0x84/0xe4 [ 719.440918][ T7274] el0t_64_sync+0x1a0/0x1a4 00:11:59 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x5, 0x5}}}, 0x90) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, 0xffffffffffffffff, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {}, 0x5, 0x5}}}, 0x90) 00:11:59 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0xe, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@exit]}, &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r0 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) (async) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {}, 0x5, 0x5}}}, 0x90) (async) mmap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x10, r2, 0x49617000) (async, rerun: 64) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) (async, rerun: 64) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0xfffffffc, 0x3ff, 0x7, 0x2, r1, 0x3f, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x3, 0x6}, 0x48) 00:11:59 executing program 4: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000800000/0x800000)=nil, &(0x7f0000e1f000/0x2000)=nil, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x1, 0x8200) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[r1], 0x1) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf02]}, 0x8) 00:11:59 executing program 2: ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, &(0x7f0000000000)=0x2) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0xe, 0x4, &(0x7f00000000c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe93}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x6c}]}, &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000100)={"4c20cad1ded626d1ce5327753d81f67f", 0x0, 0x0, {0xffff, 0x1ff}, {0x3, 0x2}, 0x0, [0x5, 0xfffffffffffff34c, 0x8eaf, 0x43368947, 0x7, 0xbc, 0x7f, 0x900000000000, 0x80000001, 0x8, 0x7, 0x6, 0x7, 0x2, 0x4, 0x8]}) r2 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r7, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000840)=ANY=[@ANYRES32=r6, @ANYRESDEC, @ANYBLOB="01080000000016b83dd69ab5bd5101006272c56964676522822f9239b33fa4d0762545a7d16b1238f27cf6d3a7a282342e544f3f85566760ad2a83763b2eb7966133e05b850008688bfc83c24ec28786508d0dbf3570ae794dbdeb9daad728c64c971b24680e04e6c7f10000fc2a0e31bc04c589c94f838dd4"], 0x3c}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000094) bind$packet(r5, &(0x7f0000000100)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @multicast}, 0x14) getsockname$packet(r5, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000370400"/20, @ANYRES32=r9, @ANYBLOB="00000000000000002000128008000120677470001400028008000100", @ANYRES32, @ANYBLOB="08000200de2a8c0b2617cfeb357ce62e9e66e2dee2a7ba5f287b70fd248f3aa91736b0adccc7814827c18daece6f1b4102c0900be10aee9e35103419eec1f9d4acfd7e670dfc6283f33f7f580e66a94d9aab5a39120e90d52e5de1b30db9c9053071b956dcc9d1c5519e0ae3b1522534674d136f87107c4964bdd6e6aac6e8116651db692e89c19bded93f088deff73fc1985ea8c00340c9ab818dd6c9161d292cb2", @ANYRES32, @ANYBLOB], 0x40}}, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r3, r9, 0x25, 0x10}, 0x10) r10 = socket$packet(0x11, 0x3, 0x300) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r12, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r12, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="3c0000001000050423eeffffffffffff02000000", @ANYRES32=r13, @ANYBLOB="01000000010000001c0012000c000100627269646765eb341b9af1609e0403661583a378003ab3f7d0dc0e26ed12ade310187295d6cfb7045bdaccaf875c92106fac0d74be4b25f46daf8ccb9c2a97877c2c1a5d9770c23e6f6a47c9c2c59b6af3f55217fff265d2c4ad67f081f2185f6ed93f260dbb30ca0177bb57a5df42f71a1043f4287145a50241e49c6d715506c20d634d528aebaf27e3a30efcbbb3e8be7421fe000000000000000000000000f1827602000000"], 0x3c}}, 0x0) bind$packet(r10, &(0x7f0000000100)={0x11, 0x0, r13, 0x1, 0x0, 0x6, @multicast}, 0x14) r14 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000740)=0x14) r15 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r15}, 0x2c, {'wfdno', 0x3d, r14}}) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0xff, 0xd, 0x0, 0x0, 0x1, 0x5c, '\x00', r13, r15, 0x2, 0x3, 0x5, 0xd}, 0x48) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f00000002c0)={"2bb735d07db7af78ce3a4bb140069ccd", r1, 0x0, {0x80, 0xfffffff9}, {0x647e, 0x2}, 0x80000000, [0x2, 0x80, 0x37, 0x985c, 0xffffffffffffc729, 0x7fffffff, 0x8, 0x100000000, 0x9, 0x0, 0x0, 0x4, 0x3, 0x73a, 0x3ff, 0xcc]}) 00:11:59 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x5, 0x5}}}, 0x90) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, 0xffffffffffffffff, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {}, 0x5, 0x5}}}, 0x90) 00:11:59 executing program 5: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000800000/0x800000)=nil, &(0x7f0000e1f000/0x2000)=nil, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[r1], 0x1) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf0d]}, 0x8) (fail_nth: 10) [ 719.665619][ T7298] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 00:11:59 executing program 3: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000800000/0x800000)=nil, &(0x7f0000e1f000/0x2000)=nil, 0x0, 0x0) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf13]}, 0x8) (fail_nth: 11) [ 719.731384][ T7302] FAULT_INJECTION: forcing a failure. [ 719.731384][ T7302] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 719.734429][ T7302] CPU: 0 PID: 7302 Comm: syz-executor.5 Not tainted 5.15.120-syzkaller #0 [ 719.736228][ T7302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 719.738271][ T7302] Call trace: [ 719.738978][ T7302] dump_backtrace+0x0/0x530 [ 719.739872][ T7302] show_stack+0x2c/0x3c [ 719.740727][ T7302] dump_stack_lvl+0x108/0x170 [ 719.741719][ T7302] dump_stack+0x1c/0x58 [ 719.742588][ T7302] should_fail+0x400/0x5cc [ 719.743473][ T7302] should_fail_alloc_page+0x74/0xa8 [ 719.744500][ T7302] prepare_alloc_pages+0x160/0x4cc [ 719.745590][ T7302] __alloc_pages+0x138/0x674 [ 719.746520][ T7302] alloc_pages+0x390/0x634 [ 719.747448][ T7302] new_slab+0xec/0x56c [ 719.748296][ T7302] ___slab_alloc+0x6bc/0xdbc [ 719.749260][ T7302] kmem_cache_alloc_bulk+0x1a0/0x4c0 [ 719.750372][ T7302] io_submit_sqes+0x4f00/0x8970 [ 719.751456][ T7302] __arm64_sys_io_uring_enter+0x2a0/0x1cb8 [ 719.752719][ T7302] invoke_syscall+0x98/0x2b8 [ 719.753800][ T7302] el0_svc_common+0x138/0x258 [ 719.754797][ T7302] do_el0_svc+0x58/0x14c [ 719.755631][ T7302] el0_svc+0x7c/0x1f0 [ 719.756517][ T7302] el0t_64_sync_handler+0x84/0xe4 [ 719.757609][ T7302] el0t_64_sync+0x1a0/0x1a4 [ 719.767290][ T7305] FAULT_INJECTION: forcing a failure. [ 719.767290][ T7305] name failslab, interval 1, probability 0, space 0, times 0 [ 719.769789][ T7305] CPU: 0 PID: 7305 Comm: syz-executor.3 Not tainted 5.15.120-syzkaller #0 [ 719.771451][ T7305] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 719.773549][ T7305] Call trace: [ 719.774229][ T7305] dump_backtrace+0x0/0x530 [ 719.775169][ T7305] show_stack+0x2c/0x3c [ 719.776138][ T7305] dump_stack_lvl+0x108/0x170 [ 719.777171][ T7305] dump_stack+0x1c/0x58 [ 719.777977][ T7305] should_fail+0x400/0x5cc [ 719.778961][ T7305] __should_failslab+0xbc/0x110 [ 719.779955][ T7305] should_failslab+0x10/0x28 [ 719.780931][ T7305] slab_pre_alloc_hook+0x64/0xe8 [ 719.781969][ T7305] kmem_cache_alloc_bulk+0x50/0x4c0 [ 719.782981][ T7305] io_submit_sqes+0x4f00/0x8970 [ 719.783992][ T7305] __arm64_sys_io_uring_enter+0x2a0/0x1cb8 [ 719.785139][ T7305] invoke_syscall+0x98/0x2b8 [ 719.786169][ T7305] el0_svc_common+0x138/0x258 [ 719.787139][ T7305] do_el0_svc+0x58/0x14c [ 719.788025][ T7305] el0_svc+0x7c/0x1f0 [ 719.788802][ T7305] el0t_64_sync_handler+0x84/0xe4 [ 719.789913][ T7305] el0t_64_sync+0x1a0/0x1a4 00:11:59 executing program 1: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x0) ioctl$USBDEVFS_GET_SPEED(r1, 0x551f) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[r1], 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f00000000c0)=@usbdevfs_disconnect={0x6}) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x1, 0x10082) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r4 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r4}}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r5, 0xc0189378, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1, {r3}}, './file0\x00'}) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r3, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r6, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {}, 0x5, 0x5}}}, 0x90) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf09]}, 0x8) 00:11:59 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x5, 0x5}}}, 0x90) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, 0xffffffffffffffff, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {}, 0x5, 0x5}}}, 0x90) 00:11:59 executing program 4: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) (async) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000800000/0x800000)=nil, &(0x7f0000e1f000/0x2000)=nil, 0x0, 0x0) (async) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x1, 0x8200) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[r1], 0x1) (async) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf02]}, 0x8) 00:11:59 executing program 2: ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, &(0x7f0000000000)=0x2) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0xe, 0x4, &(0x7f00000000c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe93}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x6c}]}, &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000100)={"4c20cad1ded626d1ce5327753d81f67f", 0x0, 0x0, {0xffff, 0x1ff}, {0x3, 0x2}, 0x0, [0x5, 0xfffffffffffff34c, 0x8eaf, 0x43368947, 0x7, 0xbc, 0x7f, 0x900000000000, 0x80000001, 0x8, 0x7, 0x6, 0x7, 0x2, 0x4, 0x8]}) (async) r2 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket$packet(0x11, 0x3, 0x300) r6 = socket$nl_route(0x10, 0x3, 0x0) (async) r7 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r7, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000840)=ANY=[@ANYRES32=r6, @ANYRESDEC, @ANYBLOB="01080000000016b83dd69ab5bd5101006272c56964676522822f9239b33fa4d0762545a7d16b1238f27cf6d3a7a282342e544f3f85566760ad2a83763b2eb7966133e05b850008688bfc83c24ec28786508d0dbf3570ae794dbdeb9daad728c64c971b24680e04e6c7f10000fc2a0e31bc04c589c94f838dd4"], 0x3c}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000094) (async) bind$packet(r5, &(0x7f0000000100)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @multicast}, 0x14) (async) getsockname$packet(r5, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000370400"/20, @ANYRES32=r9, @ANYBLOB="00000000000000002000128008000120677470001400028008000100", @ANYRES32, @ANYBLOB="08000200de2a8c0b2617cfeb357ce62e9e66e2dee2a7ba5f287b70fd248f3aa91736b0adccc7814827c18daece6f1b4102c0900be10aee9e35103419eec1f9d4acfd7e670dfc6283f33f7f580e66a94d9aab5a39120e90d52e5de1b30db9c9053071b956dcc9d1c5519e0ae3b1522534674d136f87107c4964bdd6e6aac6e8116651db692e89c19bded93f088deff73fc1985ea8c00340c9ab818dd6c9161d292cb2", @ANYRES32, @ANYBLOB], 0x40}}, 0x0) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r3, r9, 0x25, 0x10}, 0x10) (async) r10 = socket$packet(0x11, 0x3, 0x300) r11 = socket$nl_route(0x10, 0x3, 0x0) (async) r12 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r12, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) (async) getsockname$packet(r12, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="3c0000001000050423eeffffffffffff02000000", @ANYRES32=r13, @ANYBLOB="01000000010000001c0012000c000100627269646765eb341b9af1609e0403661583a378003ab3f7d0dc0e26ed12ade310187295d6cfb7045bdaccaf875c92106fac0d74be4b25f46daf8ccb9c2a97877c2c1a5d9770c23e6f6a47c9c2c59b6af3f55217fff265d2c4ad67f081f2185f6ed93f260dbb30ca0177bb57a5df42f71a1043f4287145a50241e49c6d715506c20d634d528aebaf27e3a30efcbbb3e8be7421fe000000000000000000000000f1827602000000"], 0x3c}}, 0x0) (async) bind$packet(r10, &(0x7f0000000100)={0x11, 0x0, r13, 0x1, 0x0, 0x6, @multicast}, 0x14) (async) r14 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000740)=0x14) (async) r15 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r15}, 0x2c, {'wfdno', 0x3d, r14}}) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0xff, 0xd, 0x0, 0x0, 0x1, 0x5c, '\x00', r13, r15, 0x2, 0x3, 0x5, 0xd}, 0x48) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f00000002c0)={"2bb735d07db7af78ce3a4bb140069ccd", r1, 0x0, {0x80, 0xfffffff9}, {0x647e, 0x2}, 0x80000000, [0x2, 0x80, 0x37, 0x985c, 0xffffffffffffc729, 0x7fffffff, 0x8, 0x100000000, 0x9, 0x0, 0x0, 0x4, 0x3, 0x73a, 0x3ff, 0xcc]}) 00:11:59 executing program 5: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000800000/0x800000)=nil, &(0x7f0000e1f000/0x2000)=nil, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[r1], 0x1) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf0d]}, 0x8) (fail_nth: 11) [ 720.011992][ T7317] FAULT_INJECTION: forcing a failure. [ 720.011992][ T7317] name failslab, interval 1, probability 0, space 0, times 0 [ 720.027528][ T7317] CPU: 0 PID: 7317 Comm: syz-executor.5 Not tainted 5.15.120-syzkaller #0 [ 720.028612][ T7315] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 720.029260][ T7317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 720.033234][ T7317] Call trace: [ 720.033823][ T7317] dump_backtrace+0x0/0x530 [ 720.034815][ T7317] show_stack+0x2c/0x3c [ 720.035753][ T7317] dump_stack_lvl+0x108/0x170 [ 720.036701][ T7317] dump_stack+0x1c/0x58 [ 720.037597][ T7317] should_fail+0x400/0x5cc [ 720.038537][ T7317] __should_failslab+0xbc/0x110 [ 720.039535][ T7317] should_failslab+0x10/0x28 [ 720.040490][ T7317] slab_pre_alloc_hook+0x64/0xe8 [ 720.041647][ T7317] __kmalloc_node+0xbc/0x5b8 [ 720.042557][ T7317] memcg_alloc_page_obj_cgroups+0x80/0x174 [ 720.043799][ T7317] new_slab+0x120/0x56c [ 720.044808][ T7317] ___slab_alloc+0x6bc/0xdbc [ 720.044824][ T7317] kmem_cache_alloc_bulk+0x1a0/0x4c0 00:12:00 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x5, 0x5}}}, 0x90) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, 0xffffffffffffffff, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {}, 0x5, 0x5}}}, 0x90) [ 720.044836][ T7317] io_submit_sqes+0x4f00/0x8970 [ 720.044848][ T7317] __arm64_sys_io_uring_enter+0x2a0/0x1cb8 [ 720.044862][ T7317] invoke_syscall+0x98/0x2b8 [ 720.044874][ T7317] el0_svc_common+0x138/0x258 [ 720.044885][ T7317] do_el0_svc+0x58/0x14c [ 720.044896][ T7317] el0_svc+0x7c/0x1f0 [ 720.044908][ T7317] el0t_64_sync_handler+0x84/0xe4 [ 720.044920][ T7317] el0t_64_sync+0x1a0/0x1a4 00:12:00 executing program 3: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000800000/0x800000)=nil, &(0x7f0000e1f000/0x2000)=nil, 0x0, 0x0) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf13]}, 0x8) (fail_nth: 12) 00:12:00 executing program 4: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000800000/0x800000)=nil, &(0x7f0000e1f000/0x2000)=nil, 0x0, 0x0) (async) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x1, 0x8200) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[r1], 0x1) (async) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf02]}, 0x8) 00:12:00 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x5, 0x5}}}, 0x90) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {}, 0x5, 0x5}}}, 0x90) [ 720.182790][ T7325] FAULT_INJECTION: forcing a failure. [ 720.182790][ T7325] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 720.214262][ T7325] CPU: 0 PID: 7325 Comm: syz-executor.3 Not tainted 5.15.120-syzkaller #0 [ 720.216183][ T7325] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 720.218273][ T7325] Call trace: [ 720.218983][ T7325] dump_backtrace+0x0/0x530 [ 720.219936][ T7325] show_stack+0x2c/0x3c [ 720.220777][ T7325] dump_stack_lvl+0x108/0x170 [ 720.221761][ T7325] dump_stack+0x1c/0x58 [ 720.222612][ T7325] should_fail+0x400/0x5cc [ 720.223657][ T7325] should_fail_alloc_page+0x74/0xa8 [ 720.224838][ T7325] prepare_alloc_pages+0x160/0x4cc [ 720.225925][ T7325] __alloc_pages+0x138/0x674 [ 720.226965][ T7325] alloc_pages+0x390/0x634 [ 720.227834][ T7325] new_slab+0xec/0x56c [ 720.228672][ T7325] ___slab_alloc+0x6bc/0xdbc [ 720.229660][ T7325] kmem_cache_alloc_bulk+0x1a0/0x4c0 [ 720.230805][ T7325] io_submit_sqes+0x4f00/0x8970 [ 720.231820][ T7325] __arm64_sys_io_uring_enter+0x2a0/0x1cb8 [ 720.233024][ T7325] invoke_syscall+0x98/0x2b8 [ 720.234041][ T7325] el0_svc_common+0x138/0x258 [ 720.234946][ T7325] do_el0_svc+0x58/0x14c [ 720.235922][ T7325] el0_svc+0x7c/0x1f0 [ 720.236782][ T7325] el0t_64_sync_handler+0x84/0xe4 [ 720.237780][ T7325] el0t_64_sync+0x1a0/0x1a4 00:12:00 executing program 5: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000800000/0x800000)=nil, &(0x7f0000e1f000/0x2000)=nil, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[r1], 0x1) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf0d]}, 0x8) (fail_nth: 12) 00:12:00 executing program 2: ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, &(0x7f0000000000)=0x2) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0xe, 0x4, &(0x7f00000000c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe93}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x6c}]}, &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000100)={"4c20cad1ded626d1ce5327753d81f67f", 0x0, 0x0, {0xffff, 0x1ff}, {0x3, 0x2}, 0x0, [0x5, 0xfffffffffffff34c, 0x8eaf, 0x43368947, 0x7, 0xbc, 0x7f, 0x900000000000, 0x80000001, 0x8, 0x7, 0x6, 0x7, 0x2, 0x4, 0x8]}) (async) r2 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) (async) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) r4 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r5 = socket$packet(0x11, 0x3, 0x300) (async, rerun: 64) r6 = socket$nl_route(0x10, 0x3, 0x0) (async) r7 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) (async) getsockname$packet(r7, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000840)=ANY=[@ANYRES32=r6, @ANYRESDEC, @ANYBLOB="01080000000016b83dd69ab5bd5101006272c56964676522822f9239b33fa4d0762545a7d16b1238f27cf6d3a7a282342e544f3f85566760ad2a83763b2eb7966133e05b850008688bfc83c24ec28786508d0dbf3570ae794dbdeb9daad728c64c971b24680e04e6c7f10000fc2a0e31bc04c589c94f838dd4"], 0x3c}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000094) (async, rerun: 64) bind$packet(r5, &(0x7f0000000100)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @multicast}, 0x14) (rerun: 64) getsockname$packet(r5, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000370400"/20, @ANYRES32=r9, @ANYBLOB="00000000000000002000128008000120677470001400028008000100", @ANYRES32, @ANYBLOB="08000200de2a8c0b2617cfeb357ce62e9e66e2dee2a7ba5f287b70fd248f3aa91736b0adccc7814827c18daece6f1b4102c0900be10aee9e35103419eec1f9d4acfd7e670dfc6283f33f7f580e66a94d9aab5a39120e90d52e5de1b30db9c9053071b956dcc9d1c5519e0ae3b1522534674d136f87107c4964bdd6e6aac6e8116651db692e89c19bded93f088deff73fc1985ea8c00340c9ab818dd6c9161d292cb2", @ANYRES32, @ANYBLOB], 0x40}}, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r3, r9, 0x25, 0x10}, 0x10) (async) r10 = socket$packet(0x11, 0x3, 0x300) (async) r11 = socket$nl_route(0x10, 0x3, 0x0) (async) r12 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r12, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r12, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="3c0000001000050423eeffffffffffff02000000", @ANYRES32=r13, @ANYBLOB="01000000010000001c0012000c000100627269646765eb341b9af1609e0403661583a378003ab3f7d0dc0e26ed12ade310187295d6cfb7045bdaccaf875c92106fac0d74be4b25f46daf8ccb9c2a97877c2c1a5d9770c23e6f6a47c9c2c59b6af3f55217fff265d2c4ad67f081f2185f6ed93f260dbb30ca0177bb57a5df42f71a1043f4287145a50241e49c6d715506c20d634d528aebaf27e3a30efcbbb3e8be7421fe000000000000000000000000f1827602000000"], 0x3c}}, 0x0) bind$packet(r10, &(0x7f0000000100)={0x11, 0x0, r13, 0x1, 0x0, 0x6, @multicast}, 0x14) (async, rerun: 32) r14 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) (async, rerun: 32) getsockname$packet(0xffffffffffffffff, &(0x7f0000000700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000740)=0x14) (async) r15 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r15}, 0x2c, {'wfdno', 0x3d, r14}}) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0xff, 0xd, 0x0, 0x0, 0x1, 0x5c, '\x00', r13, r15, 0x2, 0x3, 0x5, 0xd}, 0x48) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f00000002c0)={"2bb735d07db7af78ce3a4bb140069ccd", r1, 0x0, {0x80, 0xfffffff9}, {0x647e, 0x2}, 0x80000000, [0x2, 0x80, 0x37, 0x985c, 0xffffffffffffc729, 0x7fffffff, 0x8, 0x100000000, 0x9, 0x0, 0x0, 0x4, 0x3, 0x73a, 0x3ff, 0xcc]}) 00:12:00 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x5, 0x5}}}, 0x90) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {}, 0x5, 0x5}}}, 0x90) [ 720.353408][ T7338] FAULT_INJECTION: forcing a failure. [ 720.353408][ T7338] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 720.373005][ T7338] CPU: 0 PID: 7338 Comm: syz-executor.5 Not tainted 5.15.120-syzkaller #0 [ 720.374844][ T7338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 720.377107][ T7338] Call trace: [ 720.377738][ T7338] dump_backtrace+0x0/0x530 [ 720.378618][ T7338] show_stack+0x2c/0x3c [ 720.379431][ T7338] dump_stack_lvl+0x108/0x170 [ 720.380412][ T7338] dump_stack+0x1c/0x58 [ 720.381444][ T7338] should_fail+0x400/0x5cc [ 720.382324][ T7338] should_fail_alloc_page+0x74/0xa8 [ 720.383474][ T7338] prepare_alloc_pages+0x160/0x4cc [ 720.384611][ T7338] __alloc_pages+0x138/0x674 [ 720.385613][ T7338] alloc_pages+0x390/0x634 [ 720.386596][ T7338] new_slab+0xec/0x56c [ 720.387436][ T7338] ___slab_alloc+0x6bc/0xdbc [ 720.388122][ T7333] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 720.388349][ T7338] kmem_cache_alloc_bulk+0x1a0/0x4c0 [ 720.391356][ T7338] io_submit_sqes+0x4f00/0x8970 [ 720.392326][ T7338] __arm64_sys_io_uring_enter+0x2a0/0x1cb8 [ 720.393585][ T7338] invoke_syscall+0x98/0x2b8 [ 720.394544][ T7338] el0_svc_common+0x138/0x258 [ 720.395529][ T7338] do_el0_svc+0x58/0x14c [ 720.396372][ T7338] el0_svc+0x7c/0x1f0 [ 720.397267][ T7338] el0t_64_sync_handler+0x84/0xe4 [ 720.398339][ T7338] el0t_64_sync+0x1a0/0x1a4 00:12:00 executing program 1: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x0) ioctl$USBDEVFS_GET_SPEED(r1, 0x551f) (async) ioctl$USBDEVFS_GET_SPEED(r1, 0x551f) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[r1], 0x1) (async) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[r1], 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f00000000c0)=@usbdevfs_disconnect={0x6}) (async) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f00000000c0)=@usbdevfs_disconnect={0x6}) syz_open_dev$mouse(&(0x7f0000000180), 0x1, 0x10082) (async) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x1, 0x10082) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) (async) r4 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r4}}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r5, 0xc0189378, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1, {r3}}, './file0\x00'}) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r3, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r6, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {}, 0x5, 0x5}}}, 0x90) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf09]}, 0x8) 00:12:00 executing program 4: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) r1 = syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000800000/0x800000)=nil, &(0x7f0000e1f000/0x2000)=nil, 0x0, 0x0) r2 = io_uring_setup(0x746c, &(0x7f00000001c0)={0x0, 0x35a7, 0x800, 0x0, 0xf2, 0x0, r1}) io_uring_enter(r2, 0x5ab8, 0x3a6, 0x8, &(0x7f0000000280)={[0x6]}, 0x8) r3 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x121381) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[r3], 0x1) ioctl$USBDEVFS_FREE_STREAMS(r3, 0x8008551d, &(0x7f00000002c0)={0x10d4, 0x1a, [{0x6}, {0x7}, {0xf}, {0x5, 0x1}, {0xf, 0x1}, {0x1}, {0xa, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0xe}, {0xc, 0x1}, {0xf}, {0xd}, {0x7}, {0x2}, {0xd, 0x1}, {0x0, 0x1}, {0xa, 0x1}, {0x3, 0x1}, {0x7, 0x1}, {0xe}, {0xf, 0x1}, {0xb}, {0x1}, {0x3, 0x1}, {0xc}]}) ioctl$USBDEVFS_RELEASE_PORT(r3, 0x80045519, &(0x7f00000000c0)=0x7fffffff) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf02]}, 0x8) 00:12:00 executing program 3: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000800000/0x800000)=nil, &(0x7f0000e1f000/0x2000)=nil, 0x0, 0x0) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf13]}, 0x8) (fail_nth: 13) 00:12:00 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x5, 0x5}}}, 0x90) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {}, 0x5, 0x5}}}, 0x90) [ 720.509092][ T7349] FAULT_INJECTION: forcing a failure. [ 720.509092][ T7349] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 720.524661][ T7349] CPU: 1 PID: 7349 Comm: syz-executor.3 Not tainted 5.15.120-syzkaller #0 [ 720.526473][ T7349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 720.528653][ T7349] Call trace: [ 720.529334][ T7349] dump_backtrace+0x0/0x530 [ 720.530297][ T7349] show_stack+0x2c/0x3c [ 720.531170][ T7349] dump_stack_lvl+0x108/0x170 [ 720.532129][ T7349] dump_stack+0x1c/0x58 [ 720.533012][ T7349] should_fail+0x400/0x5cc [ 720.533896][ T7349] should_fail_alloc_page+0x74/0xa8 [ 720.534984][ T7349] prepare_alloc_pages+0x160/0x4cc [ 720.536130][ T7349] __alloc_pages+0x138/0x674 [ 720.537099][ T7349] alloc_pages+0x390/0x634 [ 720.538083][ T7349] new_slab+0xec/0x56c [ 720.538901][ T7349] ___slab_alloc+0x6bc/0xdbc [ 720.539856][ T7349] kmem_cache_alloc_bulk+0x1a0/0x4c0 [ 720.541034][ T7349] io_submit_sqes+0x4f00/0x8970 [ 720.542004][ T7349] __arm64_sys_io_uring_enter+0x2a0/0x1cb8 [ 720.543206][ T7349] invoke_syscall+0x98/0x2b8 [ 720.544225][ T7349] el0_svc_common+0x138/0x258 [ 720.545170][ T7349] do_el0_svc+0x58/0x14c [ 720.546076][ T7349] el0_svc+0x7c/0x1f0 [ 720.546902][ T7349] el0t_64_sync_handler+0x84/0xe4 [ 720.548043][ T7349] el0t_64_sync+0x1a0/0x1a4 00:12:00 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x5, 0x5}}}, 0x90) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {}, 0x5, 0x5}}}, 0x90) 00:12:00 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x5, 0x5}}}, 0x90) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {}, 0x5, 0x5}}}, 0x90) 00:12:00 executing program 5: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000800000/0x800000)=nil, &(0x7f0000e1f000/0x2000)=nil, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[r1], 0x1) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf0d]}, 0x8) (fail_nth: 13) 00:12:00 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x5, 0x5}}}, 0x90) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {}, 0x5, 0x5}}}, 0x90) 00:12:00 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x5, 0x5}}}, 0x90) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, 0x0, 0x0) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {}, 0x5, 0x5}}}, 0x90) [ 720.723878][ T7359] FAULT_INJECTION: forcing a failure. [ 720.723878][ T7359] name failslab, interval 1, probability 0, space 0, times 0 [ 720.733976][ T7359] CPU: 1 PID: 7359 Comm: syz-executor.5 Not tainted 5.15.120-syzkaller #0 [ 720.735866][ T7359] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 720.737908][ T7359] Call trace: [ 720.738599][ T7359] dump_backtrace+0x0/0x530 [ 720.739614][ T7359] show_stack+0x2c/0x3c [ 720.740434][ T7359] dump_stack_lvl+0x108/0x170 [ 720.741414][ T7359] dump_stack+0x1c/0x58 [ 720.742303][ T7359] should_fail+0x400/0x5cc [ 720.743260][ T7359] __should_failslab+0xbc/0x110 [ 720.744303][ T7359] should_failslab+0x10/0x28 [ 720.745260][ T7359] slab_pre_alloc_hook+0x64/0xe8 [ 720.746289][ T7359] __kmalloc_node+0xbc/0x5b8 [ 720.747216][ T7359] memcg_alloc_page_obj_cgroups+0x80/0x174 [ 720.748450][ T7359] new_slab+0x120/0x56c [ 720.749338][ T7359] ___slab_alloc+0x6bc/0xdbc [ 720.750235][ T7359] kmem_cache_alloc_bulk+0x1a0/0x4c0 [ 720.751257][ T7359] io_submit_sqes+0x4f00/0x8970 [ 720.752277][ T7359] __arm64_sys_io_uring_enter+0x2a0/0x1cb8 [ 720.753453][ T7359] invoke_syscall+0x98/0x2b8 [ 720.754392][ T7359] el0_svc_common+0x138/0x258 [ 720.755374][ T7359] do_el0_svc+0x58/0x14c [ 720.756271][ T7359] el0_svc+0x7c/0x1f0 [ 720.757006][ T7359] el0t_64_sync_handler+0x84/0xe4 [ 720.758010][ T7359] el0t_64_sync+0x1a0/0x1a4 00:12:00 executing program 4: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) r1 = syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000800000/0x800000)=nil, &(0x7f0000e1f000/0x2000)=nil, 0x0, 0x0) r2 = io_uring_setup(0x746c, &(0x7f00000001c0)={0x0, 0x35a7, 0x800, 0x0, 0xf2, 0x0, r1}) io_uring_enter(r2, 0x5ab8, 0x3a6, 0x8, &(0x7f0000000280)={[0x6]}, 0x8) r3 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x121381) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[r3], 0x1) (async) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[r3], 0x1) ioctl$USBDEVFS_FREE_STREAMS(r3, 0x8008551d, &(0x7f00000002c0)={0x10d4, 0x1a, [{0x6}, {0x7}, {0xf}, {0x5, 0x1}, {0xf, 0x1}, {0x1}, {0xa, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0xe}, {0xc, 0x1}, {0xf}, {0xd}, {0x7}, {0x2}, {0xd, 0x1}, {0x0, 0x1}, {0xa, 0x1}, {0x3, 0x1}, {0x7, 0x1}, {0xe}, {0xf, 0x1}, {0xb}, {0x1}, {0x3, 0x1}, {0xc}]}) ioctl$USBDEVFS_RELEASE_PORT(r3, 0x80045519, &(0x7f00000000c0)=0x7fffffff) (async) ioctl$USBDEVFS_RELEASE_PORT(r3, 0x80045519, &(0x7f00000000c0)=0x7fffffff) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf02]}, 0x8) (async) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf02]}, 0x8) 00:12:03 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x5, 0x5}}}, 0x90) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, 0x0, 0x0) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {}, 0x5, 0x5}}}, 0x90) 00:12:03 executing program 1: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x0) ioctl$USBDEVFS_GET_SPEED(r1, 0x551f) (async) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[r1], 0x1) (async) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f00000000c0)=@usbdevfs_disconnect={0x6}) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x1, 0x10082) (async) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r4 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) (async) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r4}}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r5, 0xc0189378, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1, {r3}}, './file0\x00'}) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r3, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r6, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {}, 0x5, 0x5}}}, 0x90) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf09]}, 0x8) 00:12:03 executing program 3: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000800000/0x800000)=nil, &(0x7f0000e1f000/0x2000)=nil, 0x0, 0x0) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf13]}, 0x8) (fail_nth: 14) 00:12:03 executing program 5: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000800000/0x800000)=nil, &(0x7f0000e1f000/0x2000)=nil, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[r1], 0x1) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf0d]}, 0x8) (fail_nth: 14) 00:12:03 executing program 4: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) r1 = syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000800000/0x800000)=nil, &(0x7f0000e1f000/0x2000)=nil, 0x0, 0x0) r2 = io_uring_setup(0x746c, &(0x7f00000001c0)={0x0, 0x35a7, 0x800, 0x0, 0xf2, 0x0, r1}) io_uring_enter(r2, 0x5ab8, 0x3a6, 0x8, &(0x7f0000000280)={[0x6]}, 0x8) r3 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x121381) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[r3], 0x1) ioctl$USBDEVFS_FREE_STREAMS(r3, 0x8008551d, &(0x7f00000002c0)={0x10d4, 0x1a, [{0x6}, {0x7}, {0xf}, {0x5, 0x1}, {0xf, 0x1}, {0x1}, {0xa, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0xe}, {0xc, 0x1}, {0xf}, {0xd}, {0x7}, {0x2}, {0xd, 0x1}, {0x0, 0x1}, {0xa, 0x1}, {0x3, 0x1}, {0x7, 0x1}, {0xe}, {0xf, 0x1}, {0xb}, {0x1}, {0x3, 0x1}, {0xc}]}) ioctl$USBDEVFS_RELEASE_PORT(r3, 0x80045519, &(0x7f00000000c0)=0x7fffffff) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf02]}, 0x8) syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) (async) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000800000/0x800000)=nil, &(0x7f0000e1f000/0x2000)=nil, 0x0, 0x0) (async) io_uring_setup(0x746c, &(0x7f00000001c0)={0x0, 0x35a7, 0x800, 0x0, 0xf2, 0x0, r1}) (async) io_uring_enter(r2, 0x5ab8, 0x3a6, 0x8, &(0x7f0000000280)={[0x6]}, 0x8) (async) syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x121381) (async) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[r3], 0x1) (async) ioctl$USBDEVFS_FREE_STREAMS(r3, 0x8008551d, &(0x7f00000002c0)={0x10d4, 0x1a, [{0x6}, {0x7}, {0xf}, {0x5, 0x1}, {0xf, 0x1}, {0x1}, {0xa, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0xe}, {0xc, 0x1}, {0xf}, {0xd}, {0x7}, {0x2}, {0xd, 0x1}, {0x0, 0x1}, {0xa, 0x1}, {0x3, 0x1}, {0x7, 0x1}, {0xe}, {0xf, 0x1}, {0xb}, {0x1}, {0x3, 0x1}, {0xc}]}) (async) ioctl$USBDEVFS_RELEASE_PORT(r3, 0x80045519, &(0x7f00000000c0)=0x7fffffff) (async) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf02]}, 0x8) (async) 00:12:03 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0xe, 0x4, &(0x7f00000000c0)=@framed={{0x18, 0x2}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x6c}]}, &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@getchain={0x2c, 0x66, 0x100, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xb, 0x5}, {0xd}, {0xfff1, 0x8}}, [{0x8, 0xb, 0x800}]}, 0x2c}, 0x1, 0x0, 0x0, 0x880}, 0x0) [ 723.386244][ T7381] FAULT_INJECTION: forcing a failure. [ 723.386244][ T7381] name failslab, interval 1, probability 0, space 0, times 0 [ 723.386811][ T7377] FAULT_INJECTION: forcing a failure. [ 723.386811][ T7377] name failslab, interval 1, probability 0, space 0, times 0 [ 723.391580][ T7377] CPU: 1 PID: 7377 Comm: syz-executor.5 Not tainted 5.15.120-syzkaller #0 [ 723.393410][ T7377] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 723.395704][ T7377] Call trace: [ 723.396379][ T7377] dump_backtrace+0x0/0x530 [ 723.397318][ T7377] show_stack+0x2c/0x3c [ 723.398264][ T7377] dump_stack_lvl+0x108/0x170 [ 723.399371][ T7377] dump_stack+0x1c/0x58 [ 723.400236][ T7377] should_fail+0x400/0x5cc [ 723.401186][ T7377] __should_failslab+0xbc/0x110 [ 723.402231][ T7377] should_failslab+0x10/0x28 [ 723.403218][ T7377] slab_pre_alloc_hook+0x64/0xe8 [ 723.404251][ T7377] kmem_cache_alloc_bulk+0x50/0x4c0 [ 723.405411][ T7377] io_submit_sqes+0x4f00/0x8970 [ 723.406386][ T7377] __arm64_sys_io_uring_enter+0x2a0/0x1cb8 [ 723.407646][ T7377] invoke_syscall+0x98/0x2b8 [ 723.408476][ T7377] el0_svc_common+0x138/0x258 [ 723.409302][ T7377] do_el0_svc+0x58/0x14c [ 723.410236][ T7377] el0_svc+0x7c/0x1f0 [ 723.411071][ T7377] el0t_64_sync_handler+0x84/0xe4 [ 723.412181][ T7377] el0t_64_sync+0x1a0/0x1a4 [ 723.413702][ T7381] CPU: 0 PID: 7381 Comm: syz-executor.3 Not tainted 5.15.120-syzkaller #0 [ 723.415578][ T7381] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 723.417708][ T7381] Call trace: [ 723.418369][ T7381] dump_backtrace+0x0/0x530 [ 723.419374][ T7381] show_stack+0x2c/0x3c [ 723.420285][ T7381] dump_stack_lvl+0x108/0x170 [ 723.421312][ T7381] dump_stack+0x1c/0x58 [ 723.422185][ T7381] should_fail+0x400/0x5cc [ 723.423154][ T7381] __should_failslab+0xbc/0x110 [ 723.424184][ T7381] should_failslab+0x10/0x28 [ 723.425215][ T7381] slab_pre_alloc_hook+0x64/0xe8 [ 723.426321][ T7381] kmem_cache_alloc_bulk+0x50/0x4c0 [ 723.427382][ T7381] io_submit_sqes+0x4f00/0x8970 [ 723.428460][ T7381] __arm64_sys_io_uring_enter+0x2a0/0x1cb8 [ 723.429724][ T7381] invoke_syscall+0x98/0x2b8 [ 723.430722][ T7381] el0_svc_common+0x138/0x258 [ 723.431673][ T7381] do_el0_svc+0x58/0x14c [ 723.432552][ T7381] el0_svc+0x7c/0x1f0 [ 723.433450][ T7381] el0t_64_sync_handler+0x84/0xe4 [ 723.434564][ T7381] el0t_64_sync+0x1a0/0x1a4 00:12:03 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x5, 0x5}}}, 0x90) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, 0x0, 0x0) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {}, 0x5, 0x5}}}, 0x90) 00:12:03 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0xe, 0x4, &(0x7f00000000c0)=@framed={{0x18, 0x2}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x6c}]}, &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@getchain={0x2c, 0x66, 0x100, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xb, 0x5}, {0xd}, {0xfff1, 0x8}}, [{0x8, 0xb, 0x800}]}, 0x2c}, 0x1, 0x0, 0x0, 0x880}, 0x0) 00:12:03 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0xe, 0x4, &(0x7f00000000c0)=@framed={{0x18, 0x2}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x6c}]}, &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@getchain={0x2c, 0x66, 0x100, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xb, 0x5}, {0xd}, {0xfff1, 0x8}}, [{0x8, 0xb, 0x800}]}, 0x2c}, 0x1, 0x0, 0x0, 0x880}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@getchain={0x2c, 0x66, 0x100, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xb, 0x5}, {0xd}, {0xfff1, 0x8}}, [{0x8, 0xb, 0x800}]}, 0x2c}, 0x1, 0x0, 0x0, 0x880}, 0x0) 00:12:03 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x5, 0x5}}}, 0x90) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={0x0, r3}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {}, 0x5, 0x5}}}, 0x90) 00:12:03 executing program 5: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000800000/0x800000)=nil, &(0x7f0000e1f000/0x2000)=nil, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[r1], 0x1) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf0d]}, 0x8) (fail_nth: 15) 00:12:03 executing program 3: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000800000/0x800000)=nil, &(0x7f0000e1f000/0x2000)=nil, 0x0, 0x0) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf13]}, 0x8) (fail_nth: 15) 00:12:03 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x5, 0x5}}}, 0x90) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={0x0, r3}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {}, 0x5, 0x5}}}, 0x90) [ 723.685622][ T7405] FAULT_INJECTION: forcing a failure. [ 723.685622][ T7405] name failslab, interval 1, probability 0, space 0, times 0 00:12:03 executing program 1: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[r1], 0x1) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf09]}, 0x8) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x5, 0x5}}}, 0x90) r4 = syz_open_dev$loop(&(0x7f0000000180), 0x1, 0x6a0000) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0xffffffffffffffff, 0x100000}, 0xc) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000280)={0x2, 0x0, &(0x7f0000000200)=[r0, r2, r1, r4, r5]}, 0x5) io_uring_enter(r0, 0x5fd0, 0x9ec, 0x1, &(0x7f00000000c0)={[0x9]}, 0x8) [ 723.695566][ T7405] CPU: 1 PID: 7405 Comm: syz-executor.5 Not tainted 5.15.120-syzkaller #0 [ 723.697391][ T7405] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 723.699668][ T7405] Call trace: [ 723.700290][ T7405] dump_backtrace+0x0/0x530 [ 723.701232][ T7405] show_stack+0x2c/0x3c [ 723.702087][ T7405] dump_stack_lvl+0x108/0x170 [ 723.703118][ T7405] dump_stack+0x1c/0x58 [ 723.703981][ T7405] should_fail+0x400/0x5cc [ 723.704880][ T7405] __should_failslab+0xbc/0x110 [ 723.705848][ T7405] should_failslab+0x10/0x28 [ 723.706839][ T7405] slab_pre_alloc_hook+0x64/0xe8 [ 723.707935][ T7405] kmem_cache_alloc_bulk+0x50/0x4c0 [ 723.709137][ T7405] io_submit_sqes+0x4f00/0x8970 [ 723.710227][ T7405] __arm64_sys_io_uring_enter+0x2a0/0x1cb8 [ 723.711461][ T7405] invoke_syscall+0x98/0x2b8 [ 723.712365][ T7405] el0_svc_common+0x138/0x258 [ 723.713364][ T7405] do_el0_svc+0x58/0x14c [ 723.714225][ T7405] el0_svc+0x7c/0x1f0 [ 723.715090][ T7405] el0t_64_sync_handler+0x84/0xe4 [ 723.716080][ T7405] el0t_64_sync+0x1a0/0x1a4 00:12:03 executing program 4: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x3}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000e1f000/0x2000)=nil, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[r1], 0x1) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf02]}, 0x8) 00:12:03 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0xe, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x6c}]}, &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 723.768373][ T7411] FAULT_INJECTION: forcing a failure. [ 723.768373][ T7411] name failslab, interval 1, probability 0, space 0, times 0 00:12:03 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0xe, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x6c}]}, &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 723.777930][ T7411] CPU: 0 PID: 7411 Comm: syz-executor.3 Not tainted 5.15.120-syzkaller #0 [ 723.779684][ T7411] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 723.781818][ T7411] Call trace: [ 723.782561][ T7411] dump_backtrace+0x0/0x530 [ 723.783570][ T7411] show_stack+0x2c/0x3c [ 723.784471][ T7411] dump_stack_lvl+0x108/0x170 [ 723.785415][ T7411] dump_stack+0x1c/0x58 [ 723.786269][ T7411] should_fail+0x400/0x5cc [ 723.787204][ T7411] __should_failslab+0xbc/0x110 [ 723.788211][ T7411] should_failslab+0x10/0x28 [ 723.789194][ T7411] slab_pre_alloc_hook+0x64/0xe8 [ 723.790218][ T7411] kmem_cache_alloc_bulk+0x50/0x4c0 [ 723.791293][ T7411] io_submit_sqes+0x4f00/0x8970 [ 723.792273][ T7411] __arm64_sys_io_uring_enter+0x2a0/0x1cb8 [ 723.793493][ T7411] invoke_syscall+0x98/0x2b8 [ 723.794506][ T7411] el0_svc_common+0x138/0x258 [ 723.795617][ T7411] do_el0_svc+0x58/0x14c [ 723.796582][ T7411] el0_svc+0x7c/0x1f0 [ 723.797409][ T7411] el0t_64_sync_handler+0x84/0xe4 [ 723.798489][ T7411] el0t_64_sync+0x1a0/0x1a4 00:12:03 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x5, 0x5}}}, 0x90) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={0x0, r3}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {}, 0x5, 0x5}}}, 0x90) 00:12:03 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0xe, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x6c}]}, &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:12:03 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x5, 0x5}}}, 0x90) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000), r3, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {}, 0x5, 0x5}}}, 0x90) 00:12:03 executing program 2: write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x1}, 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0xe, 0x4, &(0x7f00000000c0)=@framed={{0x18, 0x2}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x6c}]}, &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x6, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x5}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7}, @initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x7}, @map_val={0x18, 0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3}, @call={0x85, 0x0, 0x0, 0x4b}, @ldst={0x2, 0x1, 0x2, 0x8, 0x2, 0x20, 0x1}, @generic={0x6, 0xa, 0x4, 0x2, 0x7ff}, @cb_func={0x18, 0x1, 0x4, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x1000, &(0x7f0000000440)=""/4096, 0x41000, 0x11, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x3, 0x80000004}, 0x8, 0x10, &(0x7f00000002c0)={0x5, 0xf, 0x5, 0x5}, 0x10}, 0x80) 00:12:03 executing program 5: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000800000/0x800000)=nil, &(0x7f0000e1f000/0x2000)=nil, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[r1], 0x1) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf0d]}, 0x8) (fail_nth: 16) 00:12:03 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x5, 0x5}}}, 0x90) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000), r3, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {}, 0x5, 0x5}}}, 0x90) 00:12:03 executing program 3: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000800000/0x800000)=nil, &(0x7f0000e1f000/0x2000)=nil, 0x0, 0x0) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf13]}, 0x8) (fail_nth: 16) 00:12:03 executing program 2: write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x1}, 0x2) (async) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x1}, 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0xe, 0x4, &(0x7f00000000c0)=@framed={{0x18, 0x2}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x6c}]}, &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x6, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x5}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7}, @initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x7}, @map_val={0x18, 0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3}, @call={0x85, 0x0, 0x0, 0x4b}, @ldst={0x2, 0x1, 0x2, 0x8, 0x2, 0x20, 0x1}, @generic={0x6, 0xa, 0x4, 0x2, 0x7ff}, @cb_func={0x18, 0x1, 0x4, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x1000, &(0x7f0000000440)=""/4096, 0x41000, 0x11, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x3, 0x80000004}, 0x8, 0x10, &(0x7f00000002c0)={0x5, 0xf, 0x5, 0x5}, 0x10}, 0x80) 00:12:04 executing program 1: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[r1], 0x1) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf09]}, 0x8) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x5, 0x5}}}, 0x90) r4 = syz_open_dev$loop(&(0x7f0000000180), 0x1, 0x6a0000) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0xffffffffffffffff, 0x100000}, 0xc) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000280)={0x2, 0x0, &(0x7f0000000200)=[r0, r2, r1, r4, r5]}, 0x5) io_uring_enter(r0, 0x5fd0, 0x9ec, 0x1, &(0x7f00000000c0)={[0x9]}, 0x8) syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) (async) syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x0) (async) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[r1], 0x1) (async) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf09]}, 0x8) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x111}}, 0x20) (async) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) (async) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x5, 0x5}}}, 0x90) (async) syz_open_dev$loop(&(0x7f0000000180), 0x1, 0x6a0000) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0xffffffffffffffff, 0x100000}, 0xc) (async) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000280)={0x2, 0x0, &(0x7f0000000200)=[r0, r2, r1, r4, r5]}, 0x5) (async) io_uring_enter(r0, 0x5fd0, 0x9ec, 0x1, &(0x7f00000000c0)={[0x9]}, 0x8) (async) [ 724.043484][ T7429] FAULT_INJECTION: forcing a failure. [ 724.043484][ T7429] name failslab, interval 1, probability 0, space 0, times 0 00:12:04 executing program 4: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x3}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000e1f000/0x2000)=nil, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[r1], 0x1) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf02]}, 0x8) syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) (async) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x3}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000e1f000/0x2000)=nil, 0x0, 0x0) (async) syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) (async) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[r1], 0x1) (async) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf02]}, 0x8) (async) [ 724.064533][ T7432] FAULT_INJECTION: forcing a failure. [ 724.064533][ T7432] name failslab, interval 1, probability 0, space 0, times 0 00:12:04 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x5, 0x5}}}, 0x90) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000), r3, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {}, 0x5, 0x5}}}, 0x90) [ 724.081286][ T7429] CPU: 1 PID: 7429 Comm: syz-executor.5 Not tainted 5.15.120-syzkaller #0 [ 724.083099][ T7429] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 724.085248][ T7429] Call trace: [ 724.085935][ T7429] dump_backtrace+0x0/0x530 [ 724.086787][ T7429] show_stack+0x2c/0x3c [ 724.087612][ T7429] dump_stack_lvl+0x108/0x170 [ 724.088601][ T7429] dump_stack+0x1c/0x58 [ 724.089455][ T7429] should_fail+0x400/0x5cc [ 724.090381][ T7429] __should_failslab+0xbc/0x110 [ 724.091440][ T7429] should_failslab+0x10/0x28 [ 724.092428][ T7429] slab_pre_alloc_hook+0x64/0xe8 [ 724.093532][ T7429] kmem_cache_alloc_bulk+0x50/0x4c0 [ 724.094560][ T7429] io_submit_sqes+0x4f00/0x8970 [ 724.095648][ T7429] __arm64_sys_io_uring_enter+0x2a0/0x1cb8 [ 724.096868][ T7429] invoke_syscall+0x98/0x2b8 [ 724.097778][ T7429] el0_svc_common+0x138/0x258 [ 724.098827][ T7429] do_el0_svc+0x58/0x14c [ 724.099748][ T7429] el0_svc+0x7c/0x1f0 [ 724.100549][ T7429] el0t_64_sync_handler+0x84/0xe4 [ 724.101523][ T7429] el0t_64_sync+0x1a0/0x1a4 00:12:04 executing program 2: write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x1}, 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0xe, 0x4, &(0x7f00000000c0)=@framed={{0x18, 0x2}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x6c}]}, &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0xe, 0x4, &(0x7f00000000c0)=@framed={{0x18, 0x2}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x6c}]}, &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x6, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x5}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7}, @initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x7}, @map_val={0x18, 0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3}, @call={0x85, 0x0, 0x0, 0x4b}, @ldst={0x2, 0x1, 0x2, 0x8, 0x2, 0x20, 0x1}, @generic={0x6, 0xa, 0x4, 0x2, 0x7ff}, @cb_func={0x18, 0x1, 0x4, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x1000, &(0x7f0000000440)=""/4096, 0x41000, 0x11, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x3, 0x80000004}, 0x8, 0x10, &(0x7f00000002c0)={0x5, 0xf, 0x5, 0x5}, 0x10}, 0x80) [ 724.133634][ T7432] CPU: 1 PID: 7432 Comm: syz-executor.3 Not tainted 5.15.120-syzkaller #0 [ 724.135532][ T7432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 724.137646][ T7432] Call trace: [ 724.138304][ T7432] dump_backtrace+0x0/0x530 [ 724.139215][ T7432] show_stack+0x2c/0x3c [ 724.140013][ T7432] dump_stack_lvl+0x108/0x170 [ 724.140988][ T7432] dump_stack+0x1c/0x58 [ 724.141733][ T7432] should_fail+0x400/0x5cc [ 724.142636][ T7432] __should_failslab+0xbc/0x110 [ 724.143707][ T7432] should_failslab+0x10/0x28 [ 724.144578][ T7432] slab_pre_alloc_hook+0x64/0xe8 [ 724.145687][ T7432] kmem_cache_alloc_bulk+0x50/0x4c0 [ 724.146785][ T7432] io_submit_sqes+0x4f00/0x8970 [ 724.147882][ T7432] __arm64_sys_io_uring_enter+0x2a0/0x1cb8 [ 724.149170][ T7432] invoke_syscall+0x98/0x2b8 [ 724.150206][ T7432] el0_svc_common+0x138/0x258 [ 724.151152][ T7432] do_el0_svc+0x58/0x14c [ 724.151872][ T7432] el0_svc+0x7c/0x1f0 [ 724.152555][ T7432] el0t_64_sync_handler+0x84/0xe4 [ 724.153551][ T7432] el0t_64_sync+0x1a0/0x1a4 00:12:04 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x5, 0x5}}}, 0x90) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, 0xffffffffffffffff, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {}, 0x5, 0x5}}}, 0x90) 00:12:04 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0xe, 0x4, &(0x7f00000000c0)=@framed={{0x18, 0x2}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x6c}]}, &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r1 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}}) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x8400, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x8, &(0x7f0000000000)=@raw=[@generic={0x5, 0x1, 0x6, 0xda31, 0x1}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, @call={0x85, 0x0, 0x0, 0xbf}, @alu={0x7, 0x0, 0x9, 0x0, 0x4, 0xfffffffffffffffe, 0xfffffffffffffffc}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x5}, @generic={0x2, 0x9, 0x6, 0x6, 0x6683}], &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x2, '\x00', r0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x3, 0x4}, 0x8, 0x10, &(0x7f00000001c0)={0x4, 0xa, 0x3f, 0x800}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[0xffffffffffffffff, r2, 0x1, r3]}, 0x80) io_setup(0x2, &(0x7f0000000380)=0x0) r5 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) r6 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r5}}) io_submit(r4, 0x2, &(0x7f0000001540)=[&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0xfff7, r2, &(0x7f00000004c0)="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", 0x1000, 0x2, 0x0, 0x3, r6}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0xde, r2, &(0x7f00000014c0)="d683784caeaf80fec82a5f897e2aca98934a5a55f975b731237eafe39cc7c09447cd6939b7c036d4485f63990d2ad0694507b1bd868af526df44bfc078b60292601912defe50324e3837d15100b07130caa7479568a7d46a9513b3e57efe941977c97e651f873e163c163fc3fe20f191ac7fd3c5eb6cccb9", 0x78, 0x1, 0x0, 0x0, r3}]) 00:12:04 executing program 1: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) (async) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[r1], 0x1) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf09]}, 0x8) (async) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) (async) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x5, 0x5}}}, 0x90) r4 = syz_open_dev$loop(&(0x7f0000000180), 0x1, 0x6a0000) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0xffffffffffffffff, 0x100000}, 0xc) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000280)={0x2, 0x0, &(0x7f0000000200)=[r0, r2, r1, r4, r5]}, 0x5) io_uring_enter(r0, 0x5fd0, 0x9ec, 0x1, &(0x7f00000000c0)={[0x9]}, 0x8) 00:12:04 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x5, 0x5}}}, 0x90) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, 0xffffffffffffffff, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {}, 0x5, 0x5}}}, 0x90) 00:12:04 executing program 5: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000800000/0x800000)=nil, &(0x7f0000e1f000/0x2000)=nil, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[r1], 0x1) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf0d]}, 0x8) (fail_nth: 17) 00:12:04 executing program 1: r0 = syz_io_uring_setup(0x25ad, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x8, 0x300}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f00000000c0), &(0x7f00000003c0)) io_uring_register$IORING_REGISTER_PROBE(r0, 0x8, &(0x7f0000000280)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000005604dff500000031cc18690000000000000000000000000000810000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001336d60d4495b0230000000000000000000000000000000000000000d70900"/232], 0x1b) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x0) r2 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000040)=@usbdevfs_disconnect={0x6}) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[r1], 0x1) io_uring_enter(r0, 0x80040b3, 0x4000, 0x0, &(0x7f0000000000)={[0xf09]}, 0x8) 00:12:04 executing program 3: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000800000/0x800000)=nil, &(0x7f0000e1f000/0x2000)=nil, 0x0, 0x0) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf13]}, 0x8) (fail_nth: 17) 00:12:04 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x5, 0x5}}}, 0x90) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, 0xffffffffffffffff, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {}, 0x5, 0x5}}}, 0x90) [ 724.420805][ T7471] FAULT_INJECTION: forcing a failure. [ 724.420805][ T7471] name fail_page_alloc, interval 1, probability 0, space 0, times 0 00:12:04 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0xe, 0x4, &(0x7f00000000c0)=@framed={{0x18, 0x2}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x6c}]}, &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) (async) r1 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) (async) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}}) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x8400, 0x0) (async) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x8400, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x8, &(0x7f0000000000)=@raw=[@generic={0x5, 0x1, 0x6, 0xda31, 0x1}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, @call={0x85, 0x0, 0x0, 0xbf}, @alu={0x7, 0x0, 0x9, 0x0, 0x4, 0xfffffffffffffffe, 0xfffffffffffffffc}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x5}, @generic={0x2, 0x9, 0x6, 0x6, 0x6683}], &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x2, '\x00', r0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x3, 0x4}, 0x8, 0x10, &(0x7f00000001c0)={0x4, 0xa, 0x3f, 0x800}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[0xffffffffffffffff, r2, 0x1, r3]}, 0x80) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x8, &(0x7f0000000000)=@raw=[@generic={0x5, 0x1, 0x6, 0xda31, 0x1}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, @call={0x85, 0x0, 0x0, 0xbf}, @alu={0x7, 0x0, 0x9, 0x0, 0x4, 0xfffffffffffffffe, 0xfffffffffffffffc}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x5}, @generic={0x2, 0x9, 0x6, 0x6, 0x6683}], &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x2, '\x00', r0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x3, 0x4}, 0x8, 0x10, &(0x7f00000001c0)={0x4, 0xa, 0x3f, 0x800}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[0xffffffffffffffff, r2, 0x1, r3]}, 0x80) io_setup(0x2, &(0x7f0000000380)=0x0) r5 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) r6 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r5}}) io_submit(r4, 0x2, &(0x7f0000001540)=[&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0xfff7, r2, &(0x7f00000004c0)="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", 0x1000, 0x2, 0x0, 0x3, r6}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0xde, r2, &(0x7f00000014c0)="d683784caeaf80fec82a5f897e2aca98934a5a55f975b731237eafe39cc7c09447cd6939b7c036d4485f63990d2ad0694507b1bd868af526df44bfc078b60292601912defe50324e3837d15100b07130caa7479568a7d46a9513b3e57efe941977c97e651f873e163c163fc3fe20f191ac7fd3c5eb6cccb9", 0x78, 0x1, 0x0, 0x0, r3}]) [ 724.435796][ T7474] FAULT_INJECTION: forcing a failure. [ 724.435796][ T7474] name failslab, interval 1, probability 0, space 0, times 0 [ 724.438861][ T7471] CPU: 1 PID: 7471 Comm: syz-executor.3 Not tainted 5.15.120-syzkaller #0 [ 724.440638][ T7471] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 724.442661][ T7471] Call trace: [ 724.443377][ T7471] dump_backtrace+0x0/0x530 [ 724.444373][ T7471] show_stack+0x2c/0x3c [ 724.445280][ T7471] dump_stack_lvl+0x108/0x170 [ 724.446283][ T7471] dump_stack+0x1c/0x58 [ 724.447119][ T7471] should_fail+0x400/0x5cc [ 724.448111][ T7471] should_fail_alloc_page+0x74/0xa8 [ 724.449233][ T7471] prepare_alloc_pages+0x160/0x4cc [ 724.449249][ T7471] __alloc_pages+0x138/0x674 [ 724.449260][ T7471] alloc_pages+0x390/0x634 [ 724.449270][ T7471] new_slab+0xec/0x56c [ 724.449283][ T7471] ___slab_alloc+0x6bc/0xdbc [ 724.449295][ T7471] kmem_cache_alloc_bulk+0x1a0/0x4c0 [ 724.449307][ T7471] io_submit_sqes+0x4f00/0x8970 [ 724.449319][ T7471] __arm64_sys_io_uring_enter+0x2a0/0x1cb8 [ 724.457361][ T7471] invoke_syscall+0x98/0x2b8 [ 724.458310][ T7471] el0_svc_common+0x138/0x258 [ 724.459230][ T7471] do_el0_svc+0x58/0x14c [ 724.460108][ T7471] el0_svc+0x7c/0x1f0 [ 724.460948][ T7471] el0t_64_sync_handler+0x84/0xe4 [ 724.462013][ T7471] el0t_64_sync+0x1a0/0x1a4 [ 724.473590][ T7474] CPU: 1 PID: 7474 Comm: syz-executor.5 Not tainted 5.15.120-syzkaller #0 [ 724.475330][ T7474] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 724.477506][ T7474] Call trace: [ 724.478197][ T7474] dump_backtrace+0x0/0x530 [ 724.479121][ T7474] show_stack+0x2c/0x3c [ 724.479992][ T7474] dump_stack_lvl+0x108/0x170 [ 724.481073][ T7474] dump_stack+0x1c/0x58 [ 724.481994][ T7474] should_fail+0x400/0x5cc [ 724.482945][ T7474] __should_failslab+0xbc/0x110 [ 724.483902][ T7474] should_failslab+0x10/0x28 [ 724.484911][ T7474] slab_pre_alloc_hook+0x64/0xe8 [ 724.485911][ T7474] __kmalloc_node+0xbc/0x5b8 [ 724.486763][ T7474] memcg_alloc_page_obj_cgroups+0x80/0x174 [ 724.487945][ T7474] new_slab+0x120/0x56c [ 724.488853][ T7474] ___slab_alloc+0x6bc/0xdbc [ 724.489824][ T7474] kmem_cache_alloc_bulk+0x1a0/0x4c0 [ 724.491005][ T7474] io_submit_sqes+0x4f00/0x8970 [ 724.492049][ T7474] __arm64_sys_io_uring_enter+0x2a0/0x1cb8 [ 724.493194][ T7474] invoke_syscall+0x98/0x2b8 [ 724.494181][ T7474] el0_svc_common+0x138/0x258 [ 724.495143][ T7474] do_el0_svc+0x58/0x14c [ 724.495939][ T7474] el0_svc+0x7c/0x1f0 [ 724.496748][ T7474] el0t_64_sync_handler+0x84/0xe4 [ 724.497718][ T7474] el0t_64_sync+0x1a0/0x1a4 00:12:04 executing program 4: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) (async) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x3}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000e1f000/0x2000)=nil, 0x0, 0x0) (async) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[r1], 0x1) (async) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf02]}, 0x8) 00:12:04 executing program 1: r0 = syz_io_uring_setup(0x25ad, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x8, 0x300}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f00000000c0), &(0x7f00000003c0)) io_uring_register$IORING_REGISTER_PROBE(r0, 0x8, &(0x7f0000000280)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000005604dff500000031cc18690000000000000000000000000000810000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001336d60d4495b0230000000000000000000000000000000000000000d70900"/232], 0x1b) (async) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x0) r2 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) (async, rerun: 32) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) (rerun: 32) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000040)=@usbdevfs_disconnect={0x6}) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[r1], 0x1) io_uring_enter(r0, 0x80040b3, 0x4000, 0x0, &(0x7f0000000000)={[0xf09]}, 0x8) 00:12:04 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x5, 0x5}}}, 0x90) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {}, 0x5, 0x5}}}, 0x90) 00:12:04 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x5, 0x5}}}, 0x90) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {}, 0x5, 0x5}}}, 0x90) 00:12:04 executing program 3: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000800000/0x800000)=nil, &(0x7f0000e1f000/0x2000)=nil, 0x0, 0x0) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf13]}, 0x8) (fail_nth: 18) 00:12:04 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0xe, 0x4, &(0x7f00000000c0)=@framed={{0x18, 0x2}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x6c}]}, &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r1 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) (async) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}}) (async) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x8400, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x8, &(0x7f0000000000)=@raw=[@generic={0x5, 0x1, 0x6, 0xda31, 0x1}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, @call={0x85, 0x0, 0x0, 0xbf}, @alu={0x7, 0x0, 0x9, 0x0, 0x4, 0xfffffffffffffffe, 0xfffffffffffffffc}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x5}, @generic={0x2, 0x9, 0x6, 0x6, 0x6683}], &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x2, '\x00', r0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x3, 0x4}, 0x8, 0x10, &(0x7f00000001c0)={0x4, 0xa, 0x3f, 0x800}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[0xffffffffffffffff, r2, 0x1, r3]}, 0x80) io_setup(0x2, &(0x7f0000000380)=0x0) (async) r5 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) (async, rerun: 64) r6 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) (rerun: 64) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r5}}) (async) io_submit(r4, 0x2, &(0x7f0000001540)=[&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0xfff7, r2, &(0x7f00000004c0)="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", 0x1000, 0x2, 0x0, 0x3, r6}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0xde, r2, &(0x7f00000014c0)="d683784caeaf80fec82a5f897e2aca98934a5a55f975b731237eafe39cc7c09447cd6939b7c036d4485f63990d2ad0694507b1bd868af526df44bfc078b60292601912defe50324e3837d15100b07130caa7479568a7d46a9513b3e57efe941977c97e651f873e163c163fc3fe20f191ac7fd3c5eb6cccb9", 0x78, 0x1, 0x0, 0x0, r3}]) 00:12:04 executing program 5: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000800000/0x800000)=nil, &(0x7f0000e1f000/0x2000)=nil, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[r1], 0x1) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf0d]}, 0x8) (fail_nth: 18) 00:12:04 executing program 1: r0 = syz_io_uring_setup(0x25ad, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x8, 0x300}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f00000000c0), &(0x7f00000003c0)) io_uring_register$IORING_REGISTER_PROBE(r0, 0x8, &(0x7f0000000280)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000005604dff500000031cc18690000000000000000000000000000810000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001336d60d4495b0230000000000000000000000000000000000000000d70900"/232], 0x1b) (async) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x0) (async) r2 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) (async) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000040)=@usbdevfs_disconnect={0x6}) (async) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[r1], 0x1) (async) io_uring_enter(r0, 0x80040b3, 0x4000, 0x0, &(0x7f0000000000)={[0xf09]}, 0x8) [ 724.697148][ T7491] FAULT_INJECTION: forcing a failure. [ 724.697148][ T7491] name failslab, interval 1, probability 0, space 0, times 0 [ 724.710296][ T7491] CPU: 1 PID: 7491 Comm: syz-executor.3 Not tainted 5.15.120-syzkaller #0 [ 724.712077][ T7491] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 724.714224][ T7491] Call trace: [ 724.714992][ T7491] dump_backtrace+0x0/0x530 [ 724.715891][ T7491] show_stack+0x2c/0x3c [ 724.716774][ T7491] dump_stack_lvl+0x108/0x170 [ 724.717681][ T7491] dump_stack+0x1c/0x58 [ 724.718520][ T7491] should_fail+0x400/0x5cc [ 724.719458][ T7491] __should_failslab+0xbc/0x110 [ 724.720455][ T7491] should_failslab+0x10/0x28 [ 724.721503][ T7491] slab_pre_alloc_hook+0x64/0xe8 [ 724.722519][ T7491] kmem_cache_alloc_bulk+0x50/0x4c0 [ 724.723638][ T7491] io_submit_sqes+0x4f00/0x8970 [ 724.724670][ T7491] __arm64_sys_io_uring_enter+0x2a0/0x1cb8 [ 724.725925][ T7491] invoke_syscall+0x98/0x2b8 [ 724.727011][ T7491] el0_svc_common+0x138/0x258 [ 724.727938][ T7491] do_el0_svc+0x58/0x14c [ 724.728924][ T7491] el0_svc+0x7c/0x1f0 [ 724.729763][ T7491] el0t_64_sync_handler+0x84/0xe4 [ 724.730781][ T7491] el0t_64_sync+0x1a0/0x1a4 00:12:04 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x5, 0x5}}}, 0x90) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {}, 0x5, 0x5}}}, 0x90) 00:12:04 executing program 4: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) r1 = syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000800000/0x800000)=nil, &(0x7f0000e1f000/0x2000)=nil, 0x0, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[r2], 0x1) r3 = fcntl$dupfd(r1, 0x406, r0) syz_io_uring_setup(0x75d0, &(0x7f00000004c0)={0x0, 0x699f, 0x400, 0x0, 0x1a, 0x0, r3}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ad6000/0x4000)=nil, &(0x7f0000000540), &(0x7f0000000580)) r4 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000180)='.pending_reads\x00', 0x480000, 0x40) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net/igmp6\x00') ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000480)={0x78, 0x0, &(0x7f0000000340)=[@acquire_done, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000280)={@fd={0x66642a85, 0x0, r5}, @fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x1, &(0x7f0000000200)=""/27, 0x1b, 0x0, 0x8}}, &(0x7f0000000300)={0x0, 0x18, 0x30}}, 0x40}, @increfs={0x40046304, 0x3}, @exit_looper, @dead_binder_done], 0x4f, 0x0, &(0x7f0000000400)="f7a2d14468e82475763bc219336226c5eb715a71b2867cac974386a0a999388527192a4ace9474c2c02980bbcf2ae368204a2e746123ec8b6ffb1b4b0255857965c521c83dbeba39f2e80fd208d4c3"}) openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000005c0)='/sys/module/snd_virmidi', 0x0, 0x166) r6 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) r7 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r6}}) ioctl$USBDEVFS_BULK(r7, 0xc0185502, &(0x7f0000000640)={{{0xc, 0x1}}, 0x0, 0xfffffffe, &(0x7f0000000600)}) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf02]}, 0x8) [ 724.805010][ T7504] FAULT_INJECTION: forcing a failure. [ 724.805010][ T7504] name failslab, interval 1, probability 0, space 0, times 0 [ 724.821706][ T7504] CPU: 0 PID: 7504 Comm: syz-executor.5 Not tainted 5.15.120-syzkaller #0 00:12:04 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x5, 0x5}}}, 0x90) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, 0x0, 0x0) [ 724.823608][ T7504] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 724.825678][ T7504] Call trace: [ 724.826355][ T7504] dump_backtrace+0x0/0x530 [ 724.827255][ T7504] show_stack+0x2c/0x3c [ 724.828145][ T7504] dump_stack_lvl+0x108/0x170 [ 724.829088][ T7504] dump_stack+0x1c/0x58 [ 724.830026][ T7504] should_fail+0x400/0x5cc [ 724.830912][ T7504] __should_failslab+0xbc/0x110 [ 724.831930][ T7504] should_failslab+0x10/0x28 [ 724.832892][ T7504] slab_pre_alloc_hook+0x64/0xe8 [ 724.834003][ T7504] kmem_cache_alloc_bulk+0x50/0x4c0 [ 724.835224][ T7504] io_submit_sqes+0x4f00/0x8970 [ 724.836207][ T7504] __arm64_sys_io_uring_enter+0x2a0/0x1cb8 [ 724.837429][ T7504] invoke_syscall+0x98/0x2b8 [ 724.838379][ T7504] el0_svc_common+0x138/0x258 [ 724.839401][ T7504] do_el0_svc+0x58/0x14c [ 724.840314][ T7504] el0_svc+0x7c/0x1f0 [ 724.841160][ T7504] el0t_64_sync_handler+0x84/0xe4 [ 724.842241][ T7504] el0t_64_sync+0x1a0/0x1a4 00:12:04 executing program 1: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x0) syz_io_uring_setup(0x2494, &(0x7f00000001c0), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000040)=0x0) r4 = socket$inet6_dccp(0xa, 0x6, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000240)=@l2tp6={0xa, 0x0, 0x0, @remote}}, 0x0) syz_io_uring_setup(0x2494, &(0x7f00000001c0), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000040)=0x0) r7 = socket$inet6_dccp(0xa, 0x6, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000240)=@l2tp6={0xa, 0x0, 0x0, @remote}}, 0x0) r8 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) r9 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r9}, 0x2c, {'wfdno', 0x3d, r8}}) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, r6, &(0x7f00000001c0)=@IORING_OP_SYMLINKAT={0x26, 0x5d, 0x0, r9, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, {0x0, r10}}, 0x2) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[r1], 0x1) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf09]}, 0x8) 00:12:04 executing program 2: fcntl$getown(0xffffffffffffffff, 0x9) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0xe, 0x4, &(0x7f00000000c0)=@framed={{0x18, 0x2}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x6c}]}, &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r2, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r2, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x5, 0x5}}}, 0x90) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r1) r3 = openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r5, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r4, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r5, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x5, 0x5}}}, 0x90) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000440)={0x0, 0x100000001, 0x2}) ioctl$BTRFS_IOC_GET_DEV_STATS(r4, 0xc4089434, &(0x7f0000000840)={r6, 0x4, 0x1, [0x100000001, 0x8, 0x9e1, 0x3, 0x2], [0x7, 0x0, 0x1, 0x9, 0x81, 0x4, 0x6, 0x32, 0x9, 0x3, 0x401, 0x8, 0x7fffffff, 0x9, 0x0, 0x1000, 0x120000000000, 0x7ff, 0x2, 0x1000, 0x8000000000000000, 0x5, 0xff, 0x30d4, 0xc07f, 0x1, 0x6fba, 0x81, 0x10001, 0x1e, 0x100, 0x5, 0x1, 0xffffffffffffff00, 0x9, 0xfffffffffffffffd, 0x1f, 0x5, 0xb9, 0x100000001, 0x3, 0x101, 0xd9, 0x80000000, 0x7fff, 0xec7, 0x0, 0x10001, 0x4, 0xffffffff, 0x0, 0x6, 0x3, 0x9, 0x2, 0x9, 0x8a3, 0x7, 0x1, 0x80000001, 0x3, 0x6, 0x724e, 0xfffffffffffffffb, 0x9, 0x100000001, 0x5, 0x80000001, 0x4, 0x2, 0x800, 0x7, 0x9, 0x7ab5, 0x6, 0x6, 0x4a, 0x6, 0x3, 0x4, 0x101, 0x9, 0x2, 0x80, 0x60, 0x0, 0x7, 0x0, 0xa6, 0x1, 0x1, 0x9, 0x0, 0xfffffffffffffffd, 0x7, 0x0, 0x6, 0x400, 0x7fffffffffffffff, 0x7, 0x5, 0x56089b16, 0xfff, 0x8, 0xff, 0x1ff, 0xffffffff, 0xb553, 0xc4, 0xffff, 0x565806e2, 0x5, 0x7fffffffffffffff, 0x2, 0x7, 0x9, 0x47, 0x6, 0x80000000, 0x7, 0x3]}) sendfile(r3, r0, &(0x7f0000000040)=0x3, 0x5c0) 00:12:04 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x5, 0x5}}}, 0x90) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, 0x0, 0x0) 00:12:04 executing program 3: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000800000/0x800000)=nil, &(0x7f0000e1f000/0x2000)=nil, 0x0, 0x0) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf13]}, 0x8) (fail_nth: 19) 00:12:04 executing program 2: fcntl$getown(0xffffffffffffffff, 0x9) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0xe, 0x4, &(0x7f00000000c0)=@framed={{0x18, 0x2}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x6c}]}, &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r2, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r2, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x5, 0x5}}}, 0x90) (async) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r1) (async) r3 = openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r5, 0x0, 0x1, 0x4}}, 0x20) (async) write$RDMA_USER_CM_CMD_BIND(r4, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r5, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x5, 0x5}}}, 0x90) (async) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000440)={0x0, 0x100000001, 0x2}) ioctl$BTRFS_IOC_GET_DEV_STATS(r4, 0xc4089434, &(0x7f0000000840)={r6, 0x4, 0x1, [0x100000001, 0x8, 0x9e1, 0x3, 0x2], [0x7, 0x0, 0x1, 0x9, 0x81, 0x4, 0x6, 0x32, 0x9, 0x3, 0x401, 0x8, 0x7fffffff, 0x9, 0x0, 0x1000, 0x120000000000, 0x7ff, 0x2, 0x1000, 0x8000000000000000, 0x5, 0xff, 0x30d4, 0xc07f, 0x1, 0x6fba, 0x81, 0x10001, 0x1e, 0x100, 0x5, 0x1, 0xffffffffffffff00, 0x9, 0xfffffffffffffffd, 0x1f, 0x5, 0xb9, 0x100000001, 0x3, 0x101, 0xd9, 0x80000000, 0x7fff, 0xec7, 0x0, 0x10001, 0x4, 0xffffffff, 0x0, 0x6, 0x3, 0x9, 0x2, 0x9, 0x8a3, 0x7, 0x1, 0x80000001, 0x3, 0x6, 0x724e, 0xfffffffffffffffb, 0x9, 0x100000001, 0x5, 0x80000001, 0x4, 0x2, 0x800, 0x7, 0x9, 0x7ab5, 0x6, 0x6, 0x4a, 0x6, 0x3, 0x4, 0x101, 0x9, 0x2, 0x80, 0x60, 0x0, 0x7, 0x0, 0xa6, 0x1, 0x1, 0x9, 0x0, 0xfffffffffffffffd, 0x7, 0x0, 0x6, 0x400, 0x7fffffffffffffff, 0x7, 0x5, 0x56089b16, 0xfff, 0x8, 0xff, 0x1ff, 0xffffffff, 0xb553, 0xc4, 0xffff, 0x565806e2, 0x5, 0x7fffffffffffffff, 0x2, 0x7, 0x9, 0x47, 0x6, 0x80000000, 0x7, 0x3]}) (async) sendfile(r3, r0, &(0x7f0000000040)=0x3, 0x5c0) [ 725.008103][ T7518] FAULT_INJECTION: forcing a failure. [ 725.008103][ T7518] name failslab, interval 1, probability 0, space 0, times 0 00:12:05 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x5, 0x5}}}, 0x90) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, 0x0, 0x0) [ 725.042094][ T7518] CPU: 0 PID: 7518 Comm: syz-executor.3 Not tainted 5.15.120-syzkaller #0 [ 725.043882][ T7518] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 725.045958][ T7518] Call trace: [ 725.046671][ T7518] dump_backtrace+0x0/0x530 [ 725.047610][ T7518] show_stack+0x2c/0x3c [ 725.048449][ T7518] dump_stack_lvl+0x108/0x170 [ 725.049500][ T7518] dump_stack+0x1c/0x58 [ 725.050400][ T7518] should_fail+0x400/0x5cc [ 725.051332][ T7518] __should_failslab+0xbc/0x110 [ 725.052280][ T7518] should_failslab+0x10/0x28 [ 725.053174][ T7518] slab_pre_alloc_hook+0x64/0xe8 [ 725.054137][ T7518] kmem_cache_alloc_bulk+0x50/0x4c0 [ 725.055255][ T7518] io_submit_sqes+0x4f00/0x8970 [ 725.056339][ T7518] __arm64_sys_io_uring_enter+0x2a0/0x1cb8 [ 725.057555][ T7518] invoke_syscall+0x98/0x2b8 [ 725.058565][ T7518] el0_svc_common+0x138/0x258 [ 725.059685][ T7518] do_el0_svc+0x58/0x14c [ 725.060644][ T7518] el0_svc+0x7c/0x1f0 [ 725.061462][ T7518] el0t_64_sync_handler+0x84/0xe4 [ 725.062555][ T7518] el0t_64_sync+0x1a0/0x1a4 00:12:05 executing program 4: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) (async) r1 = syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000800000/0x800000)=nil, &(0x7f0000e1f000/0x2000)=nil, 0x0, 0x0) (async) r2 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[r2], 0x1) (async) r3 = fcntl$dupfd(r1, 0x406, r0) syz_io_uring_setup(0x75d0, &(0x7f00000004c0)={0x0, 0x699f, 0x400, 0x0, 0x1a, 0x0, r3}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ad6000/0x4000)=nil, &(0x7f0000000540), &(0x7f0000000580)) (async) r4 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000180)='.pending_reads\x00', 0x480000, 0x40) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net/igmp6\x00') ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000480)={0x78, 0x0, &(0x7f0000000340)=[@acquire_done, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000280)={@fd={0x66642a85, 0x0, r5}, @fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x1, &(0x7f0000000200)=""/27, 0x1b, 0x0, 0x8}}, &(0x7f0000000300)={0x0, 0x18, 0x30}}, 0x40}, @increfs={0x40046304, 0x3}, @exit_looper, @dead_binder_done], 0x4f, 0x0, &(0x7f0000000400)="f7a2d14468e82475763bc219336226c5eb715a71b2867cac974386a0a999388527192a4ace9474c2c02980bbcf2ae368204a2e746123ec8b6ffb1b4b0255857965c521c83dbeba39f2e80fd208d4c3"}) (async, rerun: 32) openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async, rerun: 32) openat$sysfs(0xffffffffffffff9c, &(0x7f00000005c0)='/sys/module/snd_virmidi', 0x0, 0x166) (async, rerun: 64) r6 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) (rerun: 64) r7 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r6}}) (async, rerun: 64) ioctl$USBDEVFS_BULK(r7, 0xc0185502, &(0x7f0000000640)={{{0xc, 0x1}}, 0x0, 0xfffffffe, &(0x7f0000000600)}) (rerun: 64) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf02]}, 0x8) 00:12:05 executing program 5: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000800000/0x800000)=nil, &(0x7f0000e1f000/0x2000)=nil, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[r1], 0x1) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf0d]}, 0x8) (fail_nth: 19) 00:12:05 executing program 2: fcntl$getown(0xffffffffffffffff, 0x9) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0xe, 0x4, &(0x7f00000000c0)=@framed={{0x18, 0x2}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x6c}]}, &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r2, 0x0, 0x1, 0x4}}, 0x20) (async, rerun: 32) write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r2, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x5, 0x5}}}, 0x90) (async, rerun: 32) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r1) r3 = openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r5, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r4, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r5, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x5, 0x5}}}, 0x90) (async) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000440)={0x0, 0x100000001, 0x2}) ioctl$BTRFS_IOC_GET_DEV_STATS(r4, 0xc4089434, &(0x7f0000000840)={r6, 0x4, 0x1, [0x100000001, 0x8, 0x9e1, 0x3, 0x2], [0x7, 0x0, 0x1, 0x9, 0x81, 0x4, 0x6, 0x32, 0x9, 0x3, 0x401, 0x8, 0x7fffffff, 0x9, 0x0, 0x1000, 0x120000000000, 0x7ff, 0x2, 0x1000, 0x8000000000000000, 0x5, 0xff, 0x30d4, 0xc07f, 0x1, 0x6fba, 0x81, 0x10001, 0x1e, 0x100, 0x5, 0x1, 0xffffffffffffff00, 0x9, 0xfffffffffffffffd, 0x1f, 0x5, 0xb9, 0x100000001, 0x3, 0x101, 0xd9, 0x80000000, 0x7fff, 0xec7, 0x0, 0x10001, 0x4, 0xffffffff, 0x0, 0x6, 0x3, 0x9, 0x2, 0x9, 0x8a3, 0x7, 0x1, 0x80000001, 0x3, 0x6, 0x724e, 0xfffffffffffffffb, 0x9, 0x100000001, 0x5, 0x80000001, 0x4, 0x2, 0x800, 0x7, 0x9, 0x7ab5, 0x6, 0x6, 0x4a, 0x6, 0x3, 0x4, 0x101, 0x9, 0x2, 0x80, 0x60, 0x0, 0x7, 0x0, 0xa6, 0x1, 0x1, 0x9, 0x0, 0xfffffffffffffffd, 0x7, 0x0, 0x6, 0x400, 0x7fffffffffffffff, 0x7, 0x5, 0x56089b16, 0xfff, 0x8, 0xff, 0x1ff, 0xffffffff, 0xb553, 0xc4, 0xffff, 0x565806e2, 0x5, 0x7fffffffffffffff, 0x2, 0x7, 0x9, 0x47, 0x6, 0x80000000, 0x7, 0x3]}) sendfile(r3, r0, &(0x7f0000000040)=0x3, 0x5c0) 00:12:05 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x5, 0x5}}}, 0x90) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {}, 0x5, 0x5}}}, 0x90) 00:12:05 executing program 2: r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0xe, 0x4, &(0x7f00000000c0)=@framed={{0x18, 0x2}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x6c}]}, &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000050423eeffffffffffff02000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) bind$packet(r1, &(0x7f0000000100)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) r5 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) r6 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r5}}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000001c0)=@bpf_tracing={0x1a, 0x6, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0xea8}, [@map_idx={0x18, 0x7, 0x5, 0x0, 0x7}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}]}, &(0x7f0000000040)='syzkaller\x00', 0x8, 0x6e, &(0x7f0000000100)=""/110, 0x40f00, 0x4, '\x00', r4, 0x1a, r6, 0x8, &(0x7f0000000080)={0xa, 0x5}, 0x8, 0x10, &(0x7f0000000180)={0x2, 0x5, 0x4, 0x6}, 0x10, 0x21829, r0}, 0x80) [ 725.189411][ T7536] FAULT_INJECTION: forcing a failure. [ 725.189411][ T7536] name failslab, interval 1, probability 0, space 0, times 0 [ 725.203378][ T7536] CPU: 1 PID: 7536 Comm: syz-executor.5 Not tainted 5.15.120-syzkaller #0 [ 725.205167][ T7536] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 725.207291][ T7536] Call trace: [ 725.207955][ T7536] dump_backtrace+0x0/0x530 [ 725.208915][ T7536] show_stack+0x2c/0x3c [ 725.209799][ T7536] dump_stack_lvl+0x108/0x170 [ 725.210784][ T7536] dump_stack+0x1c/0x58 [ 725.211664][ T7536] should_fail+0x400/0x5cc [ 725.212588][ T7536] __should_failslab+0xbc/0x110 [ 725.213643][ T7536] should_failslab+0x10/0x28 [ 725.214640][ T7536] slab_pre_alloc_hook+0x64/0xe8 [ 725.215687][ T7536] kmem_cache_alloc_bulk+0x50/0x4c0 [ 725.216733][ T7536] io_submit_sqes+0x4f00/0x8970 [ 725.217765][ T7536] __arm64_sys_io_uring_enter+0x2a0/0x1cb8 [ 725.218891][ T7536] invoke_syscall+0x98/0x2b8 [ 725.220030][ T7536] el0_svc_common+0x138/0x258 [ 725.221014][ T7536] do_el0_svc+0x58/0x14c [ 725.221925][ T7536] el0_svc+0x7c/0x1f0 [ 725.222749][ T7536] el0t_64_sync_handler+0x84/0xe4 [ 725.223812][ T7536] el0t_64_sync+0x1a0/0x1a4 00:12:05 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x5, 0x5}}}, 0x90) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {}, 0x5, 0x5}}}, 0x90) [ 725.241083][ T7540] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 00:12:05 executing program 1: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x0) syz_io_uring_setup(0x2494, &(0x7f00000001c0), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000040)=0x0) r4 = socket$inet6_dccp(0xa, 0x6, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000240)=@l2tp6={0xa, 0x0, 0x0, @remote}}, 0x0) syz_io_uring_setup(0x2494, &(0x7f00000001c0), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000040)=0x0) r7 = socket$inet6_dccp(0xa, 0x6, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000240)=@l2tp6={0xa, 0x0, 0x0, @remote}}, 0x0) r8 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) r9 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r9}, 0x2c, {'wfdno', 0x3d, r8}}) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, r6, &(0x7f00000001c0)=@IORING_OP_SYMLINKAT={0x26, 0x5d, 0x0, r9, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, {0x0, r10}}, 0x2) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[r1], 0x1) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf09]}, 0x8) syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) (async) syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x0) (async) syz_io_uring_setup(0x2494, &(0x7f00000001c0), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000040)) (async) socket$inet6_dccp(0xa, 0x6, 0x0) (async) syz_io_uring_submit(r2, r3, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000240)=@l2tp6={0xa, 0x0, 0x0, @remote}}, 0x0) (async) syz_io_uring_setup(0x2494, &(0x7f00000001c0), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000040)) (async) socket$inet6_dccp(0xa, 0x6, 0x0) (async) syz_io_uring_submit(r5, r6, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000240)=@l2tp6={0xa, 0x0, 0x0, @remote}}, 0x0) (async) openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) (async) openat$vcs(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) (async) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r9}, 0x2c, {'wfdno', 0x3d, r8}}) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) (async) syz_io_uring_submit(r2, r6, &(0x7f00000001c0)=@IORING_OP_SYMLINKAT={0x26, 0x5d, 0x0, r9, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, {0x0, r10}}, 0x2) (async) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[r1], 0x1) (async) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf09]}, 0x8) (async) 00:12:05 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x5, 0x5}}}, 0x90) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {}, 0x5, 0x5}}}, 0x90) 00:12:05 executing program 3: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000800000/0x800000)=nil, &(0x7f0000e1f000/0x2000)=nil, 0x0, 0x0) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf13]}, 0x8) (fail_nth: 20) 00:12:05 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0xe, 0x4, &(0x7f00000000c0)=@framed={{0x18, 0x2}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x6c}]}, &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0xe, 0x4, &(0x7f00000000c0)=@framed={{0x18, 0x2}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x6c}]}, &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) (async) r3 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) (async) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000050423eeffffffffffff02000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) bind$packet(r1, &(0x7f0000000100)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) (async) r5 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) r6 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r5}}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000001c0)=@bpf_tracing={0x1a, 0x6, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0xea8}, [@map_idx={0x18, 0x7, 0x5, 0x0, 0x7}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}]}, &(0x7f0000000040)='syzkaller\x00', 0x8, 0x6e, &(0x7f0000000100)=""/110, 0x40f00, 0x4, '\x00', r4, 0x1a, r6, 0x8, &(0x7f0000000080)={0xa, 0x5}, 0x8, 0x10, &(0x7f0000000180)={0x2, 0x5, 0x4, 0x6}, 0x10, 0x21829, r0}, 0x80) 00:12:05 executing program 4: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) (async) r1 = syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000800000/0x800000)=nil, &(0x7f0000e1f000/0x2000)=nil, 0x0, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[r2], 0x1) (async) r3 = fcntl$dupfd(r1, 0x406, r0) syz_io_uring_setup(0x75d0, &(0x7f00000004c0)={0x0, 0x699f, 0x400, 0x0, 0x1a, 0x0, r3}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ad6000/0x4000)=nil, &(0x7f0000000540), &(0x7f0000000580)) (async) r4 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000180)='.pending_reads\x00', 0x480000, 0x40) (async, rerun: 32) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net/igmp6\x00') (rerun: 32) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000480)={0x78, 0x0, &(0x7f0000000340)=[@acquire_done, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000280)={@fd={0x66642a85, 0x0, r5}, @fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x1, &(0x7f0000000200)=""/27, 0x1b, 0x0, 0x8}}, &(0x7f0000000300)={0x0, 0x18, 0x30}}, 0x40}, @increfs={0x40046304, 0x3}, @exit_looper, @dead_binder_done], 0x4f, 0x0, &(0x7f0000000400)="f7a2d14468e82475763bc219336226c5eb715a71b2867cac974386a0a999388527192a4ace9474c2c02980bbcf2ae368204a2e746123ec8b6ffb1b4b0255857965c521c83dbeba39f2e80fd208d4c3"}) openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async, rerun: 32) openat$sysfs(0xffffffffffffff9c, &(0x7f00000005c0)='/sys/module/snd_virmidi', 0x0, 0x166) (async, rerun: 32) r6 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) (async, rerun: 32) r7 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) (rerun: 32) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r6}}) ioctl$USBDEVFS_BULK(r7, 0xc0185502, &(0x7f0000000640)={{{0xc, 0x1}}, 0x0, 0xfffffffe, &(0x7f0000000600)}) (async) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf02]}, 0x8) [ 725.407417][ T7546] FAULT_INJECTION: forcing a failure. [ 725.407417][ T7546] name failslab, interval 1, probability 0, space 0, times 0 00:12:05 executing program 5: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000800000/0x800000)=nil, &(0x7f0000e1f000/0x2000)=nil, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[r1], 0x1) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf0d]}, 0x8) (fail_nth: 20) 00:12:05 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x5, 0x5}}}, 0x90) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r3, 0x0, 0x0, @ib={0x1b, 0x0, 0x0, {}, 0x5, 0x5}}}, 0x90) [ 725.425312][ T7546] CPU: 1 PID: 7546 Comm: syz-executor.3 Not tainted 5.15.120-syzkaller #0 [ 725.426992][ T7546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 725.429021][ T7546] Call trace: [ 725.429706][ T7546] dump_backtrace+0x0/0x530 [ 725.430665][ T7546] show_stack+0x2c/0x3c [ 725.431445][ T7546] dump_stack_lvl+0x108/0x170 [ 725.432439][ T7546] dump_stack+0x1c/0x58 [ 725.433222][ T7546] should_fail+0x400/0x5cc [ 725.434114][ T7546] __should_failslab+0xbc/0x110 [ 725.435068][ T7546] should_failslab+0x10/0x28 [ 725.436037][ T7546] slab_pre_alloc_hook+0x64/0xe8 [ 725.437227][ T7546] kmem_cache_alloc_bulk+0x50/0x4c0 [ 725.438235][ T7546] io_submit_sqes+0x4f00/0x8970 [ 725.439251][ T7546] __arm64_sys_io_uring_enter+0x2a0/0x1cb8 [ 725.440428][ T7546] invoke_syscall+0x98/0x2b8 [ 725.441361][ T7546] el0_svc_common+0x138/0x258 [ 725.442258][ T7546] do_el0_svc+0x58/0x14c [ 725.443142][ T7546] el0_svc+0x7c/0x1f0 [ 725.443983][ T7546] el0t_64_sync_handler+0x84/0xe4 [ 725.445108][ T7546] el0t_64_sync+0x1a0/0x1a4 [ 725.468444][ T7548] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 725.485840][ T7560] FAULT_INJECTION: forcing a failure. [ 725.485840][ T7560] name fail_page_alloc, interval 1, probability 0, space 0, times 0 00:12:05 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x5, 0x5}}}, 0x90) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r3, 0x0, 0x0, @ib={0x1b, 0x0, 0x0, {}, 0x5, 0x5}}}, 0x90) [ 725.491810][ T7560] CPU: 1 PID: 7560 Comm: syz-executor.5 Not tainted 5.15.120-syzkaller #0 [ 725.491828][ T7560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 725.491837][ T7560] Call trace: [ 725.491841][ T7560] dump_backtrace+0x0/0x530 [ 725.491859][ T7560] show_stack+0x2c/0x3c [ 725.491871][ T7560] dump_stack_lvl+0x108/0x170 [ 725.491884][ T7560] dump_stack+0x1c/0x58 00:12:05 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x5, 0x5}}}, 0x90) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r3, 0x0, 0x0, @ib={0x1b, 0x0, 0x0, {}, 0x5, 0x5}}}, 0x90) [ 725.491895][ T7560] should_fail+0x400/0x5cc [ 725.491907][ T7560] should_fail_alloc_page+0x74/0xa8 [ 725.491919][ T7560] prepare_alloc_pages+0x160/0x4cc 00:12:05 executing program 5: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000800000/0x800000)=nil, &(0x7f0000e1f000/0x2000)=nil, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[r1], 0x1) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf0d]}, 0x8) (fail_nth: 21) [ 725.491929][ T7560] __alloc_pages+0x138/0x674 [ 725.491940][ T7560] alloc_pages+0x390/0x634 [ 725.491950][ T7560] new_slab+0xec/0x56c [ 725.491962][ T7560] ___slab_alloc+0x6bc/0xdbc [ 725.491973][ T7560] kmem_cache_alloc_bulk+0x1a0/0x4c0 [ 725.491985][ T7560] io_submit_sqes+0x4f00/0x8970 [ 725.491996][ T7560] __arm64_sys_io_uring_enter+0x2a0/0x1cb8 00:12:05 executing program 3: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000800000/0x800000)=nil, &(0x7f0000e1f000/0x2000)=nil, 0x0, 0x0) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf13]}, 0x8) (fail_nth: 21) [ 725.492010][ T7560] invoke_syscall+0x98/0x2b8 [ 725.492023][ T7560] el0_svc_common+0x138/0x258 00:12:05 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x5, 0x5}}}, 0x90) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {}, 0x0, 0x5}}}, 0x90) [ 725.492034][ T7560] do_el0_svc+0x58/0x14c [ 725.492045][ T7560] el0_svc+0x7c/0x1f0 [ 725.492072][ T7560] el0t_64_sync_handler+0x84/0xe4 [ 725.492085][ T7560] el0t_64_sync+0x1a0/0x1a4 [ 725.648902][ T7574] FAULT_INJECTION: forcing a failure. [ 725.648902][ T7574] name failslab, interval 1, probability 0, space 0, times 0 [ 725.648932][ T7574] CPU: 0 PID: 7574 Comm: syz-executor.5 Not tainted 5.15.120-syzkaller #0 [ 725.648946][ T7574] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 725.648954][ T7574] Call trace: [ 725.648958][ T7574] dump_backtrace+0x0/0x530 [ 725.648976][ T7574] show_stack+0x2c/0x3c [ 725.648988][ T7574] dump_stack_lvl+0x108/0x170 [ 725.649001][ T7574] dump_stack+0x1c/0x58 [ 725.649011][ T7574] should_fail+0x400/0x5cc [ 725.649023][ T7574] __should_failslab+0xbc/0x110 [ 725.649036][ T7574] should_failslab+0x10/0x28 [ 725.649050][ T7574] slab_pre_alloc_hook+0x64/0xe8 [ 725.649078][ T7574] __kmalloc_node+0xbc/0x5b8 [ 725.649090][ T7574] memcg_alloc_page_obj_cgroups+0x80/0x174 [ 725.649103][ T7574] new_slab+0x120/0x56c [ 725.649115][ T7574] ___slab_alloc+0x6bc/0xdbc [ 725.649126][ T7574] kmem_cache_alloc_bulk+0x1a0/0x4c0 [ 725.649138][ T7574] io_submit_sqes+0x4f00/0x8970 [ 725.649150][ T7574] __arm64_sys_io_uring_enter+0x2a0/0x1cb8 [ 725.649164][ T7574] invoke_syscall+0x98/0x2b8 [ 725.649176][ T7574] el0_svc_common+0x138/0x258 [ 725.649187][ T7574] do_el0_svc+0x58/0x14c [ 725.649199][ T7574] el0_svc+0x7c/0x1f0 [ 725.649210][ T7574] el0t_64_sync_handler+0x84/0xe4 [ 725.649223][ T7574] el0t_64_sync+0x1a0/0x1a4 [ 725.689893][ T7582] FAULT_INJECTION: forcing a failure. [ 725.689893][ T7582] name failslab, interval 1, probability 0, space 0, times 0 [ 725.689923][ T7582] CPU: 0 PID: 7582 Comm: syz-executor.3 Not tainted 5.15.120-syzkaller #0 [ 725.689937][ T7582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 725.689945][ T7582] Call trace: [ 725.689949][ T7582] dump_backtrace+0x0/0x530 [ 725.689967][ T7582] show_stack+0x2c/0x3c [ 725.689979][ T7582] dump_stack_lvl+0x108/0x170 [ 725.689992][ T7582] dump_stack+0x1c/0x58 [ 725.690002][ T7582] should_fail+0x400/0x5cc [ 725.690014][ T7582] __should_failslab+0xbc/0x110 [ 725.690026][ T7582] should_failslab+0x10/0x28 [ 725.690039][ T7582] slab_pre_alloc_hook+0x64/0xe8 [ 725.690051][ T7582] kmem_cache_alloc_bulk+0x50/0x4c0 [ 725.690082][ T7582] io_submit_sqes+0x4f00/0x8970 [ 725.690094][ T7582] __arm64_sys_io_uring_enter+0x2a0/0x1cb8 [ 725.690108][ T7582] invoke_syscall+0x98/0x2b8 [ 725.690120][ T7582] el0_svc_common+0x138/0x258 [ 725.690132][ T7582] do_el0_svc+0x58/0x14c [ 725.690143][ T7582] el0_svc+0x7c/0x1f0 [ 725.690155][ T7582] el0t_64_sync_handler+0x84/0xe4 [ 725.690167][ T7582] el0t_64_sync+0x1a0/0x1a4 00:12:05 executing program 1: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) (async) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x0) (async) syz_io_uring_setup(0x2494, &(0x7f00000001c0), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000040)=0x0) (async) r4 = socket$inet6_dccp(0xa, 0x6, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000240)=@l2tp6={0xa, 0x0, 0x0, @remote}}, 0x0) (async) syz_io_uring_setup(0x2494, &(0x7f00000001c0), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000040)=0x0) (async) r7 = socket$inet6_dccp(0xa, 0x6, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000240)=@l2tp6={0xa, 0x0, 0x0, @remote}}, 0x0) (async) r8 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) (async) r9 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r9}, 0x2c, {'wfdno', 0x3d, r8}}) (async) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, r6, &(0x7f00000001c0)=@IORING_OP_SYMLINKAT={0x26, 0x5d, 0x0, r9, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, {0x0, r10}}, 0x2) (async) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[r1], 0x1) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf09]}, 0x8) 00:12:05 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x5, 0x5}}}, 0x90) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {}, 0x0, 0x5}}}, 0x90) 00:12:05 executing program 5: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000800000/0x800000)=nil, &(0x7f0000e1f000/0x2000)=nil, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[r1], 0x1) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf0d]}, 0x8) (fail_nth: 22) 00:12:05 executing program 3: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000800000/0x800000)=nil, &(0x7f0000e1f000/0x2000)=nil, 0x0, 0x0) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf13]}, 0x8) (fail_nth: 22) 00:12:05 executing program 2: r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0xe, 0x4, &(0x7f00000000c0)=@framed={{0x18, 0x2}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x6c}]}, &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) (async) r3 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000050423eeffffffffffff02000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) bind$packet(r1, &(0x7f0000000100)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) (async) r5 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) r6 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r5}}) (async) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r5}}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000001c0)=@bpf_tracing={0x1a, 0x6, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0xea8}, [@map_idx={0x18, 0x7, 0x5, 0x0, 0x7}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}]}, &(0x7f0000000040)='syzkaller\x00', 0x8, 0x6e, &(0x7f0000000100)=""/110, 0x40f00, 0x4, '\x00', r4, 0x1a, r6, 0x8, &(0x7f0000000080)={0xa, 0x5}, 0x8, 0x10, &(0x7f0000000180)={0x2, 0x5, 0x4, 0x6}, 0x10, 0x21829, r0}, 0x80) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000001c0)=@bpf_tracing={0x1a, 0x6, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0xea8}, [@map_idx={0x18, 0x7, 0x5, 0x0, 0x7}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}]}, &(0x7f0000000040)='syzkaller\x00', 0x8, 0x6e, &(0x7f0000000100)=""/110, 0x40f00, 0x4, '\x00', r4, 0x1a, r6, 0x8, &(0x7f0000000080)={0xa, 0x5}, 0x8, 0x10, &(0x7f0000000180)={0x2, 0x5, 0x4, 0x6}, 0x10, 0x21829, r0}, 0x80) 00:12:05 executing program 4: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000800000/0x800000)=nil, &(0x7f0000e1f000/0x2000)=nil, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) syz_io_uring_setup(0x2494, &(0x7f00000001c0), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000040)=0x0) r4 = socket$inet6_dccp(0xa, 0x6, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000240)=@l2tp6={0xa, 0x0, 0x0, @remote}}, 0x0) syz_io_uring_setup(0x2494, &(0x7f00000001c0), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000040)=0x0) r7 = socket$inet6_dccp(0xa, 0x6, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000240)=@l2tp6={0xa, 0x0, 0x0, @remote}}, 0x0) syz_io_uring_submit(r2, r6, &(0x7f00000000c0)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x4c}, 0x400) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[r1], 0x1) r8 = syz_open_dev$vcsa(&(0x7f0000000180), 0x9, 0x1) io_uring_enter(r8, 0x80040b3, 0x0, 0x2, &(0x7f0000000000)={[0xf02]}, 0x8) bind(r1, &(0x7f00000002c0)=@generic={0x10, "8031d09c1574ef68e1c01a8075a5071863ed7ff69c3d4230da0f657a2ca9dda23d685dd92f249417863b4af51902934d29957edbe2d57e8e21a3fa3d1ba6aafd7e9c025f377c9d80714fb931e28cfaae3bcba9d9cb6f7834182f1dd0790aa108c5ca7ff7d6c98bf624ab0cd281409b53ed667fba20366297eb03813fb896"}, 0x80) [ 725.955069][ T7590] FAULT_INJECTION: forcing a failure. [ 725.955069][ T7590] name failslab, interval 1, probability 0, space 0, times 0 [ 725.958668][ T7590] CPU: 1 PID: 7590 Comm: syz-executor.5 Not tainted 5.15.120-syzkaller #0 [ 725.960383][ T7590] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 725.961719][ T7591] FAULT_INJECTION: forcing a failure. [ 725.961719][ T7591] name failslab, interval 1, probability 0, space 0, times 0 [ 725.962516][ T7590] Call trace: [ 725.962524][ T7590] dump_backtrace+0x0/0x530 [ 725.966709][ T7590] show_stack+0x2c/0x3c [ 725.967570][ T7590] dump_stack_lvl+0x108/0x170 [ 725.968518][ T7590] dump_stack+0x1c/0x58 [ 725.969351][ T7590] should_fail+0x400/0x5cc [ 725.970222][ T7590] __should_failslab+0xbc/0x110 [ 725.971153][ T7590] should_failslab+0x10/0x28 [ 725.972208][ T7590] slab_pre_alloc_hook+0x64/0xe8 [ 725.973212][ T7590] kmem_cache_alloc_bulk+0x50/0x4c0 [ 725.974250][ T7590] io_submit_sqes+0x4f00/0x8970 [ 725.975264][ T7590] __arm64_sys_io_uring_enter+0x2a0/0x1cb8 [ 725.976455][ T7590] invoke_syscall+0x98/0x2b8 [ 725.977442][ T7590] el0_svc_common+0x138/0x258 [ 725.978407][ T7590] do_el0_svc+0x58/0x14c [ 725.979264][ T7590] el0_svc+0x7c/0x1f0 [ 725.980082][ T7590] el0t_64_sync_handler+0x84/0xe4 [ 725.981093][ T7590] el0t_64_sync+0x1a0/0x1a4 [ 725.982101][ T7591] CPU: 0 PID: 7591 Comm: syz-executor.3 Not tainted 5.15.120-syzkaller #0 [ 725.983858][ T7591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 725.986015][ T7591] Call trace: [ 725.986652][ T7591] dump_backtrace+0x0/0x530 [ 725.987559][ T7591] show_stack+0x2c/0x3c [ 725.988433][ T7591] dump_stack_lvl+0x108/0x170 [ 725.989458][ T7591] dump_stack+0x1c/0x58 [ 725.990336][ T7591] should_fail+0x400/0x5cc [ 725.991315][ T7591] __should_failslab+0xbc/0x110 [ 725.992412][ T7591] should_failslab+0x10/0x28 [ 725.993419][ T7591] slab_pre_alloc_hook+0x64/0xe8 [ 725.994446][ T7591] kmem_cache_alloc_bulk+0x50/0x4c0 [ 725.995465][ T7591] io_submit_sqes+0x4f00/0x8970 [ 725.996443][ T7591] __arm64_sys_io_uring_enter+0x2a0/0x1cb8 [ 725.996462][ T7591] invoke_syscall+0x98/0x2b8 [ 725.996474][ T7591] el0_svc_common+0x138/0x258 [ 725.996486][ T7591] do_el0_svc+0x58/0x14c [ 725.996497][ T7591] el0_svc+0x7c/0x1f0 00:12:05 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x5, 0x5}}}, 0x90) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {}, 0x0, 0x5}}}, 0x90) [ 725.996509][ T7591] el0t_64_sync_handler+0x84/0xe4 [ 725.996521][ T7591] el0t_64_sync+0x1a0/0x1a4 [ 726.009398][ T7599] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 00:12:06 executing program 4: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000800000/0x800000)=nil, &(0x7f0000e1f000/0x2000)=nil, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) syz_io_uring_setup(0x2494, &(0x7f00000001c0), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000040)) (async) syz_io_uring_setup(0x2494, &(0x7f00000001c0), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000040)=0x0) r4 = socket$inet6_dccp(0xa, 0x6, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000240)=@l2tp6={0xa, 0x0, 0x0, @remote}}, 0x0) (async) syz_io_uring_submit(r2, r3, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000240)=@l2tp6={0xa, 0x0, 0x0, @remote}}, 0x0) syz_io_uring_setup(0x2494, &(0x7f00000001c0), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000040)) (async) syz_io_uring_setup(0x2494, &(0x7f00000001c0), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000040)=0x0) r7 = socket$inet6_dccp(0xa, 0x6, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000240)=@l2tp6={0xa, 0x0, 0x0, @remote}}, 0x0) (async) syz_io_uring_submit(r5, r6, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000240)=@l2tp6={0xa, 0x0, 0x0, @remote}}, 0x0) syz_io_uring_submit(r2, r6, &(0x7f00000000c0)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x4c}, 0x400) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[r1], 0x1) r8 = syz_open_dev$vcsa(&(0x7f0000000180), 0x9, 0x1) io_uring_enter(r8, 0x80040b3, 0x0, 0x2, &(0x7f0000000000)={[0xf02]}, 0x8) bind(r1, &(0x7f00000002c0)=@generic={0x10, "8031d09c1574ef68e1c01a8075a5071863ed7ff69c3d4230da0f657a2ca9dda23d685dd92f249417863b4af51902934d29957edbe2d57e8e21a3fa3d1ba6aafd7e9c025f377c9d80714fb931e28cfaae3bcba9d9cb6f7834182f1dd0790aa108c5ca7ff7d6c98bf624ab0cd281409b53ed667fba20366297eb03813fb896"}, 0x80) 00:12:06 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x5, 0x5}}}, 0x90) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {}, 0x5}}}, 0x90) 00:12:06 executing program 3: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000800000/0x800000)=nil, &(0x7f0000e1f000/0x2000)=nil, 0x0, 0x0) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf13]}, 0x8) (fail_nth: 23) 00:12:06 executing program 2: prctl$PR_MCE_KILL(0x21, 0x1, 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0xe, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="180200000000000000000000020000005e00000000"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:12:06 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x5, 0x5}}}, 0x90) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {}, 0x5}}}, 0x90) 00:12:06 executing program 1: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[r1], 0x1) r2 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000280)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r2}}) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000340)=@urb_type_bulk={0x3, {}, 0x8, 0x61, &(0x7f00000000c0)="07d5a1361a77a0497e4df2e34e60bb9448b7da3d927c75ef75ff69b09fcb4d43a2a010", 0x23, 0xa4, 0x4, 0x0, 0xbf8, 0x4, &(0x7f0000000700)="507b2ea84a6e2dfc52c63f00cadc5fe99565d0866258695e8eacb0afd0d807acf444b2607e13554695ba2068d4f60f5200b80eb0f41b8f9a5dbe8f67b638d39ec5573bdd8be4e288b5ac2fc2594b6455fa0e9a4bec3ada719b8f0b11f35a1991d4370619907678730af880f7fb0f68b4b75a838213fa8b5e28d32714900d7946896e00d28fe61a39a04155b32a9de734a4ebd24e4baa9882eb239bcf7a1273ebbf0f7ad44ed3a51c215ddd2126c1ebb5ebc56f"}) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000400)=@urb_type_iso={0x0, {0x6, 0x1}, 0x1, 0x42, &(0x7f0000000180)="0133bf6573320dc8edfc862343e048a6840183a9478688062e98f8b2822b29f6e81c1ebc38b0c34f6e3d97f1d2137945e6d1c75925c857ea80dd9a205abdb84dc644a03b3c7f0e38f6176fa9a7fbbfe2fb7f5edd29f2a9ff8ead2e958ec2b11cc5848094cf331e0fbacd87ad841c9b4d5253740420633d20b110fd114ea57c83d3967513959f4d78c7be4739e9504f30f277dec85cf164b74e6a8f8ef62f0f1fd1d71906f9cbc6add0f916b23209ae6a08", 0xb1, 0x0, 0x7, 0x37, 0x100, 0x10001, &(0x7f0000000280)="d637d2afd1c0231407bf582d4078ea960e340a0fdbbff75754530deff5f1e76f39d8868bc5837c65b44d6166ff01d7d6ebf579bf609b849a88811dc6d7ef8bcb66d4f70495c0d9c5178fda94830b4e39108356719ed15677400e930b7300fe01872d1245445265d68f551ca07e52732cd01ccc760579ebe36e89076ed6eca6a27b2f35faeb5bb03561169c7d7b33efcc7e2dedca931c384ad8f71af87a96f5261f3c12ee7a5aaa8f46d06212be1792d4e8160937dfc4a8a149a506892a70", [{0x3, 0x9, 0x4}, {0x2, 0x4, 0x27855798}, {0xfffff419, 0x0, 0x2261a83a}, {0x3f, 0x7fff, 0x9}, {0x1000, 0x7, 0x7f}, {0x48, 0x9, 0x4}, {0x0, 0x800, 0x9279}, {0xf0, 0x2fe81854, 0x1}, {0x5, 0x8, 0x4}, {0x401, 0x3f, 0x7fff}, {0x6, 0x8001, 0x5}, {0x2c61f030, 0x80000000, 0x7}, {0x757, 0x7fff, 0x8}, {0xc2f2, 0x1000, 0x6}, {0xae0, 0x3f, 0x7f}, {0x5, 0x1, 0xfffffffd}, {0x10001, 0x401, 0x81a4}, {0x2, 0x1f, 0x6}, {0x3, 0xfffffffe, 0xff76}, {0x0, 0x7e, 0xffffffff}, {0x2, 0x6, 0x2}, {0x10000, 0x0, 0x3ff}, {0xffffff81, 0x6, 0x94cc}, {0x6, 0x1, 0x6}, {0x1, 0x3}, {0x80, 0x9320, 0x7}, {0x43a, 0x10000, 0xbc}, {0x4ded, 0x2, 0x7}, {0x100, 0xfffffffe, 0x9}, {0x1, 0x22, 0x6}, {0x100, 0x80000001, 0xbb}, {0x5}, {0xf0, 0x1, 0xb809}, {0x8, 0x1000}, {0x200, 0x10000, 0x5}, {0xff, 0x3, 0x3}, {0x0, 0x1, 0x7}, {0x4, 0xbcb, 0x2}, {0x6, 0x1, 0x10001}, {0x6, 0x200, 0x6}, {0x400, 0x8, 0xbb2e}, {0x6cf3ea5f, 0x1, 0x7}, {0x4, 0x10001, 0x400}, {0x3, 0x0, 0x7}, {0x3, 0x9, 0x4}, {0x3ff, 0x4, 0x7}, {0x7ff, 0x3, 0x8}, {0x3, 0xffff, 0x8}, {0x4, 0x8001, 0x600000}, {0x6, 0x3, 0x9}, {0x19, 0x0, 0x7}, {0x200, 0x5fb, 0x8000000}, {0x4, 0x6, 0x15}, {0xfffffff7, 0x9, 0x1f}, {0x3, 0x7fff, 0x80000001}]}) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf09]}, 0x8) 00:12:06 executing program 5: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000800000/0x800000)=nil, &(0x7f0000e1f000/0x2000)=nil, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[r1], 0x1) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf0d]}, 0x8) (fail_nth: 23) [ 726.197265][ T7612] FAULT_INJECTION: forcing a failure. [ 726.197265][ T7612] name failslab, interval 1, probability 0, space 0, times 0 [ 726.199983][ T7612] CPU: 1 PID: 7612 Comm: syz-executor.3 Not tainted 5.15.120-syzkaller #0 [ 726.201871][ T7612] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 726.204019][ T7612] Call trace: [ 726.204744][ T7612] dump_backtrace+0x0/0x530 [ 726.205675][ T7612] show_stack+0x2c/0x3c [ 726.206579][ T7612] dump_stack_lvl+0x108/0x170 [ 726.207572][ T7612] dump_stack+0x1c/0x58 [ 726.208460][ T7612] should_fail+0x400/0x5cc [ 726.209375][ T7612] __should_failslab+0xbc/0x110 [ 726.210409][ T7612] should_failslab+0x10/0x28 [ 726.211337][ T7612] slab_pre_alloc_hook+0x64/0xe8 [ 726.212331][ T7612] kmem_cache_alloc_bulk+0x50/0x4c0 [ 726.213319][ T7612] io_submit_sqes+0x4f00/0x8970 [ 726.214293][ T7612] __arm64_sys_io_uring_enter+0x2a0/0x1cb8 [ 726.215434][ T7612] invoke_syscall+0x98/0x2b8 [ 726.216329][ T7612] el0_svc_common+0x138/0x258 [ 726.217254][ T7612] do_el0_svc+0x58/0x14c [ 726.218093][ T7612] el0_svc+0x7c/0x1f0 [ 726.218926][ T7612] el0t_64_sync_handler+0x84/0xe4 [ 726.219966][ T7612] el0t_64_sync+0x1a0/0x1a4 00:12:06 executing program 4: syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) (async) r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000800000/0x800000)=nil, &(0x7f0000e1f000/0x2000)=nil, 0x0, 0x0) (async) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000800000/0x800000)=nil, &(0x7f0000e1f000/0x2000)=nil, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) (async) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) syz_io_uring_setup(0x2494, &(0x7f00000001c0), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000040)=0x0) r4 = socket$inet6_dccp(0xa, 0x6, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000240)=@l2tp6={0xa, 0x0, 0x0, @remote}}, 0x0) syz_io_uring_setup(0x2494, &(0x7f00000001c0), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000040)=0x0) r7 = socket$inet6_dccp(0xa, 0x6, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000240)=@l2tp6={0xa, 0x0, 0x0, @remote}}, 0x0) syz_io_uring_submit(r2, r6, &(0x7f00000000c0)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x4c}, 0x400) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[r1], 0x1) r8 = syz_open_dev$vcsa(&(0x7f0000000180), 0x9, 0x1) io_uring_enter(r8, 0x80040b3, 0x0, 0x2, &(0x7f0000000000)={[0xf02]}, 0x8) bind(r1, &(0x7f00000002c0)=@generic={0x10, "8031d09c1574ef68e1c01a8075a5071863ed7ff69c3d4230da0f657a2ca9dda23d685dd92f249417863b4af51902934d29957edbe2d57e8e21a3fa3d1ba6aafd7e9c025f377c9d80714fb931e28cfaae3bcba9d9cb6f7834182f1dd0790aa108c5ca7ff7d6c98bf624ab0cd281409b53ed667fba20366297eb03813fb896"}, 0x80) (async) bind(r1, &(0x7f00000002c0)=@generic={0x10, "8031d09c1574ef68e1c01a8075a5071863ed7ff69c3d4230da0f657a2ca9dda23d685dd92f249417863b4af51902934d29957edbe2d57e8e21a3fa3d1ba6aafd7e9c025f377c9d80714fb931e28cfaae3bcba9d9cb6f7834182f1dd0790aa108c5ca7ff7d6c98bf624ab0cd281409b53ed667fba20366297eb03813fb896"}, 0x80) 00:12:06 executing program 2: prctl$PR_MCE_KILL(0x21, 0x1, 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0xe, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="180200000000000000000000020000005e00000000"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) prctl$PR_MCE_KILL(0x21, 0x1, 0x2) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0xe, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="180200000000000000000000020000005e00000000"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) [ 726.242564][ T7620] FAULT_INJECTION: forcing a failure. [ 726.242564][ T7620] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 726.251910][ T7620] CPU: 0 PID: 7620 Comm: syz-executor.5 Not tainted 5.15.120-syzkaller #0 [ 726.253734][ T7620] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 726.255832][ T7620] Call trace: [ 726.256412][ T7620] dump_backtrace+0x0/0x530 [ 726.257361][ T7620] show_stack+0x2c/0x3c [ 726.258276][ T7620] dump_stack_lvl+0x108/0x170 [ 726.259206][ T7620] dump_stack+0x1c/0x58 [ 726.260072][ T7620] should_fail+0x400/0x5cc [ 726.260956][ T7620] should_fail_alloc_page+0x74/0xa8 [ 726.262018][ T7620] prepare_alloc_pages+0x160/0x4cc [ 726.263010][ T7620] __alloc_pages+0x138/0x674 [ 726.263999][ T7620] alloc_pages+0x390/0x634 [ 726.264829][ T7620] new_slab+0xec/0x56c [ 726.265640][ T7620] ___slab_alloc+0x6bc/0xdbc [ 726.266589][ T7620] kmem_cache_alloc_bulk+0x1a0/0x4c0 [ 726.267602][ T7620] io_submit_sqes+0x4f00/0x8970 [ 726.268610][ T7620] __arm64_sys_io_uring_enter+0x2a0/0x1cb8 [ 726.269841][ T7620] invoke_syscall+0x98/0x2b8 [ 726.270822][ T7620] el0_svc_common+0x138/0x258 [ 726.271791][ T7620] do_el0_svc+0x58/0x14c [ 726.272658][ T7620] el0_svc+0x7c/0x1f0 [ 726.273531][ T7620] el0t_64_sync_handler+0x84/0xe4 [ 726.274527][ T7620] el0t_64_sync+0x1a0/0x1a4 00:12:06 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x5, 0x5}}}, 0x90) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {}, 0x5}}}, 0x90) 00:12:06 executing program 4: r0 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) mkdirat(r1, &(0x7f00000000c0)='./file0\x00', 0x0) r2 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) r3 = socket$can_j1939(0x1d, 0x2, 0x7) copy_file_range(r3, &(0x7f0000000200), r2, &(0x7f00000002c0)=0x800, 0xe2, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000800000/0x800000)=nil, &(0x7f0000e1f000/0x2000)=nil, 0x0, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000240)=[r4], 0x1) io_uring_enter(r2, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf02]}, 0x8) 00:12:06 executing program 2: prctl$PR_MCE_KILL(0x21, 0x1, 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0xe, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="180200000000000000000000020000005e00000000"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:12:06 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x5, 0x5}}}, 0x90) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {}, 0x5, 0x5}}}, 0x90) (fail_nth: 1) 00:12:06 executing program 3: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000800000/0x800000)=nil, &(0x7f0000e1f000/0x2000)=nil, 0x0, 0x0) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf13]}, 0x8) (fail_nth: 24) 00:12:06 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) setsockopt$MRT_FLUSH(r0, 0x0, 0xd4, &(0x7f0000000000)=0x17, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0xe, 0x1, &(0x7f00000000c0)=ANY=[@ANYBLOB="8550b43adfe67704"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 726.417470][ T7634] FAULT_INJECTION: forcing a failure. [ 726.417470][ T7634] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 726.424336][ T7634] CPU: 1 PID: 7634 Comm: syz-executor.0 Not tainted 5.15.120-syzkaller #0 [ 726.426161][ T7634] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 726.428306][ T7634] Call trace: [ 726.428996][ T7634] dump_backtrace+0x0/0x530 [ 726.429967][ T7634] show_stack+0x2c/0x3c [ 726.430864][ T7634] dump_stack_lvl+0x108/0x170 [ 726.431821][ T7634] dump_stack+0x1c/0x58 [ 726.432729][ T7634] should_fail+0x400/0x5cc [ 726.433660][ T7634] should_fail_usercopy+0x20/0x30 [ 726.434668][ T7634] ucma_write+0x154/0x4a4 [ 726.435609][ T7634] vfs_write+0x280/0xb3c [ 726.436472][ T7634] ksys_write+0x15c/0x26c [ 726.437381][ T7634] __arm64_sys_write+0x7c/0x90 [ 726.438418][ T7634] invoke_syscall+0x98/0x2b8 [ 726.439369][ T7634] el0_svc_common+0x138/0x258 [ 726.440410][ T7634] do_el0_svc+0x58/0x14c [ 726.441302][ T7634] el0_svc+0x7c/0x1f0 [ 726.442167][ T7634] el0t_64_sync_handler+0x84/0xe4 [ 726.443153][ T7634] el0t_64_sync+0x1a0/0x1a4 [ 726.470512][ T7635] FAULT_INJECTION: forcing a failure. [ 726.470512][ T7635] name failslab, interval 1, probability 0, space 0, times 0 00:12:06 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) setsockopt$MRT_FLUSH(r0, 0x0, 0xd4, &(0x7f0000000000)=0x17, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0xe, 0x1, &(0x7f00000000c0)=ANY=[@ANYBLOB="8550b43adfe67704"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) socket(0x10, 0x803, 0x0) (async) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) (async) setsockopt$MRT_FLUSH(r0, 0x0, 0xd4, &(0x7f0000000000)=0x17, 0x4) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0xe, 0x1, &(0x7f00000000c0)=ANY=[@ANYBLOB="8550b43adfe67704"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) [ 726.491808][ T7635] CPU: 0 PID: 7635 Comm: syz-executor.3 Not tainted 5.15.120-syzkaller #0 [ 726.493605][ T7635] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 726.495710][ T7635] Call trace: [ 726.496353][ T7635] dump_backtrace+0x0/0x530 [ 726.497344][ T7635] show_stack+0x2c/0x3c [ 726.498243][ T7635] dump_stack_lvl+0x108/0x170 [ 726.499287][ T7635] dump_stack+0x1c/0x58 [ 726.500183][ T7635] should_fail+0x400/0x5cc [ 726.501089][ T7635] __should_failslab+0xbc/0x110 [ 726.502107][ T7635] should_failslab+0x10/0x28 [ 726.502972][ T7635] slab_pre_alloc_hook+0x64/0xe8 [ 726.503960][ T7635] __kmalloc_node+0xbc/0x5b8 00:12:06 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x5, 0x5}}}, 0x90) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {}, 0x5, 0x5}}}, 0x90) (fail_nth: 2) [ 726.504839][ T7635] memcg_alloc_page_obj_cgroups+0x80/0x174 [ 726.506073][ T7635] new_slab+0x120/0x56c [ 726.506909][ T7635] ___slab_alloc+0x6bc/0xdbc [ 726.508064][ T7635] kmem_cache_alloc_bulk+0x1a0/0x4c0 [ 726.509188][ T7635] io_submit_sqes+0x4f00/0x8970 [ 726.510241][ T7635] __arm64_sys_io_uring_enter+0x2a0/0x1cb8 [ 726.511413][ T7635] invoke_syscall+0x98/0x2b8 [ 726.512451][ T7635] el0_svc_common+0x138/0x258 [ 726.513383][ T7635] do_el0_svc+0x58/0x14c [ 726.514245][ T7635] el0_svc+0x7c/0x1f0 [ 726.515127][ T7635] el0t_64_sync_handler+0x84/0xe4 [ 726.516208][ T7635] el0t_64_sync+0x1a0/0x1a4 [ 726.614319][ T7644] FAULT_INJECTION: forcing a failure. [ 726.614319][ T7644] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 726.624632][ T7644] CPU: 0 PID: 7644 Comm: syz-executor.0 Not tainted 5.15.120-syzkaller #0 [ 726.626330][ T7644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 726.628408][ T7644] Call trace: [ 726.629070][ T7644] dump_backtrace+0x0/0x530 [ 726.630045][ T7644] show_stack+0x2c/0x3c [ 726.630879][ T7644] dump_stack_lvl+0x108/0x170 [ 726.631895][ T7644] dump_stack+0x1c/0x58 [ 726.632764][ T7644] should_fail+0x400/0x5cc [ 726.633804][ T7644] should_fail_usercopy+0x20/0x30 [ 726.634849][ T7644] ucma_bind+0xb8/0x430 [ 726.635827][ T7644] ucma_write+0x34c/0x4a4 [ 726.636726][ T7644] vfs_write+0x280/0xb3c [ 726.637649][ T7644] ksys_write+0x15c/0x26c [ 726.638570][ T7644] __arm64_sys_write+0x7c/0x90 [ 726.639588][ T7644] invoke_syscall+0x98/0x2b8 [ 726.640567][ T7644] el0_svc_common+0x138/0x258 [ 726.641585][ T7644] do_el0_svc+0x58/0x14c [ 726.642440][ T7644] el0_svc+0x7c/0x1f0 [ 726.643333][ T7644] el0t_64_sync_handler+0x84/0xe4 [ 726.644409][ T7644] el0t_64_sync+0x1a0/0x1a4 00:12:06 executing program 1: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) (async) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[r1], 0x1) r2 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000280)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r2}}) (async) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000340)=@urb_type_bulk={0x3, {}, 0x8, 0x61, &(0x7f00000000c0)="07d5a1361a77a0497e4df2e34e60bb9448b7da3d927c75ef75ff69b09fcb4d43a2a010", 0x23, 0xa4, 0x4, 0x0, 0xbf8, 0x4, &(0x7f0000000700)="507b2ea84a6e2dfc52c63f00cadc5fe99565d0866258695e8eacb0afd0d807acf444b2607e13554695ba2068d4f60f5200b80eb0f41b8f9a5dbe8f67b638d39ec5573bdd8be4e288b5ac2fc2594b6455fa0e9a4bec3ada719b8f0b11f35a1991d4370619907678730af880f7fb0f68b4b75a838213fa8b5e28d32714900d7946896e00d28fe61a39a04155b32a9de734a4ebd24e4baa9882eb239bcf7a1273ebbf0f7ad44ed3a51c215ddd2126c1ebb5ebc56f"}) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000400)=@urb_type_iso={0x0, {0x6, 0x1}, 0x1, 0x42, &(0x7f0000000180)="0133bf6573320dc8edfc862343e048a6840183a9478688062e98f8b2822b29f6e81c1ebc38b0c34f6e3d97f1d2137945e6d1c75925c857ea80dd9a205abdb84dc644a03b3c7f0e38f6176fa9a7fbbfe2fb7f5edd29f2a9ff8ead2e958ec2b11cc5848094cf331e0fbacd87ad841c9b4d5253740420633d20b110fd114ea57c83d3967513959f4d78c7be4739e9504f30f277dec85cf164b74e6a8f8ef62f0f1fd1d71906f9cbc6add0f916b23209ae6a08", 0xb1, 0x0, 0x7, 0x37, 0x100, 0x10001, &(0x7f0000000280)="d637d2afd1c0231407bf582d4078ea960e340a0fdbbff75754530deff5f1e76f39d8868bc5837c65b44d6166ff01d7d6ebf579bf609b849a88811dc6d7ef8bcb66d4f70495c0d9c5178fda94830b4e39108356719ed15677400e930b7300fe01872d1245445265d68f551ca07e52732cd01ccc760579ebe36e89076ed6eca6a27b2f35faeb5bb03561169c7d7b33efcc7e2dedca931c384ad8f71af87a96f5261f3c12ee7a5aaa8f46d06212be1792d4e8160937dfc4a8a149a506892a70", [{0x3, 0x9, 0x4}, {0x2, 0x4, 0x27855798}, {0xfffff419, 0x0, 0x2261a83a}, {0x3f, 0x7fff, 0x9}, {0x1000, 0x7, 0x7f}, {0x48, 0x9, 0x4}, {0x0, 0x800, 0x9279}, {0xf0, 0x2fe81854, 0x1}, {0x5, 0x8, 0x4}, {0x401, 0x3f, 0x7fff}, {0x6, 0x8001, 0x5}, {0x2c61f030, 0x80000000, 0x7}, {0x757, 0x7fff, 0x8}, {0xc2f2, 0x1000, 0x6}, {0xae0, 0x3f, 0x7f}, {0x5, 0x1, 0xfffffffd}, {0x10001, 0x401, 0x81a4}, {0x2, 0x1f, 0x6}, {0x3, 0xfffffffe, 0xff76}, {0x0, 0x7e, 0xffffffff}, {0x2, 0x6, 0x2}, {0x10000, 0x0, 0x3ff}, {0xffffff81, 0x6, 0x94cc}, {0x6, 0x1, 0x6}, {0x1, 0x3}, {0x80, 0x9320, 0x7}, {0x43a, 0x10000, 0xbc}, {0x4ded, 0x2, 0x7}, {0x100, 0xfffffffe, 0x9}, {0x1, 0x22, 0x6}, {0x100, 0x80000001, 0xbb}, {0x5}, {0xf0, 0x1, 0xb809}, {0x8, 0x1000}, {0x200, 0x10000, 0x5}, {0xff, 0x3, 0x3}, {0x0, 0x1, 0x7}, {0x4, 0xbcb, 0x2}, {0x6, 0x1, 0x10001}, {0x6, 0x200, 0x6}, {0x400, 0x8, 0xbb2e}, {0x6cf3ea5f, 0x1, 0x7}, {0x4, 0x10001, 0x400}, {0x3, 0x0, 0x7}, {0x3, 0x9, 0x4}, {0x3ff, 0x4, 0x7}, {0x7ff, 0x3, 0x8}, {0x3, 0xffff, 0x8}, {0x4, 0x8001, 0x600000}, {0x6, 0x3, 0x9}, {0x19, 0x0, 0x7}, {0x200, 0x5fb, 0x8000000}, {0x4, 0x6, 0x15}, {0xfffffff7, 0x9, 0x1f}, {0x3, 0x7fff, 0x80000001}]}) (async) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf09]}, 0x8) 00:12:06 executing program 5: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000800000/0x800000)=nil, &(0x7f0000e1f000/0x2000)=nil, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[r1], 0x1) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf0d]}, 0x8) (fail_nth: 24) 00:12:06 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) (async) setsockopt$MRT_FLUSH(r0, 0x0, 0xd4, &(0x7f0000000000)=0x17, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0xe, 0x1, &(0x7f00000000c0)=ANY=[@ANYBLOB="8550b43adfe67704"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:12:06 executing program 4: r0 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) mkdirat(r1, &(0x7f00000000c0)='./file0\x00', 0x0) r2 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) r3 = socket$can_j1939(0x1d, 0x2, 0x7) copy_file_range(r3, &(0x7f0000000200), r2, &(0x7f00000002c0)=0x800, 0xe2, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000800000/0x800000)=nil, &(0x7f0000e1f000/0x2000)=nil, 0x0, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000240)=[r4], 0x1) io_uring_enter(r2, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf02]}, 0x8) openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) (async) openat$vcs(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) (async) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) (async) mkdirat(r1, &(0x7f00000000c0)='./file0\x00', 0x0) (async) syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) (async) socket$can_j1939(0x1d, 0x2, 0x7) (async) copy_file_range(r3, &(0x7f0000000200), r2, &(0x7f00000002c0)=0x800, 0xe2, 0x0) (async) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000800000/0x800000)=nil, &(0x7f0000e1f000/0x2000)=nil, 0x0, 0x0) (async) syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) (async) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000240)=[r4], 0x1) (async) io_uring_enter(r2, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf02]}, 0x8) (async) 00:12:06 executing program 3: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000800000/0x800000)=nil, &(0x7f0000e1f000/0x2000)=nil, 0x0, 0x0) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf13]}, 0x8) (fail_nth: 25) [ 726.687006][ T7651] FAULT_INJECTION: forcing a failure. [ 726.687006][ T7651] name failslab, interval 1, probability 0, space 0, times 0 [ 726.689869][ T7651] CPU: 1 PID: 7651 Comm: syz-executor.5 Not tainted 5.15.120-syzkaller #0 [ 726.691557][ T7651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 726.693675][ T7651] Call trace: [ 726.694369][ T7651] dump_backtrace+0x0/0x530 [ 726.695253][ T7651] show_stack+0x2c/0x3c [ 726.696108][ T7651] dump_stack_lvl+0x108/0x170 [ 726.697004][ T7651] dump_stack+0x1c/0x58 [ 726.697782][ T7651] should_fail+0x400/0x5cc [ 726.698666][ T7651] __should_failslab+0xbc/0x110 [ 726.699669][ T7651] should_failslab+0x10/0x28 [ 726.700629][ T7651] slab_pre_alloc_hook+0x64/0xe8 [ 726.701622][ T7651] kmem_cache_alloc_bulk+0x50/0x4c0 [ 726.702738][ T7651] io_submit_sqes+0x4f00/0x8970 [ 726.703705][ T7651] __arm64_sys_io_uring_enter+0x2a0/0x1cb8 [ 726.704903][ T7651] invoke_syscall+0x98/0x2b8 [ 726.705834][ T7651] el0_svc_common+0x138/0x258 [ 726.706807][ T7651] do_el0_svc+0x58/0x14c [ 726.707685][ T7651] el0_svc+0x7c/0x1f0 [ 726.708521][ T7651] el0t_64_sync_handler+0x84/0xe4 [ 726.709492][ T7651] el0t_64_sync+0x1a0/0x1a4 00:12:06 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0xe, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000061106c9e01ef44c8c2808473b319b697000000000095000000000010001ac58ed2a75ef8ed861d39ce090a11bed1e562f1996310e1838734559f2b9294a7a0e731b0fefc90973adf9a5803c98e89491c2df20553b903fbfa13cf70b99d0349fb9aeb6239b2d6b362e7222e0ef17969c432dbf827c61b2eb35831bbbab04d6547c7da618254c55458d167ccab9b0c49eaffac36c9196f0838"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 726.732044][ T7654] FAULT_INJECTION: forcing a failure. [ 726.732044][ T7654] name failslab, interval 1, probability 0, space 0, times 0 [ 726.740518][ T7654] CPU: 0 PID: 7654 Comm: syz-executor.3 Not tainted 5.15.120-syzkaller #0 [ 726.742223][ T7654] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 726.744254][ T7654] Call trace: [ 726.744908][ T7654] dump_backtrace+0x0/0x530 [ 726.745851][ T7654] show_stack+0x2c/0x3c [ 726.746806][ T7654] dump_stack_lvl+0x108/0x170 [ 726.747797][ T7654] dump_stack+0x1c/0x58 [ 726.748678][ T7654] should_fail+0x400/0x5cc [ 726.749603][ T7654] __should_failslab+0xbc/0x110 [ 726.750739][ T7654] should_failslab+0x10/0x28 [ 726.751704][ T7654] slab_pre_alloc_hook+0x64/0xe8 [ 726.752784][ T7654] kmem_cache_alloc_bulk+0x50/0x4c0 [ 726.753816][ T7654] io_submit_sqes+0x4f00/0x8970 [ 726.754911][ T7654] __arm64_sys_io_uring_enter+0x2a0/0x1cb8 [ 726.756229][ T7654] invoke_syscall+0x98/0x2b8 [ 726.757190][ T7654] el0_svc_common+0x138/0x258 [ 726.758162][ T7654] do_el0_svc+0x58/0x14c [ 726.759086][ T7654] el0_svc+0x7c/0x1f0 [ 726.759922][ T7654] el0t_64_sync_handler+0x84/0xe4 [ 726.760948][ T7654] el0t_64_sync+0x1a0/0x1a4 00:12:06 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0xe, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000061106c9e01ef44c8c2808473b319b697000000000095000000000010001ac58ed2a75ef8ed861d39ce090a11bed1e562f1996310e1838734559f2b9294a7a0e731b0fefc90973adf9a5803c98e89491c2df20553b903fbfa13cf70b99d0349fb9aeb6239b2d6b362e7222e0ef17969c432dbf827c61b2eb35831bbbab04d6547c7da618254c55458d167ccab9b0c49eaffac36c9196f0838"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:12:06 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x5, 0x5}}}, 0x90) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {}, 0x5, 0x5}}}, 0x90) (fail_nth: 3) 00:12:06 executing program 1: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[r1], 0x1) (async) r2 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000280)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r2}}) (async, rerun: 32) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000340)=@urb_type_bulk={0x3, {}, 0x8, 0x61, &(0x7f00000000c0)="07d5a1361a77a0497e4df2e34e60bb9448b7da3d927c75ef75ff69b09fcb4d43a2a010", 0x23, 0xa4, 0x4, 0x0, 0xbf8, 0x4, &(0x7f0000000700)="507b2ea84a6e2dfc52c63f00cadc5fe99565d0866258695e8eacb0afd0d807acf444b2607e13554695ba2068d4f60f5200b80eb0f41b8f9a5dbe8f67b638d39ec5573bdd8be4e288b5ac2fc2594b6455fa0e9a4bec3ada719b8f0b11f35a1991d4370619907678730af880f7fb0f68b4b75a838213fa8b5e28d32714900d7946896e00d28fe61a39a04155b32a9de734a4ebd24e4baa9882eb239bcf7a1273ebbf0f7ad44ed3a51c215ddd2126c1ebb5ebc56f"}) (async, rerun: 32) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000400)=@urb_type_iso={0x0, {0x6, 0x1}, 0x1, 0x42, &(0x7f0000000180)="0133bf6573320dc8edfc862343e048a6840183a9478688062e98f8b2822b29f6e81c1ebc38b0c34f6e3d97f1d2137945e6d1c75925c857ea80dd9a205abdb84dc644a03b3c7f0e38f6176fa9a7fbbfe2fb7f5edd29f2a9ff8ead2e958ec2b11cc5848094cf331e0fbacd87ad841c9b4d5253740420633d20b110fd114ea57c83d3967513959f4d78c7be4739e9504f30f277dec85cf164b74e6a8f8ef62f0f1fd1d71906f9cbc6add0f916b23209ae6a08", 0xb1, 0x0, 0x7, 0x37, 0x100, 0x10001, &(0x7f0000000280)="d637d2afd1c0231407bf582d4078ea960e340a0fdbbff75754530deff5f1e76f39d8868bc5837c65b44d6166ff01d7d6ebf579bf609b849a88811dc6d7ef8bcb66d4f70495c0d9c5178fda94830b4e39108356719ed15677400e930b7300fe01872d1245445265d68f551ca07e52732cd01ccc760579ebe36e89076ed6eca6a27b2f35faeb5bb03561169c7d7b33efcc7e2dedca931c384ad8f71af87a96f5261f3c12ee7a5aaa8f46d06212be1792d4e8160937dfc4a8a149a506892a70", [{0x3, 0x9, 0x4}, {0x2, 0x4, 0x27855798}, {0xfffff419, 0x0, 0x2261a83a}, {0x3f, 0x7fff, 0x9}, {0x1000, 0x7, 0x7f}, {0x48, 0x9, 0x4}, {0x0, 0x800, 0x9279}, {0xf0, 0x2fe81854, 0x1}, {0x5, 0x8, 0x4}, {0x401, 0x3f, 0x7fff}, {0x6, 0x8001, 0x5}, {0x2c61f030, 0x80000000, 0x7}, {0x757, 0x7fff, 0x8}, {0xc2f2, 0x1000, 0x6}, {0xae0, 0x3f, 0x7f}, {0x5, 0x1, 0xfffffffd}, {0x10001, 0x401, 0x81a4}, {0x2, 0x1f, 0x6}, {0x3, 0xfffffffe, 0xff76}, {0x0, 0x7e, 0xffffffff}, {0x2, 0x6, 0x2}, {0x10000, 0x0, 0x3ff}, {0xffffff81, 0x6, 0x94cc}, {0x6, 0x1, 0x6}, {0x1, 0x3}, {0x80, 0x9320, 0x7}, {0x43a, 0x10000, 0xbc}, {0x4ded, 0x2, 0x7}, {0x100, 0xfffffffe, 0x9}, {0x1, 0x22, 0x6}, {0x100, 0x80000001, 0xbb}, {0x5}, {0xf0, 0x1, 0xb809}, {0x8, 0x1000}, {0x200, 0x10000, 0x5}, {0xff, 0x3, 0x3}, {0x0, 0x1, 0x7}, {0x4, 0xbcb, 0x2}, {0x6, 0x1, 0x10001}, {0x6, 0x200, 0x6}, {0x400, 0x8, 0xbb2e}, {0x6cf3ea5f, 0x1, 0x7}, {0x4, 0x10001, 0x400}, {0x3, 0x0, 0x7}, {0x3, 0x9, 0x4}, {0x3ff, 0x4, 0x7}, {0x7ff, 0x3, 0x8}, {0x3, 0xffff, 0x8}, {0x4, 0x8001, 0x600000}, {0x6, 0x3, 0x9}, {0x19, 0x0, 0x7}, {0x200, 0x5fb, 0x8000000}, {0x4, 0x6, 0x15}, {0xfffffff7, 0x9, 0x1f}, {0x3, 0x7fff, 0x80000001}]}) (async) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf09]}, 0x8) 00:12:06 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0xe, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000061106c9e01ef44c8c2808473b319b697000000000095000000000010001ac58ed2a75ef8ed861d39ce090a11bed1e562f1996310e1838734559f2b9294a7a0e731b0fefc90973adf9a5803c98e89491c2df20553b903fbfa13cf70b99d0349fb9aeb6239b2d6b362e7222e0ef17969c432dbf827c61b2eb35831bbbab04d6547c7da618254c55458d167ccab9b0c49eaffac36c9196f0838"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 726.867652][ T7673] FAULT_INJECTION: forcing a failure. [ 726.867652][ T7673] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 726.870528][ T7673] CPU: 1 PID: 7673 Comm: syz-executor.0 Not tainted 5.15.120-syzkaller #0 [ 726.872245][ T7673] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 726.874270][ T7673] Call trace: [ 726.874903][ T7673] dump_backtrace+0x0/0x530 [ 726.875813][ T7673] show_stack+0x2c/0x3c [ 726.876713][ T7673] dump_stack_lvl+0x108/0x170 [ 726.877647][ T7673] dump_stack+0x1c/0x58 [ 726.878472][ T7673] should_fail+0x400/0x5cc [ 726.879369][ T7673] should_fail_usercopy+0x20/0x30 [ 726.880435][ T7673] simple_read_from_buffer+0xd8/0x26c [ 726.881573][ T7673] proc_fail_nth_read+0x1a0/0x248 [ 726.882777][ T7673] vfs_read+0x278/0xb10 [ 726.883685][ T7673] ksys_read+0x15c/0x26c [ 726.884542][ T7673] __arm64_sys_read+0x7c/0x90 [ 726.885395][ T7673] invoke_syscall+0x98/0x2b8 [ 726.886383][ T7673] el0_svc_common+0x138/0x258 [ 726.887403][ T7673] do_el0_svc+0x58/0x14c [ 726.888286][ T7673] el0_svc+0x7c/0x1f0 [ 726.889142][ T7673] el0t_64_sync_handler+0x84/0xe4 [ 726.890208][ T7673] el0t_64_sync+0x1a0/0x1a4 00:12:06 executing program 4: r0 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) (async) mkdirat(r1, &(0x7f00000000c0)='./file0\x00', 0x0) (async) r2 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) r3 = socket$can_j1939(0x1d, 0x2, 0x7) copy_file_range(r3, &(0x7f0000000200), r2, &(0x7f00000002c0)=0x800, 0xe2, 0x0) (async) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000800000/0x800000)=nil, &(0x7f0000e1f000/0x2000)=nil, 0x0, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000240)=[r4], 0x1) io_uring_enter(r2, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf02]}, 0x8) 00:12:06 executing program 2: getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f0000000140), &(0x7f0000000180)=0x4) r0 = socket(0x10, 0x803, 0x0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000c80), 0x40, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000cc0)={'macvlan0\x00'}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000a40)={'ip6_vti0\x00', &(0x7f00000009c0)={'syztnl2\x00', 0x0, 0x4, 0x3, 0x1f, 0x2, 0x30, @ipv4={'\x00', '\xff\xff', @multicast1}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x8000, 0x3ff, 0x2}}) sendmmsg$inet(r0, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000240)="fdeceee18a740b985844f48aeadf889252ea3c2e30549544437af5c8872a68283b95fafbf29e9c3f159e658bf4d1cdc4364bb27975f825ca1cc031baa24475f754d846043e7482495edf3814ca5cb0c7dc4f312b8249303597d39f4a19b8e5d36208978a0b17e37426d5d67bc69047adaf67cc72f0eb9fdad4689c944e76cf602f47844b2d3c4355270780ab35e1552212c920e443ef8db3d10107ff83861531018cfadb7a5d433d4ec2a4431a904f4eae16b8f1a86bb4d1efd9fc", 0xbb}, {&(0x7f00000001c0)="78e14f0b456b7daa2d9facf1e84fb61e7fe307f2bede2e109640d6db29d78253df478ce0cfbd0d215e9f8bcd20353b186ad14f88b1a6", 0x36}, {&(0x7f0000000300)="acba2ea2b39ea24c10e1bd0e9702aa5bc900bf1d0174ceb52f061f9958cca066f50d4541d0f58a66189f16034ea989c2ad51f62ddd4fd85e4c2930a861de8313ccd1797757db19073b036d0b553b223ce67323f068f967687b37f80ab54641128f6a15015b67b5fa6dd36717b02be9ed9ba9ac05287fbae86d5b54344026b05b51150514e047ffca51f7519b56370d5eb5c3913ba61881585c823915ed23ee255b", 0xa1}, {&(0x7f0000000500)="013a5921de3b0b1c0e07a0e207957a2e186874c00b5702dfe26628115ee38a1be6300a21381848b8418b3dda439aabcbf5b2957939c915ea352c96301842a3999cc2ca113b7264da12ff14acef24cef08449da8a37b1307f35c54d3edaf8c732c60c7cbda92d16c8bce19d7e9320292a1b00fa8c701af9333724d263bba05d9476b668ccd37817ca622996da53188593fa17ef0f1e428e123515e3c860ac637eeb2762f915359717306f17d418d1fd1bd381c4676a95676a51ca0847e183babe0c2fd623666825d9952952d96ad35e9fec3aef484c580f964804c12d30169e758c53e7e32302555027dec3f071ef7b90", 0xf0}, {&(0x7f00000003c0)="c4009ca9cb114e5dd77b76f44bdeea8d79ad34c83e", 0x15}, {&(0x7f0000000600)="37833b0471ba5eeb20fd2e6d379e5737d67ada35c548d14e472214ef8debf94a9d3834b905e27678b8d19fe5bba82c2a18aeab3740196b82f6a9814e6117726fec5820c24fcf7e17ec230592491d018cc77df02ccd740a5f0b8bc3ac0cfa93098a8c9d9c0a4c565bca6cbfe6087028966e6e6d1cf64e5178dcdb7c6065b1e152710fac89ad4a95354bd4c537f6f873bfd7b12f425c154df6379bff124b1f567483532ecc99", 0xa5}, {&(0x7f00000006c0)="33499de73ef32210c38f4774b0ba75cdd54827a3fe6cfb25d148a1a1bc32dae4062985017da6368f47e6b0152f9476a108e8635c5e40d1c66f7f27447cc465b1340c53abb62eaaf28fc1ea67d36c22b951c86da8fe06348b434b9f665c45465309b0a53f7d84957434a1983d60d9705859f465451d638745d37f26df5d4403b9bba377482fb39b559bb23d499a4de241c9", 0x91}, {&(0x7f0000000400)="3bf2b68be0db3fe7dd589bc4df78e3963b840597cbb8b510c48a299ff6282f21a050bee4935df81f4436e8cb6a638ea38e7223a5676e17b9823b57", 0x3b}], 0x8, &(0x7f0000000800)=[@ip_tos_int={{0x14, 0x0, 0x1, 0xda}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8}}, @ip_retopts={{0xb4, 0x0, 0x7, {[@timestamp_addr={0x44, 0x24, 0x43, 0x1, 0x4, [{@private=0xa010102, 0x8001}, {@empty}, {@private=0xa010101}, {@local, 0x80}]}, @timestamp_prespec={0x44, 0x14, 0xd6, 0x3, 0x7, [{@dev={0xac, 0x14, 0x14, 0x3f}}, {@broadcast, 0x101}]}, @cipso={0x86, 0x69, 0x0, [{0x7, 0x7, "c04b767591"}, {0x7, 0x8, "30a4275fc76a"}, {0x7, 0x10, "61be063a54308923e630d7fac80f"}, {0x6, 0xd, "1c69b972d57fd4a6d66fdf"}, {0x7, 0xb, "a4b204fb8d2225b475"}, {0x0, 0xc, "ddbef8c8700e778bc68b"}, {0x0, 0xf, "a6426658ee4d8a4f8d0756cf8b"}, {0x1, 0x11, "21eb9e2a3c1b06bd27cb22754a9c24"}]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x4}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x86}}], 0x118}}, {{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000440)="8f87bdc0dd9c281c9bf9b30f4934c86f2055bdc6b0844159527e2c", 0x1b}, {&(0x7f0000000940)="f4527e0801346b8b760216a38701c9775081bd4b82d59c9e284d94d105fb63f294d878da1af722ec1725ade901012dfa4868d7", 0x33}], 0x2, &(0x7f0000000a80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @empty, @local}}}], 0x20}}], 0x2, 0x0) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r0, &(0x7f0000000b40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000b80)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000c40)={'syztnl0\x00', &(0x7f0000000bc0)={'syztnl0\x00', r3, 0x2f, 0x5, 0x6, 0x1f, 0x20, @local, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x28, 0x7, 0x7, 0xffff}}) sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="02008e000000000000006c00000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900090000007d000000080026006c090000080026006c090000080026004d1f000008002600641400000800262165d40600080026006c09000008002600a0090000"], 0x60}}, 0x10) 00:12:06 executing program 3: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000800000/0x800000)=nil, &(0x7f0000e1f000/0x2000)=nil, 0x0, 0x0) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf13]}, 0x8) (fail_nth: 26) 00:12:06 executing program 5: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000800000/0x800000)=nil, &(0x7f0000e1f000/0x2000)=nil, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[r1], 0x1) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf0d]}, 0x8) (fail_nth: 25) [ 727.011319][ T7685] FAULT_INJECTION: forcing a failure. [ 727.011319][ T7685] name failslab, interval 1, probability 0, space 0, times 0 [ 727.021921][ T7685] CPU: 1 PID: 7685 Comm: syz-executor.3 Not tainted 5.15.120-syzkaller #0 [ 727.023757][ T7685] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 727.025958][ T7685] Call trace: [ 727.026623][ T7685] dump_backtrace+0x0/0x530 [ 727.027545][ T7685] show_stack+0x2c/0x3c [ 727.028383][ T7685] dump_stack_lvl+0x108/0x170 [ 727.029293][ T7685] dump_stack+0x1c/0x58 [ 727.030079][ T7685] should_fail+0x400/0x5cc [ 727.030917][ T7685] __should_failslab+0xbc/0x110 [ 727.031899][ T7685] should_failslab+0x10/0x28 [ 727.032742][ T7690] FAULT_INJECTION: forcing a failure. [ 727.032742][ T7690] name failslab, interval 1, probability 0, space 0, times 0 [ 727.035334][ T7685] slab_pre_alloc_hook+0x64/0xe8 [ 727.036297][ T7685] kmem_cache_alloc_bulk+0x50/0x4c0 [ 727.037454][ T7685] io_submit_sqes+0x4f00/0x8970 [ 727.038473][ T7685] __arm64_sys_io_uring_enter+0x2a0/0x1cb8 [ 727.039596][ T7685] invoke_syscall+0x98/0x2b8 [ 727.040530][ T7685] el0_svc_common+0x138/0x258 [ 727.041516][ T7685] do_el0_svc+0x58/0x14c [ 727.042376][ T7685] el0_svc+0x7c/0x1f0 [ 727.043227][ T7685] el0t_64_sync_handler+0x84/0xe4 [ 727.044326][ T7685] el0t_64_sync+0x1a0/0x1a4 [ 727.045274][ T7690] CPU: 0 PID: 7690 Comm: syz-executor.5 Not tainted 5.15.120-syzkaller #0 [ 727.046985][ T7690] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 727.049048][ T7690] Call trace: [ 727.049762][ T7690] dump_backtrace+0x0/0x530 [ 727.050660][ T7690] show_stack+0x2c/0x3c [ 727.051487][ T7690] dump_stack_lvl+0x108/0x170 [ 727.052482][ T7690] dump_stack+0x1c/0x58 [ 727.053383][ T7690] should_fail+0x400/0x5cc [ 727.054371][ T7690] __should_failslab+0xbc/0x110 [ 727.055366][ T7690] should_failslab+0x10/0x28 [ 727.056305][ T7690] slab_pre_alloc_hook+0x64/0xe8 [ 727.057299][ T7690] __kmalloc_node+0xbc/0x5b8 [ 727.058214][ T7690] memcg_alloc_page_obj_cgroups+0x80/0x174 [ 727.059384][ T7690] new_slab+0x120/0x56c [ 727.060260][ T7690] ___slab_alloc+0x6bc/0xdbc [ 727.061268][ T7690] kmem_cache_alloc_bulk+0x1a0/0x4c0 [ 727.062334][ T7690] io_submit_sqes+0x4f00/0x8970 [ 727.063351][ T7690] __arm64_sys_io_uring_enter+0x2a0/0x1cb8 [ 727.064529][ T7690] invoke_syscall+0x98/0x2b8 [ 727.065553][ T7690] el0_svc_common+0x138/0x258 [ 727.066546][ T7690] do_el0_svc+0x58/0x14c [ 727.067421][ T7690] el0_svc+0x7c/0x1f0 [ 727.068232][ T7690] el0t_64_sync_handler+0x84/0xe4 [ 727.069185][ T7690] el0t_64_sync+0x1a0/0x1a4 00:12:07 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x5, 0x5}}}, 0x90) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {}, 0x5, 0x5}}}, 0x90) 00:12:07 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x5, 0x5}}}, 0x90) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000140)={0xd, 0x88, 0xfa00, {r3, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {}, 0x5, 0x5}}}, 0x90) 00:12:07 executing program 2: getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f0000000140), &(0x7f0000000180)=0x4) r0 = socket(0x10, 0x803, 0x0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000c80), 0x40, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000cc0)={'macvlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000cc0)={'macvlan0\x00'}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000a40)={'ip6_vti0\x00', &(0x7f00000009c0)={'syztnl2\x00', 0x0, 0x4, 0x3, 0x1f, 0x2, 0x30, @ipv4={'\x00', '\xff\xff', @multicast1}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x8000, 0x3ff, 0x2}}) sendmmsg$inet(r0, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000240)="fdeceee18a740b985844f48aeadf889252ea3c2e30549544437af5c8872a68283b95fafbf29e9c3f159e658bf4d1cdc4364bb27975f825ca1cc031baa24475f754d846043e7482495edf3814ca5cb0c7dc4f312b8249303597d39f4a19b8e5d36208978a0b17e37426d5d67bc69047adaf67cc72f0eb9fdad4689c944e76cf602f47844b2d3c4355270780ab35e1552212c920e443ef8db3d10107ff83861531018cfadb7a5d433d4ec2a4431a904f4eae16b8f1a86bb4d1efd9fc", 0xbb}, {&(0x7f00000001c0)="78e14f0b456b7daa2d9facf1e84fb61e7fe307f2bede2e109640d6db29d78253df478ce0cfbd0d215e9f8bcd20353b186ad14f88b1a6", 0x36}, {&(0x7f0000000300)="acba2ea2b39ea24c10e1bd0e9702aa5bc900bf1d0174ceb52f061f9958cca066f50d4541d0f58a66189f16034ea989c2ad51f62ddd4fd85e4c2930a861de8313ccd1797757db19073b036d0b553b223ce67323f068f967687b37f80ab54641128f6a15015b67b5fa6dd36717b02be9ed9ba9ac05287fbae86d5b54344026b05b51150514e047ffca51f7519b56370d5eb5c3913ba61881585c823915ed23ee255b", 0xa1}, {&(0x7f0000000500)="013a5921de3b0b1c0e07a0e207957a2e186874c00b5702dfe26628115ee38a1be6300a21381848b8418b3dda439aabcbf5b2957939c915ea352c96301842a3999cc2ca113b7264da12ff14acef24cef08449da8a37b1307f35c54d3edaf8c732c60c7cbda92d16c8bce19d7e9320292a1b00fa8c701af9333724d263bba05d9476b668ccd37817ca622996da53188593fa17ef0f1e428e123515e3c860ac637eeb2762f915359717306f17d418d1fd1bd381c4676a95676a51ca0847e183babe0c2fd623666825d9952952d96ad35e9fec3aef484c580f964804c12d30169e758c53e7e32302555027dec3f071ef7b90", 0xf0}, {&(0x7f00000003c0)="c4009ca9cb114e5dd77b76f44bdeea8d79ad34c83e", 0x15}, {&(0x7f0000000600)="37833b0471ba5eeb20fd2e6d379e5737d67ada35c548d14e472214ef8debf94a9d3834b905e27678b8d19fe5bba82c2a18aeab3740196b82f6a9814e6117726fec5820c24fcf7e17ec230592491d018cc77df02ccd740a5f0b8bc3ac0cfa93098a8c9d9c0a4c565bca6cbfe6087028966e6e6d1cf64e5178dcdb7c6065b1e152710fac89ad4a95354bd4c537f6f873bfd7b12f425c154df6379bff124b1f567483532ecc99", 0xa5}, {&(0x7f00000006c0)="33499de73ef32210c38f4774b0ba75cdd54827a3fe6cfb25d148a1a1bc32dae4062985017da6368f47e6b0152f9476a108e8635c5e40d1c66f7f27447cc465b1340c53abb62eaaf28fc1ea67d36c22b951c86da8fe06348b434b9f665c45465309b0a53f7d84957434a1983d60d9705859f465451d638745d37f26df5d4403b9bba377482fb39b559bb23d499a4de241c9", 0x91}, {&(0x7f0000000400)="3bf2b68be0db3fe7dd589bc4df78e3963b840597cbb8b510c48a299ff6282f21a050bee4935df81f4436e8cb6a638ea38e7223a5676e17b9823b57", 0x3b}], 0x8, &(0x7f0000000800)=[@ip_tos_int={{0x14, 0x0, 0x1, 0xda}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8}}, @ip_retopts={{0xb4, 0x0, 0x7, {[@timestamp_addr={0x44, 0x24, 0x43, 0x1, 0x4, [{@private=0xa010102, 0x8001}, {@empty}, {@private=0xa010101}, {@local, 0x80}]}, @timestamp_prespec={0x44, 0x14, 0xd6, 0x3, 0x7, [{@dev={0xac, 0x14, 0x14, 0x3f}}, {@broadcast, 0x101}]}, @cipso={0x86, 0x69, 0x0, [{0x7, 0x7, "c04b767591"}, {0x7, 0x8, "30a4275fc76a"}, {0x7, 0x10, "61be063a54308923e630d7fac80f"}, {0x6, 0xd, "1c69b972d57fd4a6d66fdf"}, {0x7, 0xb, "a4b204fb8d2225b475"}, {0x0, 0xc, "ddbef8c8700e778bc68b"}, {0x0, 0xf, "a6426658ee4d8a4f8d0756cf8b"}, {0x1, 0x11, "21eb9e2a3c1b06bd27cb22754a9c24"}]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x4}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x86}}], 0x118}}, {{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000440)="8f87bdc0dd9c281c9bf9b30f4934c86f2055bdc6b0844159527e2c", 0x1b}, {&(0x7f0000000940)="f4527e0801346b8b760216a38701c9775081bd4b82d59c9e284d94d105fb63f294d878da1af722ec1725ade901012dfa4868d7", 0x33}], 0x2, &(0x7f0000000a80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @empty, @local}}}], 0x20}}], 0x2, 0x0) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r0, &(0x7f0000000b40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000b80)=0x14) (async) getsockname$packet(r0, &(0x7f0000000b40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000b80)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000c40)={'syztnl0\x00', &(0x7f0000000bc0)={'syztnl0\x00', r3, 0x2f, 0x5, 0x6, 0x1f, 0x20, @local, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x28, 0x7, 0x7, 0xffff}}) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000c40)={'syztnl0\x00', &(0x7f0000000bc0)={'syztnl0\x00', r3, 0x2f, 0x5, 0x6, 0x1f, 0x20, @local, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x28, 0x7, 0x7, 0xffff}}) sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="02008e000000000000006c00000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900090000007d000000080026006c090000080026006c090000080026004d1f000008002600641400000800262165d40600080026006c09000008002600a0090000"], 0x60}}, 0x10) 00:12:07 executing program 1: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[r1], 0x1) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f0000000200)={0x8000, 0x0, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/47, 0x2f}], &(0x7f00000001c0)=[0xfffffffffffffff9, 0x1, 0x5, 0x9], 0x1}, 0x20) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf09]}, 0x8) 00:12:07 executing program 3: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000800000/0x800000)=nil, &(0x7f0000e1f000/0x2000)=nil, 0x0, 0x0) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf13]}, 0x8) (fail_nth: 27) 00:12:07 executing program 4: ioctl$BTRFS_IOC_LOGICAL_INO(0xffffffffffffffff, 0xc0389424, &(0x7f0000000180)={0x7cd28449, 0x18, '\x00', 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0]}) r0 = syz_io_uring_setup(0x5aa, &(0x7f0000000100)={0x0, 0x1, 0x0, 0x0, 0x8000000}, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000800000/0x800000)=nil, &(0x7f0000e1f000/0x2000)=nil, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[r1], 0x1) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf02]}, 0x8) r2 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) io_uring_enter(r3, 0x3b52, 0xeab9, 0x7, &(0x7f00000001c0)={[0x200]}, 0x8) 00:12:07 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x5, 0x5}}}, 0x90) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000140)={0x16, 0x88, 0xfa00, {r3, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {}, 0x5, 0x5}}}, 0x90) 00:12:07 executing program 5: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000800000/0x800000)=nil, &(0x7f0000e1f000/0x2000)=nil, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[r1], 0x1) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf0d]}, 0x8) (fail_nth: 26) [ 727.383882][ T7713] FAULT_INJECTION: forcing a failure. [ 727.383882][ T7713] name failslab, interval 1, probability 0, space 0, times 0 [ 727.397035][ T7713] CPU: 1 PID: 7713 Comm: syz-executor.5 Not tainted 5.15.120-syzkaller #0 [ 727.398937][ T7713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 727.401203][ T7713] Call trace: [ 727.401930][ T7713] dump_backtrace+0x0/0x530 [ 727.402928][ T7713] show_stack+0x2c/0x3c [ 727.403755][ T7713] dump_stack_lvl+0x108/0x170 [ 727.404690][ T7713] dump_stack+0x1c/0x58 [ 727.405553][ T7713] should_fail+0x400/0x5cc [ 727.406476][ T7713] __should_failslab+0xbc/0x110 [ 727.407651][ T7713] should_failslab+0x10/0x28 [ 727.408775][ T7713] slab_pre_alloc_hook+0x64/0xe8 [ 727.409783][ T7713] kmem_cache_alloc_bulk+0x50/0x4c0 [ 727.410865][ T7713] io_submit_sqes+0x4f00/0x8970 [ 727.411899][ T7713] __arm64_sys_io_uring_enter+0x2a0/0x1cb8 [ 727.413163][ T7713] invoke_syscall+0x98/0x2b8 [ 727.414149][ T7713] el0_svc_common+0x138/0x258 [ 727.415266][ T7713] do_el0_svc+0x58/0x14c [ 727.416175][ T7713] el0_svc+0x7c/0x1f0 [ 727.417020][ T7713] el0t_64_sync_handler+0x84/0xe4 [ 727.418020][ T7713] el0t_64_sync+0x1a0/0x1a4 00:12:07 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x5, 0x5}}}, 0x90) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000140)={0x14, 0x88, 0xfa02, {r3, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {}, 0x5, 0x5}}}, 0x90) 00:12:07 executing program 3: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000800000/0x800000)=nil, &(0x7f0000e1f000/0x2000)=nil, 0x0, 0x0) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf13]}, 0x8) 00:12:07 executing program 2: getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f0000000140), &(0x7f0000000180)=0x4) (async) r0 = socket(0x10, 0x803, 0x0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000c80), 0x40, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000cc0)={'macvlan0\x00'}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000a40)={'ip6_vti0\x00', &(0x7f00000009c0)={'syztnl2\x00', 0x0, 0x4, 0x3, 0x1f, 0x2, 0x30, @ipv4={'\x00', '\xff\xff', @multicast1}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x8000, 0x3ff, 0x2}}) sendmmsg$inet(r0, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000240)="fdeceee18a740b985844f48aeadf889252ea3c2e30549544437af5c8872a68283b95fafbf29e9c3f159e658bf4d1cdc4364bb27975f825ca1cc031baa24475f754d846043e7482495edf3814ca5cb0c7dc4f312b8249303597d39f4a19b8e5d36208978a0b17e37426d5d67bc69047adaf67cc72f0eb9fdad4689c944e76cf602f47844b2d3c4355270780ab35e1552212c920e443ef8db3d10107ff83861531018cfadb7a5d433d4ec2a4431a904f4eae16b8f1a86bb4d1efd9fc", 0xbb}, {&(0x7f00000001c0)="78e14f0b456b7daa2d9facf1e84fb61e7fe307f2bede2e109640d6db29d78253df478ce0cfbd0d215e9f8bcd20353b186ad14f88b1a6", 0x36}, {&(0x7f0000000300)="acba2ea2b39ea24c10e1bd0e9702aa5bc900bf1d0174ceb52f061f9958cca066f50d4541d0f58a66189f16034ea989c2ad51f62ddd4fd85e4c2930a861de8313ccd1797757db19073b036d0b553b223ce67323f068f967687b37f80ab54641128f6a15015b67b5fa6dd36717b02be9ed9ba9ac05287fbae86d5b54344026b05b51150514e047ffca51f7519b56370d5eb5c3913ba61881585c823915ed23ee255b", 0xa1}, {&(0x7f0000000500)="013a5921de3b0b1c0e07a0e207957a2e186874c00b5702dfe26628115ee38a1be6300a21381848b8418b3dda439aabcbf5b2957939c915ea352c96301842a3999cc2ca113b7264da12ff14acef24cef08449da8a37b1307f35c54d3edaf8c732c60c7cbda92d16c8bce19d7e9320292a1b00fa8c701af9333724d263bba05d9476b668ccd37817ca622996da53188593fa17ef0f1e428e123515e3c860ac637eeb2762f915359717306f17d418d1fd1bd381c4676a95676a51ca0847e183babe0c2fd623666825d9952952d96ad35e9fec3aef484c580f964804c12d30169e758c53e7e32302555027dec3f071ef7b90", 0xf0}, {&(0x7f00000003c0)="c4009ca9cb114e5dd77b76f44bdeea8d79ad34c83e", 0x15}, {&(0x7f0000000600)="37833b0471ba5eeb20fd2e6d379e5737d67ada35c548d14e472214ef8debf94a9d3834b905e27678b8d19fe5bba82c2a18aeab3740196b82f6a9814e6117726fec5820c24fcf7e17ec230592491d018cc77df02ccd740a5f0b8bc3ac0cfa93098a8c9d9c0a4c565bca6cbfe6087028966e6e6d1cf64e5178dcdb7c6065b1e152710fac89ad4a95354bd4c537f6f873bfd7b12f425c154df6379bff124b1f567483532ecc99", 0xa5}, {&(0x7f00000006c0)="33499de73ef32210c38f4774b0ba75cdd54827a3fe6cfb25d148a1a1bc32dae4062985017da6368f47e6b0152f9476a108e8635c5e40d1c66f7f27447cc465b1340c53abb62eaaf28fc1ea67d36c22b951c86da8fe06348b434b9f665c45465309b0a53f7d84957434a1983d60d9705859f465451d638745d37f26df5d4403b9bba377482fb39b559bb23d499a4de241c9", 0x91}, {&(0x7f0000000400)="3bf2b68be0db3fe7dd589bc4df78e3963b840597cbb8b510c48a299ff6282f21a050bee4935df81f4436e8cb6a638ea38e7223a5676e17b9823b57", 0x3b}], 0x8, &(0x7f0000000800)=[@ip_tos_int={{0x14, 0x0, 0x1, 0xda}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8}}, @ip_retopts={{0xb4, 0x0, 0x7, {[@timestamp_addr={0x44, 0x24, 0x43, 0x1, 0x4, [{@private=0xa010102, 0x8001}, {@empty}, {@private=0xa010101}, {@local, 0x80}]}, @timestamp_prespec={0x44, 0x14, 0xd6, 0x3, 0x7, [{@dev={0xac, 0x14, 0x14, 0x3f}}, {@broadcast, 0x101}]}, @cipso={0x86, 0x69, 0x0, [{0x7, 0x7, "c04b767591"}, {0x7, 0x8, "30a4275fc76a"}, {0x7, 0x10, "61be063a54308923e630d7fac80f"}, {0x6, 0xd, "1c69b972d57fd4a6d66fdf"}, {0x7, 0xb, "a4b204fb8d2225b475"}, {0x0, 0xc, "ddbef8c8700e778bc68b"}, {0x0, 0xf, "a6426658ee4d8a4f8d0756cf8b"}, {0x1, 0x11, "21eb9e2a3c1b06bd27cb22754a9c24"}]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x4}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x86}}], 0x118}}, {{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000440)="8f87bdc0dd9c281c9bf9b30f4934c86f2055bdc6b0844159527e2c", 0x1b}, {&(0x7f0000000940)="f4527e0801346b8b760216a38701c9775081bd4b82d59c9e284d94d105fb63f294d878da1af722ec1725ade901012dfa4868d7", 0x33}], 0x2, &(0x7f0000000a80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @empty, @local}}}], 0x20}}], 0x2, 0x0) (async) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) (async) getsockname$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r0, &(0x7f0000000b40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000b80)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000c40)={'syztnl0\x00', &(0x7f0000000bc0)={'syztnl0\x00', r3, 0x2f, 0x5, 0x6, 0x1f, 0x20, @local, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x28, 0x7, 0x7, 0xffff}}) sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="02008e000000000000006c00000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900090000007d000000080026006c090000080026006c090000080026004d1f000008002600641400000800262165d40600080026006c09000008002600a0090000"], 0x60}}, 0x10) 00:12:07 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x5, 0x5}}}, 0x90) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {}, 0x5, 0x5}}}, 0x90) 00:12:07 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x5, 0x5}}}, 0x90) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x2, @ib={0x1b, 0x0, 0x0, {}, 0x5, 0x5}}}, 0x90) 00:12:07 executing program 1: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[r1], 0x1) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f0000000200)={0x8000, 0x0, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/47, 0x2f}], &(0x7f00000001c0)=[0xfffffffffffffff9, 0x1, 0x5, 0x9], 0x1}, 0x20) (async) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f0000000200)={0x8000, 0x0, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/47, 0x2f}], &(0x7f00000001c0)=[0xfffffffffffffff9, 0x1, 0x5, 0x9], 0x1}, 0x20) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf09]}, 0x8) 00:12:07 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x5, 0x5}}}, 0x90) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x4000, @ib={0x1b, 0x0, 0x0, {}, 0x5, 0x5}}}, 0x90) 00:12:07 executing program 4: ioctl$BTRFS_IOC_LOGICAL_INO(0xffffffffffffffff, 0xc0389424, &(0x7f0000000180)={0x7cd28449, 0x18, '\x00', 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0]}) r0 = syz_io_uring_setup(0x5aa, &(0x7f0000000100)={0x0, 0x1, 0x0, 0x0, 0x8000000}, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) (async) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000800000/0x800000)=nil, &(0x7f0000e1f000/0x2000)=nil, 0x0, 0x0) (async, rerun: 32) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) (rerun: 32) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[r1], 0x1) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf02]}, 0x8) (async) r2 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) io_uring_enter(r3, 0x3b52, 0xeab9, 0x7, &(0x7f00000001c0)={[0x200]}, 0x8) 00:12:07 executing program 3: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000800000/0x800000)=nil, &(0x7f0000e1f000/0x2000)=nil, 0x0, 0x0) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf13]}, 0x8) 00:12:07 executing program 5: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000800000/0x800000)=nil, &(0x7f0000e1f000/0x2000)=nil, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[r1], 0x1) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf0d]}, 0x8) (fail_nth: 27) 00:12:07 executing program 2: r0 = semget(0x1, 0x0, 0x0) semctl$IPC_INFO(r0, 0x4, 0x3, &(0x7f0000000000)=""/150) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0xe, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="1802000000000000000000000000000061406c000000000000"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:12:07 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x5, 0x5}}}, 0x90) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @ib={0x2, 0x0, 0x0, {}, 0x5, 0x5}}}, 0x90) [ 727.799372][ T7744] FAULT_INJECTION: forcing a failure. [ 727.799372][ T7744] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 727.802240][ T7744] CPU: 0 PID: 7744 Comm: syz-executor.5 Not tainted 5.15.120-syzkaller #0 [ 727.804147][ T7744] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 727.806360][ T7744] Call trace: [ 727.807080][ T7744] dump_backtrace+0x0/0x530 [ 727.808008][ T7744] show_stack+0x2c/0x3c [ 727.808844][ T7744] dump_stack_lvl+0x108/0x170 [ 727.809853][ T7744] dump_stack+0x1c/0x58 [ 727.810797][ T7744] should_fail+0x400/0x5cc [ 727.811711][ T7744] should_fail_alloc_page+0x74/0xa8 [ 727.812829][ T7744] prepare_alloc_pages+0x160/0x4cc [ 727.813847][ T7744] __alloc_pages+0x138/0x674 [ 727.814787][ T7744] alloc_pages+0x390/0x634 [ 727.815681][ T7744] new_slab+0xec/0x56c [ 727.816502][ T7744] ___slab_alloc+0x6bc/0xdbc [ 727.817358][ T7744] kmem_cache_alloc_bulk+0x1a0/0x4c0 [ 727.818439][ T7744] io_submit_sqes+0x4f00/0x8970 [ 727.819426][ T7744] __arm64_sys_io_uring_enter+0x2a0/0x1cb8 [ 727.820641][ T7744] invoke_syscall+0x98/0x2b8 [ 727.821523][ T7744] el0_svc_common+0x138/0x258 00:12:07 executing program 2: r0 = semget(0x1, 0x0, 0x0) semctl$IPC_INFO(r0, 0x4, 0x3, &(0x7f0000000000)=""/150) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0xe, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="1802000000000000000000000000000061406c000000000000"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 727.822496][ T7744] do_el0_svc+0x58/0x14c [ 727.823373][ T7744] el0_svc+0x7c/0x1f0 [ 727.824261][ T7744] el0t_64_sync_handler+0x84/0xe4 [ 727.825365][ T7744] el0t_64_sync+0x1a0/0x1a4 00:12:07 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x5, 0x5}}}, 0x90) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @ib={0xa, 0x0, 0x0, {}, 0x5, 0x5}}}, 0x90) 00:12:07 executing program 3: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000800000/0x800000)=nil, &(0x7f0000e1f000/0x2000)=nil, 0x0, 0x0) io_uring_enter(r0, 0x80040b3, 0x7, 0x0, &(0x7f0000000000)={[0xf13]}, 0x8) 00:12:07 executing program 2: r0 = semget(0x1, 0x0, 0x0) semctl$IPC_INFO(r0, 0x4, 0x3, &(0x7f0000000000)=""/150) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0xe, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="1802000000000000000000000000000061406c000000000000"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:12:07 executing program 4: ioctl$BTRFS_IOC_LOGICAL_INO(0xffffffffffffffff, 0xc0389424, &(0x7f0000000180)={0x7cd28449, 0x18, '\x00', 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0]}) syz_io_uring_setup(0x5aa, &(0x7f0000000100)={0x0, 0x1, 0x0, 0x0, 0x8000000}, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) (async) r0 = syz_io_uring_setup(0x5aa, &(0x7f0000000100)={0x0, 0x1, 0x0, 0x0, 0x8000000}, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000800000/0x800000)=nil, &(0x7f0000e1f000/0x2000)=nil, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[r1], 0x1) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf02]}, 0x8) (async) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf02]}, 0x8) r2 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) io_uring_enter(r3, 0x3b52, 0xeab9, 0x7, &(0x7f00000001c0)={[0x200]}, 0x8) (async) io_uring_enter(r3, 0x3b52, 0xeab9, 0x7, &(0x7f00000001c0)={[0x200]}, 0x8) 00:12:08 executing program 1: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) (async) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[r1], 0x1) (async) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f0000000200)={0x8000, 0x0, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/47, 0x2f}], &(0x7f00000001c0)=[0xfffffffffffffff9, 0x1, 0x5, 0x9], 0x1}, 0x20) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf09]}, 0x8) 00:12:08 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x5, 0x5}}}, 0x90) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {}, 0x5, 0x5}}}, 0x90) 00:12:08 executing program 2: r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0xe, 0x4, &(0x7f00000000c0)=@framed={{0x18, 0x2}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x6c}]}, &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}}) r3 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r3}}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0xff, 0x4}}, './file0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xf, 0x2, &(0x7f0000000000)=@raw=[@map_idx_val={0x18, 0x4, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}], &(0x7f0000000040)='syzkaller\x00', 0x80, 0x0, 0x0, 0x41100, 0x9, '\x00', 0x0, 0x22, 0xffffffffffffffff, 0x8, &(0x7f0000000080)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000100)={0x2, 0x1, 0x5, 0x1}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000180)=[r2, 0xffffffffffffffff, r4, r5]}, 0x80) 00:12:08 executing program 5: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000800000/0x800000)=nil, &(0x7f0000e1f000/0x2000)=nil, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[r1], 0x1) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf0d]}, 0x8) (fail_nth: 28) 00:12:08 executing program 3: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000800000/0x800000)=nil, &(0x7f0000e1f000/0x2000)=nil, 0x0, 0x0) io_uring_enter(r0, 0x80040b3, 0x8, 0x0, &(0x7f0000000000)={[0xf13]}, 0x8) [ 728.152806][ T7768] FAULT_INJECTION: forcing a failure. [ 728.152806][ T7768] name failslab, interval 1, probability 0, space 0, times 0 00:12:08 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x5, 0x5}}}, 0x90) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @ib={0x1b, 0x2, 0x0, {}, 0x5, 0x5}}}, 0x90) [ 728.201791][ T7768] CPU: 0 PID: 7768 Comm: syz-executor.5 Not tainted 5.15.120-syzkaller #0 00:12:08 executing program 4: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x80000}, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)=0x0) r2 = syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000800000/0x800000)=nil, &(0x7f0000e1f000/0x2000)=nil, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000f84000/0x3000)=nil, 0x3000, 0x1000009, 0x810, r0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_submit(r3, r1, &(0x7f0000000340)=@IORING_OP_CLOSE={0x13, 0x1, 0x0, r2}, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[r4], 0x1) io_uring_register$IORING_REGISTER_BUFFERS2(r0, 0xf, &(0x7f0000000300)={0x2, 0x1, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)=""/14, 0xe}, {&(0x7f0000000180)=""/141, 0x8d}], &(0x7f00000002c0)=[0x9, 0x101, 0x4, 0x8000, 0x54a7, 0x19c0]}, 0x20) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf02]}, 0x8) [ 728.203662][ T7768] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 728.205743][ T7768] Call trace: [ 728.206438][ T7768] dump_backtrace+0x0/0x530 [ 728.207382][ T7768] show_stack+0x2c/0x3c [ 728.208254][ T7768] dump_stack_lvl+0x108/0x170 [ 728.209213][ T7768] dump_stack+0x1c/0x58 [ 728.210052][ T7768] should_fail+0x400/0x5cc [ 728.210999][ T7768] __should_failslab+0xbc/0x110 [ 728.212025][ T7768] should_failslab+0x10/0x28 [ 728.213009][ T7768] slab_pre_alloc_hook+0x64/0xe8 [ 728.214109][ T7768] kmem_cache_alloc_bulk+0x50/0x4c0 [ 728.215307][ T7768] io_submit_sqes+0x4f00/0x8970 [ 728.216401][ T7768] __arm64_sys_io_uring_enter+0x2a0/0x1cb8 [ 728.217659][ T7768] invoke_syscall+0x98/0x2b8 [ 728.218574][ T7768] el0_svc_common+0x138/0x258 [ 728.219562][ T7768] do_el0_svc+0x58/0x14c [ 728.220521][ T7768] el0_svc+0x7c/0x1f0 [ 728.221435][ T7768] el0t_64_sync_handler+0x84/0xe4 [ 728.222502][ T7768] el0t_64_sync+0x1a0/0x1a4 00:12:08 executing program 2: r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0xe, 0x4, &(0x7f00000000c0)=@framed={{0x18, 0x2}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x6c}]}, &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) (async) r1 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) (async) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}}) openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) (async) r3 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r3}}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0xff, 0x4}}, './file0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xf, 0x2, &(0x7f0000000000)=@raw=[@map_idx_val={0x18, 0x4, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}], &(0x7f0000000040)='syzkaller\x00', 0x80, 0x0, 0x0, 0x41100, 0x9, '\x00', 0x0, 0x22, 0xffffffffffffffff, 0x8, &(0x7f0000000080)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000100)={0x2, 0x1, 0x5, 0x1}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000180)=[r2, 0xffffffffffffffff, r4, r5]}, 0x80) 00:12:08 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x5, 0x5}}}, 0x90) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @ib={0x1b, 0x4000, 0x0, {}, 0x5, 0x5}}}, 0x90) 00:12:08 executing program 2: r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0xe, 0x4, &(0x7f00000000c0)=@framed={{0x18, 0x2}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x6c}]}, &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) (async) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}}) (async) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}}) r3 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r3}}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0xff, 0x4}}, './file0\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0xff, 0x4}}, './file0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xf, 0x2, &(0x7f0000000000)=@raw=[@map_idx_val={0x18, 0x4, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}], &(0x7f0000000040)='syzkaller\x00', 0x80, 0x0, 0x0, 0x41100, 0x9, '\x00', 0x0, 0x22, 0xffffffffffffffff, 0x8, &(0x7f0000000080)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000100)={0x2, 0x1, 0x5, 0x1}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000180)=[r2, 0xffffffffffffffff, r4, r5]}, 0x80) 00:12:08 executing program 1: r0 = syz_io_uring_setup(0x28e2, &(0x7f0000000180)={0x0, 0x0, 0x2}, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[r1], 0x1) ioctl$USBDEVFS_FREE_STREAMS(r1, 0x8008551d, &(0x7f00000000c0)={0xece1, 0x4, [{0x3}, {0x1}, {0x8}, {0x4}]}) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf09]}, 0x8) 00:12:08 executing program 3: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000800000/0x800000)=nil, &(0x7f0000e1f000/0x2000)=nil, 0x0, 0x0) io_uring_enter(r0, 0x80040b3, 0x10, 0x0, &(0x7f0000000000)={[0xf13]}, 0x8) 00:12:08 executing program 5: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000800000/0x800000)=nil, &(0x7f0000e1f000/0x2000)=nil, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[r1], 0x1) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf0d]}, 0x8) (fail_nth: 29) 00:12:08 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x5, 0x5}}}, 0x90) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {}, 0x5, 0x5}}}, 0x90) 00:12:08 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0xe, 0x4, &(0x7f00000000c0)=@framed={{0x18, 0x2}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x6c}]}, &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r0 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) r2 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/asound/timers\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xd, 0xe, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x2}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @alu={0x4, 0x1, 0xb, 0x8, 0x8, 0xfffffffffffffff4}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0xbb}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfff}, @jmp={0x5, 0x0, 0x4, 0x4, 0x2, 0x0, 0xfffffffffffffff0}, @map_val={0x18, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x5}]}, &(0x7f0000000080)='syzkaller\x00', 0x9bd, 0x50, &(0x7f0000000100)=""/80, 0x41100, 0x10, '\x00', 0x0, 0x7, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x9, 0x4}, 0x8, 0x10, &(0x7f00000001c0)={0x1, 0x4, 0x800, 0x18000000}, 0x10, 0x0, r1, 0x0, &(0x7f00000002c0)=[r3, 0x1, 0x1, r4]}, 0x80) [ 728.456463][ T7792] FAULT_INJECTION: forcing a failure. [ 728.456463][ T7792] name failslab, interval 1, probability 0, space 0, times 0 [ 728.469918][ T7792] CPU: 0 PID: 7792 Comm: syz-executor.5 Not tainted 5.15.120-syzkaller #0 [ 728.471736][ T7792] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 728.473849][ T7792] Call trace: [ 728.474544][ T7792] dump_backtrace+0x0/0x530 [ 728.475442][ T7792] show_stack+0x2c/0x3c [ 728.476271][ T7792] dump_stack_lvl+0x108/0x170 [ 728.477368][ T7792] dump_stack+0x1c/0x58 [ 728.478213][ T7792] should_fail+0x400/0x5cc [ 728.479110][ T7792] __should_failslab+0xbc/0x110 [ 728.480198][ T7792] should_failslab+0x10/0x28 [ 728.481115][ T7792] slab_pre_alloc_hook+0x64/0xe8 [ 728.482166][ T7792] kmem_cache_alloc_bulk+0x50/0x4c0 [ 728.483161][ T7792] io_submit_sqes+0x4f00/0x8970 [ 728.484200][ T7792] __arm64_sys_io_uring_enter+0x2a0/0x1cb8 [ 728.485447][ T7792] invoke_syscall+0x98/0x2b8 [ 728.486425][ T7792] el0_svc_common+0x138/0x258 [ 728.487381][ T7792] do_el0_svc+0x58/0x14c [ 728.488329][ T7792] el0_svc+0x7c/0x1f0 [ 728.489248][ T7792] el0t_64_sync_handler+0x84/0xe4 [ 728.490381][ T7792] el0t_64_sync+0x1a0/0x1a4 00:12:08 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x5, 0x5}}}, 0x90) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @ib={0x1b, 0x0, 0x2, {}, 0x5, 0x5}}}, 0x90) 00:12:08 executing program 1: r0 = syz_io_uring_setup(0x28e2, &(0x7f0000000180)={0x0, 0x0, 0x2}, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[r1], 0x1) ioctl$USBDEVFS_FREE_STREAMS(r1, 0x8008551d, &(0x7f00000000c0)={0xece1, 0x4, [{0x3}, {0x1}, {0x8}, {0x4}]}) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf09]}, 0x8) syz_io_uring_setup(0x28e2, &(0x7f0000000180)={0x0, 0x0, 0x2}, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) (async) syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x0) (async) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[r1], 0x1) (async) ioctl$USBDEVFS_FREE_STREAMS(r1, 0x8008551d, &(0x7f00000000c0)={0xece1, 0x4, [{0x3}, {0x1}, {0x8}, {0x4}]}) (async) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf09]}, 0x8) (async) 00:12:08 executing program 4: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x80000}, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)=0x0) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000800000/0x800000)=nil, &(0x7f0000e1f000/0x2000)=nil, 0x0, 0x0) (async) r2 = syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000800000/0x800000)=nil, &(0x7f0000e1f000/0x2000)=nil, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000f84000/0x3000)=nil, 0x3000, 0x1000009, 0x810, r0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_submit(r3, r1, &(0x7f0000000340)=@IORING_OP_CLOSE={0x13, 0x1, 0x0, r2}, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[r4], 0x1) (async) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[r4], 0x1) io_uring_register$IORING_REGISTER_BUFFERS2(r0, 0xf, &(0x7f0000000300)={0x2, 0x1, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)=""/14, 0xe}, {&(0x7f0000000180)=""/141, 0x8d}], &(0x7f00000002c0)=[0x9, 0x101, 0x4, 0x8000, 0x54a7, 0x19c0]}, 0x20) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf02]}, 0x8) (async) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf02]}, 0x8) 00:12:08 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x5, 0x5}}}, 0x90) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @ib={0x1b, 0x0, 0x4000, {}, 0x5, 0x5}}}, 0x90) 00:12:08 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0xe, 0x4, &(0x7f00000000c0)=@framed={{0x18, 0x2}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x6c}]}, &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r0 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) (async) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) r2 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) (async) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) (async, rerun: 32) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/asound/timers\x00', 0x0, 0x0) (rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xd, 0xe, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x2}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @alu={0x4, 0x1, 0xb, 0x8, 0x8, 0xfffffffffffffff4}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0xbb}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfff}, @jmp={0x5, 0x0, 0x4, 0x4, 0x2, 0x0, 0xfffffffffffffff0}, @map_val={0x18, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x5}]}, &(0x7f0000000080)='syzkaller\x00', 0x9bd, 0x50, &(0x7f0000000100)=""/80, 0x41100, 0x10, '\x00', 0x0, 0x7, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x9, 0x4}, 0x8, 0x10, &(0x7f00000001c0)={0x1, 0x4, 0x800, 0x18000000}, 0x10, 0x0, r1, 0x0, &(0x7f00000002c0)=[r3, 0x1, 0x1, r4]}, 0x80) 00:12:08 executing program 3: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000800000/0x800000)=nil, &(0x7f0000e1f000/0x2000)=nil, 0x0, 0x0) io_uring_enter(r0, 0x80040b3, 0x11, 0x0, &(0x7f0000000000)={[0xf13]}, 0x8) 00:12:08 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x5, 0x5}}}, 0x90) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @ib={0x1b, 0x0, 0x1000000, {}, 0x5, 0x5}}}, 0x90) 00:12:08 executing program 5: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000800000/0x800000)=nil, &(0x7f0000e1f000/0x2000)=nil, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[r1], 0x1) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf0d]}, 0x8) (fail_nth: 30) 00:12:08 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0xe, 0x4, &(0x7f00000000c0)=@framed={{0x18, 0x2}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x6c}]}, &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) r0 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) (async) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) r2 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) (async) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) (async) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/asound/timers\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xd, 0xe, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x2}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @alu={0x4, 0x1, 0xb, 0x8, 0x8, 0xfffffffffffffff4}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0xbb}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfff}, @jmp={0x5, 0x0, 0x4, 0x4, 0x2, 0x0, 0xfffffffffffffff0}, @map_val={0x18, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x5}]}, &(0x7f0000000080)='syzkaller\x00', 0x9bd, 0x50, &(0x7f0000000100)=""/80, 0x41100, 0x10, '\x00', 0x0, 0x7, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x9, 0x4}, 0x8, 0x10, &(0x7f00000001c0)={0x1, 0x4, 0x800, 0x18000000}, 0x10, 0x0, r1, 0x0, &(0x7f00000002c0)=[r3, 0x1, 0x1, r4]}, 0x80) 00:12:08 executing program 1: r0 = syz_io_uring_setup(0x28e2, &(0x7f0000000180)={0x0, 0x0, 0x2}, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[r1], 0x1) (async) ioctl$USBDEVFS_FREE_STREAMS(r1, 0x8008551d, &(0x7f00000000c0)={0xece1, 0x4, [{0x3}, {0x1}, {0x8}, {0x4}]}) (async) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf09]}, 0x8) 00:12:08 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x5, 0x5}}}, 0x90) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @ib={0x1b, 0x0, 0x2000000, {}, 0x5, 0x5}}}, 0x90) [ 728.783784][ T7820] FAULT_INJECTION: forcing a failure. [ 728.783784][ T7820] name fail_page_alloc, interval 1, probability 0, space 0, times 0 00:12:08 executing program 3: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000800000/0x800000)=nil, &(0x7f0000e1f000/0x2000)=nil, 0x0, 0x0) io_uring_enter(r0, 0x80040b3, 0x700, 0x0, &(0x7f0000000000)={[0xf13]}, 0x8) [ 728.812553][ T7820] CPU: 1 PID: 7820 Comm: syz-executor.5 Not tainted 5.15.120-syzkaller #0 [ 728.814411][ T7820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 728.816406][ T7820] Call trace: [ 728.817067][ T7820] dump_backtrace+0x0/0x530 [ 728.817977][ T7820] show_stack+0x2c/0x3c [ 728.818828][ T7820] dump_stack_lvl+0x108/0x170 [ 728.819865][ T7820] dump_stack+0x1c/0x58 [ 728.820782][ T7820] should_fail+0x400/0x5cc [ 728.821734][ T7820] should_fail_alloc_page+0x74/0xa8 [ 728.822921][ T7820] prepare_alloc_pages+0x160/0x4cc [ 728.824075][ T7820] __alloc_pages+0x138/0x674 [ 728.825088][ T7820] alloc_pages+0x390/0x634 [ 728.825922][ T7820] new_slab+0xec/0x56c [ 728.826763][ T7820] ___slab_alloc+0x6bc/0xdbc [ 728.827729][ T7820] kmem_cache_alloc_bulk+0x1a0/0x4c0 [ 728.828852][ T7820] io_submit_sqes+0x4f00/0x8970 [ 728.829952][ T7820] __arm64_sys_io_uring_enter+0x2a0/0x1cb8 [ 728.831156][ T7820] invoke_syscall+0x98/0x2b8 [ 728.832098][ T7820] el0_svc_common+0x138/0x258 [ 728.833070][ T7820] do_el0_svc+0x58/0x14c [ 728.833936][ T7820] el0_svc+0x7c/0x1f0 [ 728.834740][ T7820] el0t_64_sync_handler+0x84/0xe4 [ 728.835709][ T7820] el0t_64_sync+0x1a0/0x1a4 00:12:08 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x5, 0x5}}}, 0x90) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @ib={0x1b, 0x0, 0x40000000, {}, 0x5, 0x5}}}, 0x90) 00:12:08 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0xe, 0x4, &(0x7f00000000c0)=@framed={{0x18, 0x2}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x6c}]}, &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r0 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x1d, 0x8, &(0x7f0000000000)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_val={0x18, 0xb, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8000}, @map_idx={0x18, 0x7, 0x5, 0x0, 0x7}, @ldst={0x1, 0x1, 0x6, 0x6, 0x7, 0x18}, @cb_func={0x18, 0x1, 0x4, 0x0, 0xfffffffffffffffb}], &(0x7f0000000040)='GPL\x00', 0xfffff28d, 0x0, 0x0, 0x41000, 0x9, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000080)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000000100)={0x1, 0x6, 0x8, 0x3}, 0x10, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140)=[0xffffffffffffffff, r1]}, 0x80) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x229c0, 0x10) 00:12:08 executing program 4: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x80000}, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)=0x0) r2 = syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000800000/0x800000)=nil, &(0x7f0000e1f000/0x2000)=nil, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000f84000/0x3000)=nil, 0x3000, 0x1000009, 0x810, r0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_submit(r3, r1, &(0x7f0000000340)=@IORING_OP_CLOSE={0x13, 0x1, 0x0, r2}, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[r4], 0x1) io_uring_register$IORING_REGISTER_BUFFERS2(r0, 0xf, &(0x7f0000000300)={0x2, 0x1, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)=""/14, 0xe}, {&(0x7f0000000180)=""/141, 0x8d}], &(0x7f00000002c0)=[0x9, 0x101, 0x4, 0x8000, 0x54a7, 0x19c0]}, 0x20) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf02]}, 0x8) syz_io_uring_setup(0x5ad, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x80000}, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) (async) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000800000/0x800000)=nil, &(0x7f0000e1f000/0x2000)=nil, 0x0, 0x0) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000f84000/0x3000)=nil, 0x3000, 0x1000009, 0x810, r0, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) syz_io_uring_submit(r3, r1, &(0x7f0000000340)=@IORING_OP_CLOSE={0x13, 0x1, 0x0, r2}, 0x0) (async) syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) (async) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[r4], 0x1) (async) io_uring_register$IORING_REGISTER_BUFFERS2(r0, 0xf, &(0x7f0000000300)={0x2, 0x1, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)=""/14, 0xe}, {&(0x7f0000000180)=""/141, 0x8d}], &(0x7f00000002c0)=[0x9, 0x101, 0x4, 0x8000, 0x54a7, 0x19c0]}, 0x20) (async) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf02]}, 0x8) (async) 00:12:08 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0xe, 0x4, &(0x7f00000000c0)=@framed={{0x18, 0x2}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x6c}]}, &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) r0 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x1d, 0x8, &(0x7f0000000000)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_val={0x18, 0xb, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8000}, @map_idx={0x18, 0x7, 0x5, 0x0, 0x7}, @ldst={0x1, 0x1, 0x6, 0x6, 0x7, 0x18}, @cb_func={0x18, 0x1, 0x4, 0x0, 0xfffffffffffffffb}], &(0x7f0000000040)='GPL\x00', 0xfffff28d, 0x0, 0x0, 0x41000, 0x9, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000080)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000000100)={0x1, 0x6, 0x8, 0x3}, 0x10, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140)=[0xffffffffffffffff, r1]}, 0x80) (async) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x229c0, 0x10) 00:12:08 executing program 3: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000800000/0x800000)=nil, &(0x7f0000e1f000/0x2000)=nil, 0x0, 0x0) io_uring_enter(r0, 0x80040b3, 0x1100, 0x0, &(0x7f0000000000)={[0xf13]}, 0x8) 00:12:08 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x5, 0x5}}}, 0x90) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"0200"}, 0x5, 0x5}}}, 0x90) 00:12:09 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x5, 0x5}}}, 0x90) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {'\x00@\x00'}, 0x5, 0x5}}}, 0x90) 00:12:09 executing program 5: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000800000/0x800000)=nil, &(0x7f0000e1f000/0x2000)=nil, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[r1], 0x1) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf0d]}, 0x8) (fail_nth: 31) 00:12:09 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0xe, 0x4, &(0x7f00000000c0)=@framed={{0x18, 0x2}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x6c}]}, &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) (async) r0 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x1d, 0x8, &(0x7f0000000000)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_val={0x18, 0xb, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8000}, @map_idx={0x18, 0x7, 0x5, 0x0, 0x7}, @ldst={0x1, 0x1, 0x6, 0x6, 0x7, 0x18}, @cb_func={0x18, 0x1, 0x4, 0x0, 0xfffffffffffffffb}], &(0x7f0000000040)='GPL\x00', 0xfffff28d, 0x0, 0x0, 0x41000, 0x9, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000080)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000000100)={0x1, 0x6, 0x8, 0x3}, 0x10, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140)=[0xffffffffffffffff, r1]}, 0x80) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x229c0, 0x10) (async) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x229c0, 0x10) 00:12:09 executing program 1: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[r1], 0x1) fsync(r0) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf09]}, 0x8) 00:12:09 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x5, 0x5}}}, 0x90) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"0000000100"}, 0x5, 0x5}}}, 0x90) 00:12:09 executing program 3: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000800000/0x800000)=nil, &(0x7f0000e1f000/0x2000)=nil, 0x0, 0x0) io_uring_enter(r0, 0x80040b3, 0x2000, 0x0, &(0x7f0000000000)={[0xf13]}, 0x8) 00:12:09 executing program 4: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) r1 = syz_io_uring_setup(0x7321, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x1, 0x3e2, 0x0, r0}, &(0x7f0000f88000/0x2000)=nil, &(0x7f00008a3000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000200)) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000800000/0x800000)=nil, &(0x7f0000e1f000/0x2000)=nil, 0x0, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[r2], 0x1) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r3, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r4, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {}, 0x5, 0x5}}}, 0x90) r5 = syz_open_dev$hidraw(&(0x7f0000000280), 0x6e8a, 0x40000) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r6, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r7, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {}, 0x5, 0x5}}}, 0x90) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f00000002c0)=[r3, r5, r6, r1], 0x4) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf02]}, 0x8) 00:12:09 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x5, 0x5}}}, 0x90) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"0000000200"}, 0x5, 0x5}}}, 0x90) 00:12:09 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"02e0000000000000e9234200"}, 0x5, 0x8}}}, 0x90) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='blkio.throttle.io_serviced\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000200)={0xffffffffffffffff}, 0x13f, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000300)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0x6, @loopback, 0x5}, {0xa, 0x4e24, 0x400a5d5, @private1, 0x5}, r3, 0x401}}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0xe, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x7, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r4 = syz_open_dev$media(&(0x7f0000000000), 0x7f000000, 0x40002) r5 = dup3(r0, r4, 0x0) write$RDMA_USER_CM_CMD_QUERY(r5, &(0x7f0000000080)={0x13, 0x10, 0xfa00, {&(0x7f0000000440), r1, 0x3}}, 0x18) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000040)={0x4, 0x1, 0x9, 0x0, 0xffff0001}) [ 729.266101][ T7872] FAULT_INJECTION: forcing a failure. [ 729.266101][ T7872] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 729.273796][ T7872] CPU: 0 PID: 7872 Comm: syz-executor.5 Not tainted 5.15.120-syzkaller #0 [ 729.275584][ T7872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 729.277801][ T7872] Call trace: [ 729.278540][ T7872] dump_backtrace+0x0/0x530 [ 729.279462][ T7872] show_stack+0x2c/0x3c [ 729.280350][ T7872] dump_stack_lvl+0x108/0x170 [ 729.281304][ T7872] dump_stack+0x1c/0x58 [ 729.282110][ T7872] should_fail+0x400/0x5cc [ 729.283037][ T7872] should_fail_alloc_page+0x74/0xa8 [ 729.284172][ T7872] prepare_alloc_pages+0x160/0x4cc [ 729.285240][ T7872] __alloc_pages+0x138/0x674 [ 729.286170][ T7872] alloc_pages+0x390/0x634 [ 729.287124][ T7872] new_slab+0xec/0x56c [ 729.288001][ T7872] ___slab_alloc+0x6bc/0xdbc [ 729.288955][ T7872] kmem_cache_alloc_bulk+0x1a0/0x4c0 [ 729.290138][ T7872] io_submit_sqes+0x4f00/0x8970 [ 729.291111][ T7872] __arm64_sys_io_uring_enter+0x2a0/0x1cb8 [ 729.292383][ T7872] invoke_syscall+0x98/0x2b8 [ 729.293386][ T7872] el0_svc_common+0x138/0x258 [ 729.294331][ T7872] do_el0_svc+0x58/0x14c [ 729.295263][ T7872] el0_svc+0x7c/0x1f0 [ 729.296166][ T7872] el0t_64_sync_handler+0x84/0xe4 [ 729.297240][ T7872] el0t_64_sync+0x1a0/0x1a4 00:12:09 executing program 3: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000800000/0x800000)=nil, &(0x7f0000e1f000/0x2000)=nil, 0x0, 0x0) io_uring_enter(r0, 0x80040b3, 0x80000, 0x0, &(0x7f0000000000)={[0xf13]}, 0x8) 00:12:09 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x5, 0x5}}}, 0x90) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {'\x00\x00\x00@\x00'}, 0x5, 0x5}}}, 0x90) 00:12:09 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"02e0000000000000e9234200"}, 0x5, 0x8}}}, 0x90) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='blkio.throttle.io_serviced\x00', 0x0, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000200)={0xffffffffffffffff}, 0x13f, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000300)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0x6, @loopback, 0x5}, {0xa, 0x4e24, 0x400a5d5, @private1, 0x5}, r3, 0x401}}, 0x48) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0xe, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x7, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r4 = syz_open_dev$media(&(0x7f0000000000), 0x7f000000, 0x40002) r5 = dup3(r0, r4, 0x0) write$RDMA_USER_CM_CMD_QUERY(r5, &(0x7f0000000080)={0x13, 0x10, 0xfa00, {&(0x7f0000000440), r1, 0x3}}, 0x18) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000040)={0x4, 0x1, 0x9, 0x0, 0xffff0001}) 00:12:09 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x5, 0x5}}}, 0x90) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"000000000000000100"}, 0x5, 0x5}}}, 0x90) 00:12:09 executing program 5: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000800000/0x800000)=nil, &(0x7f0000e1f000/0x2000)=nil, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[r1], 0x1) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf0d]}, 0x8) (fail_nth: 32) 00:12:09 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"02e0000000000000e9234200"}, 0x5, 0x8}}}, 0x90) (async) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='blkio.throttle.io_serviced\x00', 0x0, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000200)={0xffffffffffffffff}, 0x13f, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000300)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0x6, @loopback, 0x5}, {0xa, 0x4e24, 0x400a5d5, @private1, 0x5}, r3, 0x401}}, 0x48) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0xe, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x7, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) r4 = syz_open_dev$media(&(0x7f0000000000), 0x7f000000, 0x40002) r5 = dup3(r0, r4, 0x0) write$RDMA_USER_CM_CMD_QUERY(r5, &(0x7f0000000080)={0x13, 0x10, 0xfa00, {&(0x7f0000000440), r1, 0x3}}, 0x18) (async) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000040)={0x4, 0x1, 0x9, 0x0, 0xffff0001}) [ 729.562921][ T7889] FAULT_INJECTION: forcing a failure. [ 729.562921][ T7889] name failslab, interval 1, probability 0, space 0, times 0 [ 729.572987][ T7889] CPU: 0 PID: 7889 Comm: syz-executor.5 Not tainted 5.15.120-syzkaller #0 [ 729.574838][ T7889] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 729.576928][ T7889] Call trace: [ 729.577593][ T7889] dump_backtrace+0x0/0x530 [ 729.578501][ T7889] show_stack+0x2c/0x3c [ 729.579348][ T7889] dump_stack_lvl+0x108/0x170 [ 729.580413][ T7889] dump_stack+0x1c/0x58 [ 729.581238][ T7889] should_fail+0x400/0x5cc [ 729.582156][ T7889] __should_failslab+0xbc/0x110 [ 729.583116][ T7889] should_failslab+0x10/0x28 [ 729.584116][ T7889] slab_pre_alloc_hook+0x64/0xe8 [ 729.585225][ T7889] __kmalloc_node+0xbc/0x5b8 [ 729.586149][ T7889] memcg_alloc_page_obj_cgroups+0x80/0x174 [ 729.587388][ T7889] new_slab+0x120/0x56c [ 729.588254][ T7889] ___slab_alloc+0x6bc/0xdbc [ 729.589170][ T7889] kmem_cache_alloc_bulk+0x1a0/0x4c0 [ 729.590277][ T7889] io_submit_sqes+0x4f00/0x8970 [ 729.591265][ T7889] __arm64_sys_io_uring_enter+0x2a0/0x1cb8 [ 729.592488][ T7889] invoke_syscall+0x98/0x2b8 [ 729.593527][ T7889] el0_svc_common+0x138/0x258 [ 729.594459][ T7889] do_el0_svc+0x58/0x14c [ 729.595300][ T7889] el0_svc+0x7c/0x1f0 [ 729.596196][ T7889] el0t_64_sync_handler+0x84/0xe4 [ 729.597243][ T7889] el0t_64_sync+0x1a0/0x1a4 00:12:09 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x5, 0x5}}}, 0x90) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"000000000000000200"}, 0x5, 0x5}}}, 0x90) 00:12:09 executing program 4: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) r1 = syz_io_uring_setup(0x7321, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x1, 0x3e2, 0x0, r0}, &(0x7f0000f88000/0x2000)=nil, &(0x7f00008a3000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000200)) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000800000/0x800000)=nil, &(0x7f0000e1f000/0x2000)=nil, 0x0, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[r2], 0x1) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r3, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r4, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {}, 0x5, 0x5}}}, 0x90) r5 = syz_open_dev$hidraw(&(0x7f0000000280), 0x6e8a, 0x40000) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r6, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r7, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {}, 0x5, 0x5}}}, 0x90) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f00000002c0)=[r3, r5, r6, r1], 0x4) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf02]}, 0x8) syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) (async) syz_io_uring_setup(0x7321, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x1, 0x3e2, 0x0, r0}, &(0x7f0000f88000/0x2000)=nil, &(0x7f00008a3000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000200)) (async) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000800000/0x800000)=nil, &(0x7f0000e1f000/0x2000)=nil, 0x0, 0x0) (async) syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) (async) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[r2], 0x1) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x111}}, 0x20) (async) write$RDMA_USER_CM_CMD_BIND(r3, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r4, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {}, 0x5, 0x5}}}, 0x90) (async) syz_open_dev$hidraw(&(0x7f0000000280), 0x6e8a, 0x40000) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x111}}, 0x20) (async) write$RDMA_USER_CM_CMD_BIND(r6, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r7, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {}, 0x5, 0x5}}}, 0x90) (async) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f00000002c0)=[r3, r5, r6, r1], 0x4) (async) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf02]}, 0x8) (async) 00:12:09 executing program 2: ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0xe, 0x4, &(0x7f00000000c0)=@framed={{0x18, 0x2}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x6c}]}, &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) statx(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x800, 0x2, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@private2, @in6=@mcast2, 0x4e21, 0x3433, 0x4e23, 0x3, 0xa, 0x20, 0x0, 0x3b, 0x0, r0}, {0xfffffffffffffffe, 0x3, 0x80000001, 0x101, 0x7, 0x8, 0x80000001, 0x4}, {0xf35a71460, 0x4, 0x4, 0x9}, 0x8, 0x6e6bb3, 0x1, 0x0, 0x1}, {{@in=@rand_addr=0x64010102, 0x4d5, 0x32}, 0xa, @in6=@mcast2, 0x0, 0x3, 0x2, 0x3f, 0x2, 0x5, 0x5}}, 0xe8) 00:12:09 executing program 3: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000800000/0x800000)=nil, &(0x7f0000e1f000/0x2000)=nil, 0x0, 0x0) io_uring_enter(r0, 0x80040b3, 0x1000000, 0x0, &(0x7f0000000000)={[0xf13]}, 0x8) 00:12:09 executing program 1: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[r1], 0x1) fsync(r0) (async) fsync(r0) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf09]}, 0x8) 00:12:09 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x5, 0x5}}}, 0x90) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {'\x00\x00\x00\x00\x00\x00\x00@\x00'}, 0x5, 0x5}}}, 0x90) 00:12:09 executing program 2: ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0xe, 0x4, &(0x7f00000000c0)=@framed={{0x18, 0x2}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x6c}]}, &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) statx(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x800, 0x2, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@private2, @in6=@mcast2, 0x4e21, 0x3433, 0x4e23, 0x3, 0xa, 0x20, 0x0, 0x3b, 0x0, r0}, {0xfffffffffffffffe, 0x3, 0x80000001, 0x101, 0x7, 0x8, 0x80000001, 0x4}, {0xf35a71460, 0x4, 0x4, 0x9}, 0x8, 0x6e6bb3, 0x1, 0x0, 0x1}, {{@in=@rand_addr=0x64010102, 0x4d5, 0x32}, 0xa, @in6=@mcast2, 0x0, 0x3, 0x2, 0x3f, 0x2, 0x5, 0x5}}, 0xe8) 00:12:09 executing program 5: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000800000/0x800000)=nil, &(0x7f0000e1f000/0x2000)=nil, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[r1], 0x1) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf0d]}, 0x8) (fail_nth: 33) 00:12:09 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x5, 0x5}}}, 0x90) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"000200"}, 0x5, 0x5}}}, 0x90) 00:12:09 executing program 2: ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0xe, 0x4, &(0x7f00000000c0)=@framed={{0x18, 0x2}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x6c}]}, &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) statx(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x800, 0x2, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@private2, @in6=@mcast2, 0x4e21, 0x3433, 0x4e23, 0x3, 0xa, 0x20, 0x0, 0x3b, 0x0, r0}, {0xfffffffffffffffe, 0x3, 0x80000001, 0x101, 0x7, 0x8, 0x80000001, 0x4}, {0xf35a71460, 0x4, 0x4, 0x9}, 0x8, 0x6e6bb3, 0x1, 0x0, 0x1}, {{@in=@rand_addr=0x64010102, 0x4d5, 0x32}, 0xa, @in6=@mcast2, 0x0, 0x3, 0x2, 0x3f, 0x2, 0x5, 0x5}}, 0xe8) 00:12:09 executing program 3: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000800000/0x800000)=nil, &(0x7f0000e1f000/0x2000)=nil, 0x0, 0x0) io_uring_enter(r0, 0x80040b3, 0x7000000, 0x0, &(0x7f0000000000)={[0xf13]}, 0x8) [ 729.848220][ T7925] FAULT_INJECTION: forcing a failure. [ 729.848220][ T7925] name failslab, interval 1, probability 0, space 0, times 0 [ 729.859602][ T7925] CPU: 0 PID: 7925 Comm: syz-executor.5 Not tainted 5.15.120-syzkaller #0 [ 729.861402][ T7925] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 729.863494][ T7925] Call trace: [ 729.864187][ T7925] dump_backtrace+0x0/0x530 [ 729.865114][ T7925] show_stack+0x2c/0x3c [ 729.865962][ T7925] dump_stack_lvl+0x108/0x170 00:12:09 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x5, 0x5}}}, 0x90) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {'\x00\x00@\x00'}, 0x5, 0x5}}}, 0x90) [ 729.867005][ T7925] dump_stack+0x1c/0x58 [ 729.867907][ T7925] should_fail+0x400/0x5cc [ 729.868848][ T7925] __should_failslab+0xbc/0x110 [ 729.869836][ T7925] should_failslab+0x10/0x28 [ 729.870814][ T7925] slab_pre_alloc_hook+0x64/0xe8 [ 729.871864][ T7925] kmem_cache_alloc_bulk+0x50/0x4c0 [ 729.873031][ T7925] io_submit_sqes+0x4f00/0x8970 [ 729.874118][ T7925] __arm64_sys_io_uring_enter+0x2a0/0x1cb8 [ 729.875451][ T7925] invoke_syscall+0x98/0x2b8 [ 729.876458][ T7925] el0_svc_common+0x138/0x258 [ 729.877491][ T7925] do_el0_svc+0x58/0x14c [ 729.878362][ T7925] el0_svc+0x7c/0x1f0 [ 729.879207][ T7925] el0t_64_sync_handler+0x84/0xe4 [ 729.880269][ T7925] el0t_64_sync+0x1a0/0x1a4 00:12:09 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x5, 0x5}}}, 0x90) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"000000000100"}, 0x5, 0x5}}}, 0x90) 00:12:09 executing program 4: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) r1 = syz_io_uring_setup(0x7321, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x1, 0x3e2, 0x0, r0}, &(0x7f0000f88000/0x2000)=nil, &(0x7f00008a3000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000200)) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000800000/0x800000)=nil, &(0x7f0000e1f000/0x2000)=nil, 0x0, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[r2], 0x1) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r3, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r4, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {}, 0x5, 0x5}}}, 0x90) r5 = syz_open_dev$hidraw(&(0x7f0000000280), 0x6e8a, 0x40000) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r6, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r7, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {}, 0x5, 0x5}}}, 0x90) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f00000002c0)=[r3, r5, r6, r1], 0x4) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf02]}, 0x8) syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) (async) syz_io_uring_setup(0x7321, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x1, 0x3e2, 0x0, r0}, &(0x7f0000f88000/0x2000)=nil, &(0x7f00008a3000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000200)) (async) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000800000/0x800000)=nil, &(0x7f0000e1f000/0x2000)=nil, 0x0, 0x0) (async) syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) (async) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[r2], 0x1) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x111}}, 0x20) (async) write$RDMA_USER_CM_CMD_BIND(r3, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r4, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {}, 0x5, 0x5}}}, 0x90) (async) syz_open_dev$hidraw(&(0x7f0000000280), 0x6e8a, 0x40000) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x111}}, 0x20) (async) write$RDMA_USER_CM_CMD_BIND(r6, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r7, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {}, 0x5, 0x5}}}, 0x90) (async) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f00000002c0)=[r3, r5, r6, r1], 0x4) (async) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf02]}, 0x8) (async) 00:12:10 executing program 1: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) (async) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[r1], 0x1) (async) fsync(r0) (async) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf09]}, 0x8) 00:12:10 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0xe, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="1802000000000000000000000000200061106c0000000000a200000000000000"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r0 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB='\x00\x00\x00\x00\x00']) r2 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r5 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) r6 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r5}}) r7 = openat$incfs(0xffffffffffffffff, &(0x7f00000001c0)='.log\x00', 0x141000, 0x112) r8 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) r9 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r9}, 0x2c, {'wfdno', 0x3d, r8}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x9, &(0x7f0000000000)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @exit, @map_val={0x18, 0x3, 0x2, 0x0, r1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x3}, @map_fd={0x18, 0x5, 0x1, 0x0, r3}], &(0x7f0000000080)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000, 0x1, '\x00', r4, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000180)={0x0, 0xb, 0x6, 0x6fa4}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000200)=[r6, r7, r9]}, 0x80) 00:12:10 executing program 3: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000800000/0x800000)=nil, &(0x7f0000e1f000/0x2000)=nil, 0x0, 0x0) io_uring_enter(r0, 0x80040b3, 0x8000000, 0x0, &(0x7f0000000000)={[0xf13]}, 0x8) 00:12:10 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x5, 0x5}}}, 0x90) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"000000000200"}, 0x5, 0x5}}}, 0x90) 00:12:10 executing program 5: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000800000/0x800000)=nil, &(0x7f0000e1f000/0x2000)=nil, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[r1], 0x1) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf0d]}, 0x8) (fail_nth: 34) [ 730.125801][ T7945] FAULT_INJECTION: forcing a failure. [ 730.125801][ T7945] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 730.131842][ T7945] CPU: 0 PID: 7945 Comm: syz-executor.5 Not tainted 5.15.120-syzkaller #0 [ 730.133628][ T7945] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 730.135720][ T7945] Call trace: [ 730.136377][ T7945] dump_backtrace+0x0/0x530 [ 730.137292][ T7945] show_stack+0x2c/0x3c [ 730.138105][ T7945] dump_stack_lvl+0x108/0x170 00:12:10 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x5, 0x5}}}, 0x90) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {'\x00\x00\x00\x00@\x00'}, 0x5, 0x5}}}, 0x90) [ 730.139070][ T7945] dump_stack+0x1c/0x58 [ 730.139874][ T7945] should_fail+0x400/0x5cc [ 730.140852][ T7945] should_fail_alloc_page+0x74/0xa8 [ 730.141971][ T7945] prepare_alloc_pages+0x160/0x4cc [ 730.143098][ T7945] __alloc_pages+0x138/0x674 [ 730.144074][ T7945] alloc_pages+0x390/0x634 [ 730.145033][ T7945] new_slab+0xec/0x56c [ 730.145889][ T7945] ___slab_alloc+0x6bc/0xdbc [ 730.146889][ T7945] kmem_cache_alloc_bulk+0x1a0/0x4c0 [ 730.148004][ T7945] io_submit_sqes+0x4f00/0x8970 [ 730.149145][ T7945] __arm64_sys_io_uring_enter+0x2a0/0x1cb8 [ 730.150406][ T7945] invoke_syscall+0x98/0x2b8 [ 730.151416][ T7945] el0_svc_common+0x138/0x258 [ 730.152395][ T7945] do_el0_svc+0x58/0x14c [ 730.153395][ T7945] el0_svc+0x7c/0x1f0 [ 730.154320][ T7945] el0t_64_sync_handler+0x84/0xe4 [ 730.155461][ T7945] el0t_64_sync+0x1a0/0x1a4 00:12:10 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0xe, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="1802000000000000000000000000200061106c0000000000a200000000000000"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) r0 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) (async) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB='\x00\x00\x00\x00\x00']) r2 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) (async) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) (async) r5 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) (async) r6 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r5}}) (async) r7 = openat$incfs(0xffffffffffffffff, &(0x7f00000001c0)='.log\x00', 0x141000, 0x112) (async) r8 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) (async) r9 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r9}, 0x2c, {'wfdno', 0x3d, r8}}) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x9, &(0x7f0000000000)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @exit, @map_val={0x18, 0x3, 0x2, 0x0, r1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x3}, @map_fd={0x18, 0x5, 0x1, 0x0, r3}], &(0x7f0000000080)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000, 0x1, '\x00', r4, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000180)={0x0, 0xb, 0x6, 0x6fa4}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000200)=[r6, r7, r9]}, 0x80) 00:12:10 executing program 1: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[r1], 0x1) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf09]}, 0x8) 00:12:10 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x5, 0x5}}}, 0x90) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000100"}, 0x5, 0x5}}}, 0x90) 00:12:10 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0xe, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="1802000000000000000000000000200061106c0000000000a200000000000000"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r0 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB='\x00\x00\x00\x00\x00']) r2 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r5 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) r6 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r5}}) r7 = openat$incfs(0xffffffffffffffff, &(0x7f00000001c0)='.log\x00', 0x141000, 0x112) r8 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) r9 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r9}, 0x2c, {'wfdno', 0x3d, r8}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x9, &(0x7f0000000000)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @exit, @map_val={0x18, 0x3, 0x2, 0x0, r1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x3}, @map_fd={0x18, 0x5, 0x1, 0x0, r3}], &(0x7f0000000080)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000, 0x1, '\x00', r4, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000180)={0x0, 0xb, 0x6, 0x6fa4}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000200)=[r6, r7, r9]}, 0x80) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0xe, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="1802000000000000000000000000200061106c0000000000a200000000000000"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) (async) openat$vcs(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) (async) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB='\x00\x00\x00\x00\x00']) (async) openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) (async) openat$vcs(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) (async) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) (async) openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) (async) openat$vcs(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) (async) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r5}}) (async) openat$incfs(0xffffffffffffffff, &(0x7f00000001c0)='.log\x00', 0x141000, 0x112) (async) openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) (async) openat$vcs(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) (async) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r9}, 0x2c, {'wfdno', 0x3d, r8}}) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x9, &(0x7f0000000000)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @exit, @map_val={0x18, 0x3, 0x2, 0x0, r1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x3}, @map_fd={0x18, 0x5, 0x1, 0x0, r3}], &(0x7f0000000080)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000, 0x1, '\x00', r4, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000180)={0x0, 0xb, 0x6, 0x6fa4}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000200)=[r6, r7, r9]}, 0x80) (async) 00:12:10 executing program 3: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000800000/0x800000)=nil, &(0x7f0000e1f000/0x2000)=nil, 0x0, 0x0) io_uring_enter(r0, 0x80040b3, 0x10000000, 0x0, &(0x7f0000000000)={[0xf13]}, 0x8) 00:12:10 executing program 4: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000180), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)=0x0) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000800000/0x800000)=nil, &(0x7f0000e1f000/0x2000)=nil, 0x0, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) r3 = socket$inet6_dccp(0xa, 0x6, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000240)=@l2tp6={0xa, 0x0, 0x0, @remote}}, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x22, 0x0, 0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0, 0x80000, 0x1}, 0x80) r4 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r4}}) io_uring_enter(r5, 0x8c, 0x26bf, 0x0, &(0x7f0000000140), 0x8) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[r2], 0x1) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf02]}, 0x8) 00:12:10 executing program 5: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000800000/0x800000)=nil, &(0x7f0000e1f000/0x2000)=nil, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[r1], 0x1) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf0d]}, 0x8) (fail_nth: 35) 00:12:10 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x5, 0x5}}}, 0x90) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000200"}, 0x5, 0x5}}}, 0x90) 00:12:10 executing program 2: r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0xe, 0x4, &(0x7f00000000c0)=@framed={{0x18, 0x2}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x6c}]}, &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = signalfd4(r0, &(0x7f0000000000)={[0x8]}, 0x8, 0x3ebc9e23fedae644) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$MPTCP_PM_CMD_GET_ADDR(r1, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0xa0, r2, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x19}}]}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4000041}, 0x24000800) 00:12:10 executing program 3: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000800000/0x800000)=nil, &(0x7f0000e1f000/0x2000)=nil, 0x0, 0x0) io_uring_enter(r0, 0x80040b3, 0x11000000, 0x0, &(0x7f0000000000)={[0xf13]}, 0x8) [ 730.471260][ T7991] FAULT_INJECTION: forcing a failure. [ 730.471260][ T7991] name failslab, interval 1, probability 0, space 0, times 0 [ 730.473954][ T7991] CPU: 1 PID: 7991 Comm: syz-executor.5 Not tainted 5.15.120-syzkaller #0 [ 730.475704][ T7991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 730.478008][ T7991] Call trace: [ 730.478723][ T7991] dump_backtrace+0x0/0x530 [ 730.479714][ T7991] show_stack+0x2c/0x3c [ 730.480552][ T7991] dump_stack_lvl+0x108/0x170 [ 730.481562][ T7991] dump_stack+0x1c/0x58 [ 730.482454][ T7991] should_fail+0x400/0x5cc [ 730.483364][ T7991] __should_failslab+0xbc/0x110 [ 730.484341][ T7991] should_failslab+0x10/0x28 [ 730.485246][ T7991] slab_pre_alloc_hook+0x64/0xe8 [ 730.486410][ T7991] __kmalloc_node+0xbc/0x5b8 [ 730.487365][ T7991] memcg_alloc_page_obj_cgroups+0x80/0x174 [ 730.488582][ T7991] new_slab+0x120/0x56c [ 730.489400][ T7991] ___slab_alloc+0x6bc/0xdbc [ 730.490340][ T7991] kmem_cache_alloc_bulk+0x1a0/0x4c0 [ 730.491374][ T7991] io_submit_sqes+0x4f00/0x8970 [ 730.492325][ T7991] __arm64_sys_io_uring_enter+0x2a0/0x1cb8 [ 730.493465][ T7991] invoke_syscall+0x98/0x2b8 [ 730.494355][ T7991] el0_svc_common+0x138/0x258 [ 730.495294][ T7991] do_el0_svc+0x58/0x14c [ 730.496108][ T7991] el0_svc+0x7c/0x1f0 [ 730.496967][ T7991] el0t_64_sync_handler+0x84/0xe4 [ 730.498029][ T7991] el0t_64_sync+0x1a0/0x1a4 00:12:10 executing program 2: r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0xe, 0x4, &(0x7f00000000c0)=@framed={{0x18, 0x2}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x6c}]}, &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = signalfd4(r0, &(0x7f0000000000)={[0x8]}, 0x8, 0x3ebc9e23fedae644) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000100)) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$MPTCP_PM_CMD_GET_ADDR(r1, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0xa0, r2, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x19}}]}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4000041}, 0x24000800) 00:12:10 executing program 4: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000180), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)=0x0) (async) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000800000/0x800000)=nil, &(0x7f0000e1f000/0x2000)=nil, 0x0, 0x0) (async) r2 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) (async) r3 = socket$inet6_dccp(0xa, 0x6, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000240)=@l2tp6={0xa, 0x0, 0x0, @remote}}, 0x0) (async, rerun: 64) syz_io_uring_submit(0x0, r1, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x22, 0x0, 0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0, 0x80000, 0x1}, 0x80) (async, rerun: 64) r4 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) (async) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r4}}) (async) io_uring_enter(r5, 0x8c, 0x26bf, 0x0, &(0x7f0000000140), 0x8) (async, rerun: 64) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[r2], 0x1) (rerun: 64) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf02]}, 0x8) 00:12:10 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x5, 0x5}}}, 0x90) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {'\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}, 0x5, 0x5}}}, 0x90) 00:12:10 executing program 1: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[r1], 0x1) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf09]}, 0x8) 00:12:10 executing program 3: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000800000/0x800000)=nil, &(0x7f0000e1f000/0x2000)=nil, 0x0, 0x0) io_uring_enter(r0, 0x80040b3, 0x20000000, 0x0, &(0x7f0000000000)={[0xf13]}, 0x8) 00:12:10 executing program 2: r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0xe, 0x4, &(0x7f00000000c0)=@framed={{0x18, 0x2}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x6c}]}, &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = signalfd4(r0, &(0x7f0000000000)={[0x8]}, 0x8, 0x3ebc9e23fedae644) (async) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$MPTCP_PM_CMD_GET_ADDR(r1, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0xa0, r2, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x19}}]}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4000041}, 0x24000800) 00:12:10 executing program 4: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000180), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)=0x0) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000800000/0x800000)=nil, &(0x7f0000e1f000/0x2000)=nil, 0x0, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) (async) r3 = socket$inet6_dccp(0xa, 0x6, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000240)=@l2tp6={0xa, 0x0, 0x0, @remote}}, 0x0) (async) syz_io_uring_submit(0x0, r1, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x22, 0x0, 0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0, 0x80000, 0x1}, 0x80) (async) r4 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) (async) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r4}}) (async) io_uring_enter(r5, 0x8c, 0x26bf, 0x0, &(0x7f0000000140), 0x8) (async) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[r2], 0x1) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf02]}, 0x8) 00:12:10 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x5, 0x5}}}, 0x90) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000200"}, 0x5, 0x5}}}, 0x90) 00:12:10 executing program 5: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000800000/0x800000)=nil, &(0x7f0000e1f000/0x2000)=nil, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[r1], 0x1) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf0d]}, 0x8) (fail_nth: 36) 00:12:10 executing program 2: syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0xe, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000061106c000000000095000000000000008a9e138f272693fce06431591f0bcecb69156d4b51c37cdc38645fd80c3058698ab82fdb8fc2b39eaf5abb735c5b930c979021b5c6db36f5b6be42d53c5423be82178885e775"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r0 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000940)={0x28, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SCAN_FREQUENCIES={0xc, 0x2c, 0x0, 0x1, [{0x8}]}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x44, r4, 0x2, 0x70bd25, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0x12, 0xcd, [0x6, 0x9, 0x7, 0x88e1, 0x9, 0x2, 0x3ff]}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0xe, 0xcd, [0x5, 0x3, 0x80d, 0x7, 0x101]}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0x1ff]}]}, 0x44}, 0x1, 0x0, 0x0, 0xc000010}, 0x80) r5 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) r6 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r5}}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={r6, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000000c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0], 0x0, 0x8, &(0x7f0000000180)=[{}, {}], 0x10, 0x10, &(0x7f00000001c0), &(0x7f0000000200), 0x8, 0x10, 0x8, 0x8, &(0x7f00000002c0)}}, 0x10) 00:12:10 executing program 4: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) syz_io_uring_setup(0x22f2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000800000/0x800000)=nil, &(0x7f0000e1f000/0x2000)=nil, 0x0, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[r2], 0x1) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf02]}, 0x8) 00:12:10 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x5, 0x5}}}, 0x90) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {'\x00\x00\x00@\x00'}, 0x5, 0x5}}}, 0x90) 00:12:10 executing program 3: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000800000/0x800000)=nil, &(0x7f0000e1f000/0x2000)=nil, 0x0, 0x0) io_uring_enter(r0, 0x80040b3, 0x0, 0x7, &(0x7f0000000000)={[0xf13]}, 0x8) 00:12:10 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x5, 0x5}}}, 0x90) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000100"}, 0x5, 0x5}}}, 0x90) 00:12:10 executing program 2: syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0xe, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000061106c000000000095000000000000008a9e138f272693fce06431591f0bcecb69156d4b51c37cdc38645fd80c3058698ab82fdb8fc2b39eaf5abb735c5b930c979021b5c6db36f5b6be42d53c5423be82178885e775"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r0 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000940)={0x28, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SCAN_FREQUENCIES={0xc, 0x2c, 0x0, 0x1, [{0x8}]}]}, 0x28}}, 0x0) (async) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x44, r4, 0x2, 0x70bd25, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0x12, 0xcd, [0x6, 0x9, 0x7, 0x88e1, 0x9, 0x2, 0x3ff]}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0xe, 0xcd, [0x5, 0x3, 0x80d, 0x7, 0x101]}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0x1ff]}]}, 0x44}, 0x1, 0x0, 0x0, 0xc000010}, 0x80) (async) r5 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) (async) r6 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r5}}) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={r6, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000000c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0], 0x0, 0x8, &(0x7f0000000180)=[{}, {}], 0x10, 0x10, &(0x7f00000001c0), &(0x7f0000000200), 0x8, 0x10, 0x8, 0x8, &(0x7f00000002c0)}}, 0x10) [ 730.891776][ T8031] FAULT_INJECTION: forcing a failure. [ 730.891776][ T8031] name failslab, interval 1, probability 0, space 0, times 0 [ 730.911099][ T8031] CPU: 0 PID: 8031 Comm: syz-executor.5 Not tainted 5.15.120-syzkaller #0 [ 730.912865][ T8031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 730.914859][ T8031] Call trace: [ 730.915477][ T8031] dump_backtrace+0x0/0x530 [ 730.916441][ T8031] show_stack+0x2c/0x3c [ 730.917274][ T8031] dump_stack_lvl+0x108/0x170 [ 730.918188][ T8031] dump_stack+0x1c/0x58 [ 730.919044][ T8031] should_fail+0x400/0x5cc [ 730.919926][ T8031] __should_failslab+0xbc/0x110 [ 730.920938][ T8031] should_failslab+0x10/0x28 [ 730.921902][ T8031] slab_pre_alloc_hook+0x64/0xe8 [ 730.922880][ T8031] __kmalloc_node+0xbc/0x5b8 [ 730.923814][ T8031] memcg_alloc_page_obj_cgroups+0x80/0x174 [ 730.925129][ T8031] new_slab+0x120/0x56c [ 730.925999][ T8031] ___slab_alloc+0x6bc/0xdbc [ 730.926853][ T8031] kmem_cache_alloc_bulk+0x1a0/0x4c0 [ 730.927880][ T8031] io_submit_sqes+0x4f00/0x8970 [ 730.928827][ T8031] __arm64_sys_io_uring_enter+0x2a0/0x1cb8 [ 730.929972][ T8031] invoke_syscall+0x98/0x2b8 [ 730.930927][ T8031] el0_svc_common+0x138/0x258 [ 730.931937][ T8031] do_el0_svc+0x58/0x14c [ 730.932797][ T8031] el0_svc+0x7c/0x1f0 [ 730.933620][ T8031] el0t_64_sync_handler+0x84/0xe4 [ 730.934652][ T8031] el0t_64_sync+0x1a0/0x1a4 00:12:10 executing program 1: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[r1], 0x1) (async) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf09]}, 0x8) 00:12:10 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x5, 0x5}}}, 0x90) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000200"}, 0x5, 0x5}}}, 0x90) 00:12:10 executing program 2: syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0xe, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000061106c000000000095000000000000008a9e138f272693fce06431591f0bcecb69156d4b51c37cdc38645fd80c3058698ab82fdb8fc2b39eaf5abb735c5b930c979021b5c6db36f5b6be42d53c5423be82178885e775"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r0 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000940)={0x28, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SCAN_FREQUENCIES={0xc, 0x2c, 0x0, 0x1, [{0x8}]}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x44, r4, 0x2, 0x70bd25, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0x12, 0xcd, [0x6, 0x9, 0x7, 0x88e1, 0x9, 0x2, 0x3ff]}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0xe, 0xcd, [0x5, 0x3, 0x80d, 0x7, 0x101]}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0x1ff]}]}, 0x44}, 0x1, 0x0, 0x0, 0xc000010}, 0x80) r5 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) r6 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r5}}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={r6, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000000c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0], 0x0, 0x8, &(0x7f0000000180)=[{}, {}], 0x10, 0x10, &(0x7f00000001c0), &(0x7f0000000200), 0x8, 0x10, 0x8, 0x8, &(0x7f00000002c0)}}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0xe, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000061106c000000000095000000000000008a9e138f272693fce06431591f0bcecb69156d4b51c37cdc38645fd80c3058698ab82fdb8fc2b39eaf5abb735c5b930c979021b5c6db36f5b6be42d53c5423be82178885e775"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) socket(0x10, 0x803, 0x0) (async) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000940)={0x28, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SCAN_FREQUENCIES={0xc, 0x2c, 0x0, 0x1, [{0x8}]}]}, 0x28}}, 0x0) (async) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x44, r4, 0x2, 0x70bd25, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0x12, 0xcd, [0x6, 0x9, 0x7, 0x88e1, 0x9, 0x2, 0x3ff]}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0xe, 0xcd, [0x5, 0x3, 0x80d, 0x7, 0x101]}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0x1ff]}]}, 0x44}, 0x1, 0x0, 0x0, 0xc000010}, 0x80) (async) openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) (async) openat$vcs(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) (async) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r5}}) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={r6, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000000c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0], 0x0, 0x8, &(0x7f0000000180)=[{}, {}], 0x10, 0x10, &(0x7f00000001c0), &(0x7f0000000200), 0x8, 0x10, 0x8, 0x8, &(0x7f00000002c0)}}, 0x10) (async) 00:12:10 executing program 3: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000800000/0x800000)=nil, &(0x7f0000e1f000/0x2000)=nil, 0x0, 0x0) io_uring_enter(r0, 0x80040b3, 0x0, 0x8, &(0x7f0000000000)={[0xf13]}, 0x8) 00:12:11 executing program 5: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000800000/0x800000)=nil, &(0x7f0000e1f000/0x2000)=nil, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[r1], 0x1) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf0d]}, 0x8) (fail_nth: 37) 00:12:11 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x5, 0x5}}}, 0x90) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {'\x00\x00\x00\x00\x00@\x00'}, 0x5, 0x5}}}, 0x90) [ 731.136127][ T8063] FAULT_INJECTION: forcing a failure. [ 731.136127][ T8063] name failslab, interval 1, probability 0, space 0, times 0 00:12:11 executing program 2: r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0xe, 0x4, &(0x7f00000000c0)=@framed={{0x18, 0x2}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x6c}]}, &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r0}, './file1\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x970e897c4c323160, 0x3, &(0x7f0000000100)=@raw=[@alu={0x4, 0x0, 0x8, 0x7c0e21e6a61a53db, 0x3, 0xffffffffffffffe0, 0xc421bde284b9226b}, @initr0={0x18, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x1000000}], &(0x7f0000000200)='syzkaller\x00', 0x3, 0x0, 0x0, 0x40f00, 0xa, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f0000000300)={0x7, 0x2}, 0x8, 0x10, &(0x7f0000000340)={0x0, 0xe, 0x7fff, 0x7}, 0x10}, 0x80) r2 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wg1\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={r3, r4, 0x25, 0x11}, 0x10) [ 731.164461][ T8063] CPU: 0 PID: 8063 Comm: syz-executor.5 Not tainted 5.15.120-syzkaller #0 [ 731.166284][ T8063] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 731.168376][ T8063] Call trace: [ 731.168982][ T8063] dump_backtrace+0x0/0x530 [ 731.169983][ T8063] show_stack+0x2c/0x3c [ 731.170864][ T8063] dump_stack_lvl+0x108/0x170 [ 731.171828][ T8063] dump_stack+0x1c/0x58 [ 731.172699][ T8063] should_fail+0x400/0x5cc [ 731.173569][ T8063] __should_failslab+0xbc/0x110 [ 731.174627][ T8063] should_failslab+0x10/0x28 [ 731.175673][ T8063] slab_pre_alloc_hook+0x64/0xe8 [ 731.176735][ T8063] kmem_cache_alloc_bulk+0x50/0x4c0 [ 731.177826][ T8063] io_submit_sqes+0x4f00/0x8970 [ 731.178822][ T8063] __arm64_sys_io_uring_enter+0x2a0/0x1cb8 [ 731.180023][ T8063] invoke_syscall+0x98/0x2b8 [ 731.181001][ T8063] el0_svc_common+0x138/0x258 [ 731.182098][ T8063] do_el0_svc+0x58/0x14c [ 731.183003][ T8063] el0_svc+0x7c/0x1f0 [ 731.183957][ T8063] el0t_64_sync_handler+0x84/0xe4 [ 731.185097][ T8063] el0t_64_sync+0x1a0/0x1a4 00:12:11 executing program 4: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) syz_io_uring_setup(0x22f2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000800000/0x800000)=nil, &(0x7f0000e1f000/0x2000)=nil, 0x0, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[r2], 0x1) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf02]}, 0x8) syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) (async) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) (async) syz_io_uring_setup(0x22f2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000800000/0x800000)=nil, &(0x7f0000e1f000/0x2000)=nil, 0x0, 0x0) (async) syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) (async) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[r2], 0x1) (async) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf02]}, 0x8) (async) 00:12:11 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x5, 0x5}}}, 0x90) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"0000000000000000000100"}, 0x5, 0x5}}}, 0x90) 00:12:11 executing program 3: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000800000/0x800000)=nil, &(0x7f0000e1f000/0x2000)=nil, 0x0, 0x0) io_uring_enter(r0, 0x80040b3, 0x0, 0x10, &(0x7f0000000000)={[0xf13]}, 0x8) 00:12:11 executing program 2: r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0xe, 0x4, &(0x7f00000000c0)=@framed={{0x18, 0x2}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x6c}]}, &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r0}, './file1\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x970e897c4c323160, 0x3, &(0x7f0000000100)=@raw=[@alu={0x4, 0x0, 0x8, 0x7c0e21e6a61a53db, 0x3, 0xffffffffffffffe0, 0xc421bde284b9226b}, @initr0={0x18, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x1000000}], &(0x7f0000000200)='syzkaller\x00', 0x3, 0x0, 0x0, 0x40f00, 0xa, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f0000000300)={0x7, 0x2}, 0x8, 0x10, &(0x7f0000000340)={0x0, 0xe, 0x7fff, 0x7}, 0x10}, 0x80) r2 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wg1\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={r3, r4, 0x25, 0x11}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0xe, 0x4, &(0x7f00000000c0)=@framed={{0x18, 0x2}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x6c}]}, &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r0}, './file1\x00'}) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x970e897c4c323160, 0x3, &(0x7f0000000100)=@raw=[@alu={0x4, 0x0, 0x8, 0x7c0e21e6a61a53db, 0x3, 0xffffffffffffffe0, 0xc421bde284b9226b}, @initr0={0x18, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x1000000}], &(0x7f0000000200)='syzkaller\x00', 0x3, 0x0, 0x0, 0x40f00, 0xa, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f0000000300)={0x7, 0x2}, 0x8, 0x10, &(0x7f0000000340)={0x0, 0xe, 0x7fff, 0x7}, 0x10}, 0x80) (async) openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) (async) openat$vcs(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) (async) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wg1\x00'}) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={r3, r4, 0x25, 0x11}, 0x10) (async) 00:12:11 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x5, 0x5}}}, 0x90) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"0000000000000000000200"}, 0x5, 0x5}}}, 0x90) 00:12:11 executing program 1: r0 = syz_io_uring_setup(0x3b5e, &(0x7f0000000100)={0x0, 0xae00, 0x80, 0x0, 0x390}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000001000/0x2000)=nil, &(0x7f0000000180), &(0x7f0000000040)) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x0) r2 = socket$key(0xf, 0x3, 0x2) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r2, &(0x7f00000000c0)={0x40000000}) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[r1], 0x1) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf09]}, 0x8) 00:12:11 executing program 3: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000800000/0x800000)=nil, &(0x7f0000e1f000/0x2000)=nil, 0x0, 0x0) io_uring_enter(r0, 0x80040b3, 0x0, 0x11, &(0x7f0000000000)={[0xf13]}, 0x8) 00:12:11 executing program 5: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000800000/0x800000)=nil, &(0x7f0000e1f000/0x2000)=nil, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[r1], 0x1) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf0d]}, 0x8) (fail_nth: 38) 00:12:11 executing program 2: r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0xe, 0x4, &(0x7f00000000c0)=@framed={{0x18, 0x2}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x6c}]}, &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r0}, './file1\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x970e897c4c323160, 0x3, &(0x7f0000000100)=@raw=[@alu={0x4, 0x0, 0x8, 0x7c0e21e6a61a53db, 0x3, 0xffffffffffffffe0, 0xc421bde284b9226b}, @initr0={0x18, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x1000000}], &(0x7f0000000200)='syzkaller\x00', 0x3, 0x0, 0x0, 0x40f00, 0xa, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f0000000300)={0x7, 0x2}, 0x8, 0x10, &(0x7f0000000340)={0x0, 0xe, 0x7fff, 0x7}, 0x10}, 0x80) (async, rerun: 32) r2 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) (async, rerun: 32) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wg1\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={r3, r4, 0x25, 0x11}, 0x10) 00:12:11 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x5, 0x5}}}, 0x90) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {'\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}, 0x5, 0x5}}}, 0x90) [ 731.477585][ T8096] FAULT_INJECTION: forcing a failure. [ 731.477585][ T8096] name failslab, interval 1, probability 0, space 0, times 0 [ 731.480271][ T8096] CPU: 0 PID: 8096 Comm: syz-executor.5 Not tainted 5.15.120-syzkaller #0 [ 731.482096][ T8096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 731.484265][ T8096] Call trace: [ 731.484876][ T8096] dump_backtrace+0x0/0x530 [ 731.485775][ T8096] show_stack+0x2c/0x3c [ 731.486649][ T8096] dump_stack_lvl+0x108/0x170 [ 731.487662][ T8096] dump_stack+0x1c/0x58 [ 731.488535][ T8096] should_fail+0x400/0x5cc [ 731.489446][ T8096] __should_failslab+0xbc/0x110 [ 731.490525][ T8096] should_failslab+0x10/0x28 [ 731.491437][ T8096] slab_pre_alloc_hook+0x64/0xe8 [ 731.492480][ T8096] kmem_cache_alloc_bulk+0x50/0x4c0 [ 731.493537][ T8096] io_submit_sqes+0x4f00/0x8970 [ 731.494536][ T8096] __arm64_sys_io_uring_enter+0x2a0/0x1cb8 [ 731.495715][ T8096] invoke_syscall+0x98/0x2b8 [ 731.496707][ T8096] el0_svc_common+0x138/0x258 [ 731.497750][ T8096] do_el0_svc+0x58/0x14c [ 731.498636][ T8096] el0_svc+0x7c/0x1f0 [ 731.499497][ T8096] el0t_64_sync_handler+0x84/0xe4 [ 731.500612][ T8096] el0t_64_sync+0x1a0/0x1a4 00:12:11 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x5, 0x5}}}, 0x90) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"0000000200"}, 0x5, 0x5}}}, 0x90) 00:12:11 executing program 3: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000800000/0x800000)=nil, &(0x7f0000e1f000/0x2000)=nil, 0x0, 0x0) io_uring_enter(r0, 0x80040b3, 0x0, 0x700, &(0x7f0000000000)={[0xf13]}, 0x8) 00:12:11 executing program 4: syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) (async) r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) syz_io_uring_setup(0x22f2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000800000/0x800000)=nil, &(0x7f0000e1f000/0x2000)=nil, 0x0, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[r2], 0x1) (async) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[r2], 0x1) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf02]}, 0x8) 00:12:11 executing program 2: ioctl$NS_GET_USERNS(0xffffffffffffffff, 0xb701, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0xe, 0x7, &(0x7f0000000040)=@raw=[@map_idx_val={0x18, 0x4, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @generic={0xfb, 0x8, 0x9, 0x0, 0x3}, @exit, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:12:11 executing program 1: r0 = syz_io_uring_setup(0x3b5e, &(0x7f0000000100)={0x0, 0xae00, 0x80, 0x0, 0x390}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000001000/0x2000)=nil, &(0x7f0000000180), &(0x7f0000000040)) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x0) (async) r2 = socket$key(0xf, 0x3, 0x2) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r2, &(0x7f00000000c0)={0x40000000}) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[r1], 0x1) (async, rerun: 32) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf09]}, 0x8) (rerun: 32) 00:12:11 executing program 3: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000800000/0x800000)=nil, &(0x7f0000e1f000/0x2000)=nil, 0x0, 0x0) io_uring_enter(r0, 0x80040b3, 0x0, 0x1100, &(0x7f0000000000)={[0xf13]}, 0x8) 00:12:11 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x5, 0x5}}}, 0x90) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {'\x00\x00\x00\x00@\x00'}, 0x5, 0x5}}}, 0x90) 00:12:11 executing program 2: ioctl$NS_GET_USERNS(0xffffffffffffffff, 0xb701, 0x0) (async) ioctl$NS_GET_USERNS(0xffffffffffffffff, 0xb701, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0xe, 0x7, &(0x7f0000000040)=@raw=[@map_idx_val={0x18, 0x4, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @generic={0xfb, 0x8, 0x9, 0x0, 0x3}, @exit, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:12:11 executing program 3: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000800000/0x800000)=nil, &(0x7f0000e1f000/0x2000)=nil, 0x0, 0x0) io_uring_enter(r0, 0x80040b3, 0x0, 0x2000, &(0x7f0000000000)={[0xf13]}, 0x8) 00:12:11 executing program 1: r0 = syz_io_uring_setup(0x3b5e, &(0x7f0000000100)={0x0, 0xae00, 0x80, 0x0, 0x390}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000001000/0x2000)=nil, &(0x7f0000000180), &(0x7f0000000040)) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x0) r2 = socket$key(0xf, 0x3, 0x2) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r2, &(0x7f00000000c0)={0x40000000}) (async) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r2, &(0x7f00000000c0)={0x40000000}) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[r1], 0x1) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf09]}, 0x8) (async) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf09]}, 0x8) 00:12:11 executing program 5: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000800000/0x800000)=nil, &(0x7f0000e1f000/0x2000)=nil, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[r1], 0x1) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf0d]}, 0x8) (fail_nth: 39) 00:12:11 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x5, 0x5}}}, 0x90) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"0000000000000100"}, 0x5, 0x5}}}, 0x90) 00:12:11 executing program 2: ioctl$NS_GET_USERNS(0xffffffffffffffff, 0xb701, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0xe, 0x7, &(0x7f0000000040)=@raw=[@map_idx_val={0x18, 0x4, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @generic={0xfb, 0x8, 0x9, 0x0, 0x3}, @exit, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:12:11 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x5, 0x5}}}, 0x90) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"0000000000000200"}, 0x5, 0x5}}}, 0x90) [ 731.798185][ T8129] FAULT_INJECTION: forcing a failure. [ 731.798185][ T8129] name failslab, interval 1, probability 0, space 0, times 0 [ 731.829233][ T8129] CPU: 0 PID: 8129 Comm: syz-executor.5 Not tainted 5.15.120-syzkaller #0 [ 731.831235][ T8129] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 731.833547][ T8129] Call trace: [ 731.834313][ T8129] dump_backtrace+0x0/0x530 [ 731.835342][ T8129] show_stack+0x2c/0x3c [ 731.836287][ T8129] dump_stack_lvl+0x108/0x170 [ 731.837342][ T8129] dump_stack+0x1c/0x58 [ 731.838222][ T8129] should_fail+0x400/0x5cc [ 731.839176][ T8129] __should_failslab+0xbc/0x110 [ 731.840300][ T8129] should_failslab+0x10/0x28 [ 731.841364][ T8129] slab_pre_alloc_hook+0x64/0xe8 [ 731.842550][ T8129] kmem_cache_alloc_bulk+0x50/0x4c0 [ 731.843727][ T8129] io_submit_sqes+0x4f00/0x8970 [ 731.844846][ T8129] __arm64_sys_io_uring_enter+0x2a0/0x1cb8 [ 731.846078][ T8129] invoke_syscall+0x98/0x2b8 [ 731.847079][ T8129] el0_svc_common+0x138/0x258 [ 731.848022][ T8129] do_el0_svc+0x58/0x14c [ 731.848967][ T8129] el0_svc+0x7c/0x1f0 [ 731.849766][ T8129] el0t_64_sync_handler+0x84/0xe4 [ 731.850826][ T8129] el0t_64_sync+0x1a0/0x1a4 00:12:11 executing program 4: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000180), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000800000/0x800000)=nil, &(0x7f0000e1f000/0x2000)=nil, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[r1], 0x1) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf02]}, 0x8) 00:12:11 executing program 3: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000800000/0x800000)=nil, &(0x7f0000e1f000/0x2000)=nil, 0x0, 0x0) io_uring_enter(r0, 0x80040b3, 0x0, 0x80000, &(0x7f0000000000)={[0xf13]}, 0x8) 00:12:11 executing program 1: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x0) r2 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000000c0)=@urb_type_bulk={0x3, {0x5, 0x1}, 0x7ff, 0xc4, &(0x7f00000001c0)="abdf46bbb287a3ed79e50f78cc40c96fea6eed9277986d43ce312cdb547805316182408ee5b670b9939920998a694657b10bd721d7e4ef08621aa7cc2d116fcbb76a892b95846b952422a9243a67ac26c078b4e13822e8945e9be3b629f4228c6a2c1f78e4390854bd5393768b18164b1ef74a60d2637d6d52d4c0fd76fa0220d5c0e7b929b3ce95f92313a1a7ba8eb1ee176369c00f9b11589da8a53eaf7e6a456c99a285a672d9289f1fda8b75e3a9b1a0554d39e395c10a221eb2d5217a8fcad1ae56134b7763", 0xc8, 0xc7a, 0x2, 0x80000000, 0x800, 0x3ff, &(0x7f00000002c0)="25d0d881676e5af8d271d8caf188d4531af31a99c3de23f33be2dcc56ac8c405cc464b529ba70cd8ed9a3b3a2a723af59d93164dfaf2b67f864320120572f6ed97ae2423058303e2834a45f74a77fd99cac52a7b46ec7314151fe98d5d36b4910093b2dfe87a36460af5c62edd91ba956d4562caff6af1b69f9193ffa8c994bcfe35478f626cdcb9640ad79f8a5e207f7cc3689f"}) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000180)=[r1, r1, 0xffffffffffffffff, r1], 0x4) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf09]}, 0x8) 00:12:11 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0xe, 0x4, &(0x7f00000000c0)=@framed={{0x18, 0x2}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x6c}]}, &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r0 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000050423eeffffffffffff02000000", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) bind$packet(r3, &(0x7f0000000100)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, {{0x8}, {0x8}}}}}]}, 0x40}}, 0x0) r8 = syz_open_dev$mouse(&(0x7f0000000180), 0x1ff, 0x4841c0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x200}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @cb_func={0x18, 0x6, 0x4, 0x0, 0xfffffffffffffffc}, @initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x24}, @map_fd={0x18, 0x4, 0x1, 0x0, r1}, @map_fd={0x18, 0x4, 0x1, 0x0, 0x1}]}, &(0x7f0000000080)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000, 0xa, '\x00', r7, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000140)={0x0, 0xb, 0x20, 0x8}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[r8]}, 0x80) 00:12:11 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x5, 0x5}}}, 0x90) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {'\x00\x00\x00\x00\x00\x00@\x00'}, 0x5, 0x5}}}, 0x90) [ 731.942136][ T8139] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 00:12:11 executing program 3: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000800000/0x800000)=nil, &(0x7f0000e1f000/0x2000)=nil, 0x0, 0x0) io_uring_enter(r0, 0x80040b3, 0x0, 0x1000000, &(0x7f0000000000)={[0xf13]}, 0x8) 00:12:11 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x5, 0x5}}}, 0x90) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"000000000000000000000100"}, 0x5, 0x5}}}, 0x90) 00:12:11 executing program 5: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000800000/0x800000)=nil, &(0x7f0000e1f000/0x2000)=nil, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[r1], 0x1) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf0d]}, 0x8) (fail_nth: 40) 00:12:11 executing program 4: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000180), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000800000/0x800000)=nil, &(0x7f0000e1f000/0x2000)=nil, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[r1], 0x1) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf02]}, 0x8) syz_io_uring_setup(0x5ad, &(0x7f0000000180), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) (async) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000800000/0x800000)=nil, &(0x7f0000e1f000/0x2000)=nil, 0x0, 0x0) (async) syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) (async) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[r1], 0x1) (async) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf02]}, 0x8) (async) [ 732.016542][ T8148] FAULT_INJECTION: forcing a failure. [ 732.016542][ T8148] name failslab, interval 1, probability 0, space 0, times 0 [ 732.036850][ T8148] CPU: 1 PID: 8148 Comm: syz-executor.5 Not tainted 5.15.120-syzkaller #0 [ 732.038641][ T8148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 732.040788][ T8148] Call trace: [ 732.041540][ T8148] dump_backtrace+0x0/0x530 [ 732.042493][ T8148] show_stack+0x2c/0x3c [ 732.043420][ T8148] dump_stack_lvl+0x108/0x170 [ 732.044421][ T8148] dump_stack+0x1c/0x58 [ 732.045284][ T8148] should_fail+0x400/0x5cc [ 732.046259][ T8148] __should_failslab+0xbc/0x110 [ 732.047264][ T8148] should_failslab+0x10/0x28 [ 732.048220][ T8148] slab_pre_alloc_hook+0x64/0xe8 [ 732.049167][ T8148] __kmalloc_node+0xbc/0x5b8 [ 732.050072][ T8148] memcg_alloc_page_obj_cgroups+0x80/0x174 [ 732.051295][ T8148] new_slab+0x120/0x56c [ 732.052180][ T8148] ___slab_alloc+0x6bc/0xdbc [ 732.053186][ T8148] kmem_cache_alloc_bulk+0x1a0/0x4c0 [ 732.054171][ T8148] io_submit_sqes+0x4f00/0x8970 [ 732.055129][ T8148] __arm64_sys_io_uring_enter+0x2a0/0x1cb8 [ 732.056414][ T8148] invoke_syscall+0x98/0x2b8 [ 732.057392][ T8148] el0_svc_common+0x138/0x258 [ 732.058414][ T8148] do_el0_svc+0x58/0x14c [ 732.059298][ T8148] el0_svc+0x7c/0x1f0 [ 732.060138][ T8148] el0t_64_sync_handler+0x84/0xe4 [ 732.061126][ T8148] el0t_64_sync+0x1a0/0x1a4 00:12:12 executing program 3: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000800000/0x800000)=nil, &(0x7f0000e1f000/0x2000)=nil, 0x0, 0x0) io_uring_enter(r0, 0x80040b3, 0x0, 0x7000000, &(0x7f0000000000)={[0xf13]}, 0x8) 00:12:12 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x5, 0x5}}}, 0x90) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"000000000000000000000200"}, 0x5, 0x5}}}, 0x90) 00:12:12 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0xe, 0x4, &(0x7f00000000c0)=@framed={{0x18, 0x2}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x6c}]}, &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r0 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000050423eeffffffffffff02000000", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) bind$packet(r3, &(0x7f0000000100)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, {{0x8}, {0x8}}}}}]}, 0x40}}, 0x0) r8 = syz_open_dev$mouse(&(0x7f0000000180), 0x1ff, 0x4841c0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x200}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @cb_func={0x18, 0x6, 0x4, 0x0, 0xfffffffffffffffc}, @initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x24}, @map_fd={0x18, 0x4, 0x1, 0x0, r1}, @map_fd={0x18, 0x4, 0x1, 0x0, 0x1}]}, &(0x7f0000000080)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000, 0xa, '\x00', r7, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000140)={0x0, 0xb, 0x20, 0x8}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[r8]}, 0x80) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0xe, 0x4, &(0x7f00000000c0)=@framed={{0x18, 0x2}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x6c}]}, &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) (async) openat$vcs(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) (async) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$packet(0x11, 0x3, 0x300) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x10, 0x803, 0x0) (async) sendmsg$BATADV_CMD_GET_MESH(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) (async) getsockname$packet(r5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000050423eeffffffffffff02000000", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) (async) bind$packet(r3, &(0x7f0000000100)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) (async) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) (async) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, {{0x8}, {0x8}}}}}]}, 0x40}}, 0x0) (async) syz_open_dev$mouse(&(0x7f0000000180), 0x1ff, 0x4841c0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x200}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @cb_func={0x18, 0x6, 0x4, 0x0, 0xfffffffffffffffc}, @initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x24}, @map_fd={0x18, 0x4, 0x1, 0x0, r1}, @map_fd={0x18, 0x4, 0x1, 0x0, 0x1}]}, &(0x7f0000000080)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000, 0xa, '\x00', r7, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000140)={0x0, 0xb, 0x20, 0x8}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[r8]}, 0x80) (async) 00:12:12 executing program 4: syz_io_uring_setup(0x5ad, &(0x7f0000000180), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) (async) r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000180), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000800000/0x800000)=nil, &(0x7f0000e1f000/0x2000)=nil, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[r1], 0x1) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf02]}, 0x8) 00:12:12 executing program 3: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000800000/0x800000)=nil, &(0x7f0000e1f000/0x2000)=nil, 0x0, 0x0) io_uring_enter(r0, 0x80040b3, 0x0, 0x8000000, &(0x7f0000000000)={[0xf13]}, 0x8) [ 732.154228][ T8163] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 00:12:12 executing program 1: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) (async) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x0) r2 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) (async) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000000c0)=@urb_type_bulk={0x3, {0x5, 0x1}, 0x7ff, 0xc4, &(0x7f00000001c0)="abdf46bbb287a3ed79e50f78cc40c96fea6eed9277986d43ce312cdb547805316182408ee5b670b9939920998a694657b10bd721d7e4ef08621aa7cc2d116fcbb76a892b95846b952422a9243a67ac26c078b4e13822e8945e9be3b629f4228c6a2c1f78e4390854bd5393768b18164b1ef74a60d2637d6d52d4c0fd76fa0220d5c0e7b929b3ce95f92313a1a7ba8eb1ee176369c00f9b11589da8a53eaf7e6a456c99a285a672d9289f1fda8b75e3a9b1a0554d39e395c10a221eb2d5217a8fcad1ae56134b7763", 0xc8, 0xc7a, 0x2, 0x80000000, 0x800, 0x3ff, &(0x7f00000002c0)="25d0d881676e5af8d271d8caf188d4531af31a99c3de23f33be2dcc56ac8c405cc464b529ba70cd8ed9a3b3a2a723af59d93164dfaf2b67f864320120572f6ed97ae2423058303e2834a45f74a77fd99cac52a7b46ec7314151fe98d5d36b4910093b2dfe87a36460af5c62edd91ba956d4562caff6af1b69f9193ffa8c994bcfe35478f626cdcb9640ad79f8a5e207f7cc3689f"}) (async) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000180)=[r1, r1, 0xffffffffffffffff, r1], 0x4) (async) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf09]}, 0x8) 00:12:12 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x5, 0x5}}}, 0x90) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}, 0x5, 0x5}}}, 0x90) 00:12:12 executing program 3: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000800000/0x800000)=nil, &(0x7f0000e1f000/0x2000)=nil, 0x0, 0x0) io_uring_enter(r0, 0x80040b3, 0x0, 0x10000000, &(0x7f0000000000)={[0xf13]}, 0x8) 00:12:12 executing program 4: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100)={0x0, 0x0, 0x8, 0x800000, 0xfffffffd}, &(0x7f0000000000/0x4000)=nil, &(0x7f00008d5000/0x2000)=nil, &(0x7f00000000c0), &(0x7f00000003c0)) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x100}, &(0x7f0000e1e000/0x4000)=nil, &(0x7f0000e1f000/0x2000)=nil, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[r1], 0x1) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf02]}, 0x8) 00:12:12 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x5, 0x5}}}, 0x90) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"000000000200"}, 0x5, 0x5}}}, 0x90) 00:12:12 executing program 5: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000800000/0x800000)=nil, &(0x7f0000e1f000/0x2000)=nil, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[r1], 0x1) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf0d]}, 0x8) (fail_nth: 41) 00:12:12 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0xe, 0x4, &(0x7f00000000c0)=@framed={{0x18, 0x2}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x6c}]}, &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r0 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000050423eeffffffffffff02000000", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) bind$packet(r3, &(0x7f0000000100)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, {{0x8}, {0x8}}}}}]}, 0x40}}, 0x0) r8 = syz_open_dev$mouse(&(0x7f0000000180), 0x1ff, 0x4841c0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x200}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @cb_func={0x18, 0x6, 0x4, 0x0, 0xfffffffffffffffc}, @initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x24}, @map_fd={0x18, 0x4, 0x1, 0x0, r1}, @map_fd={0x18, 0x4, 0x1, 0x0, 0x1}]}, &(0x7f0000000080)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000, 0xa, '\x00', r7, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000140)={0x0, 0xb, 0x20, 0x8}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[r8]}, 0x80) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0xe, 0x4, &(0x7f00000000c0)=@framed={{0x18, 0x2}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x6c}]}, &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) (async) openat$vcs(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) (async) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$packet(0x11, 0x3, 0x300) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x10, 0x803, 0x0) (async) sendmsg$BATADV_CMD_GET_MESH(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) (async) getsockname$packet(r5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000050423eeffffffffffff02000000", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) (async) bind$packet(r3, &(0x7f0000000100)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) (async) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) (async) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, {{0x8}, {0x8}}}}}]}, 0x40}}, 0x0) (async) syz_open_dev$mouse(&(0x7f0000000180), 0x1ff, 0x4841c0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x200}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @cb_func={0x18, 0x6, 0x4, 0x0, 0xfffffffffffffffc}, @initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x24}, @map_fd={0x18, 0x4, 0x1, 0x0, r1}, @map_fd={0x18, 0x4, 0x1, 0x0, 0x1}]}, &(0x7f0000000080)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000, 0xa, '\x00', r7, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000140)={0x0, 0xb, 0x20, 0x8}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[r8]}, 0x80) (async) 00:12:12 executing program 3: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000800000/0x800000)=nil, &(0x7f0000e1f000/0x2000)=nil, 0x0, 0x0) io_uring_enter(r0, 0x80040b3, 0x0, 0x11000000, &(0x7f0000000000)={[0xf13]}, 0x8) 00:12:12 executing program 4: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100)={0x0, 0x0, 0x8, 0x800000, 0xfffffffd}, &(0x7f0000000000/0x4000)=nil, &(0x7f00008d5000/0x2000)=nil, &(0x7f00000000c0), &(0x7f00000003c0)) (async) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x100}, &(0x7f0000e1e000/0x4000)=nil, &(0x7f0000e1f000/0x2000)=nil, 0x0, 0x0) (async) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[r1], 0x1) (async) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf02]}, 0x8) [ 732.386327][ T8199] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 00:12:12 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x5, 0x5}}}, 0x90) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {'\x00\x00\x00\x00\x00@\x00'}, 0x5, 0x5}}}, 0x90) 00:12:12 executing program 1: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x0) (async) r2 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) (async) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000000c0)=@urb_type_bulk={0x3, {0x5, 0x1}, 0x7ff, 0xc4, &(0x7f00000001c0)="abdf46bbb287a3ed79e50f78cc40c96fea6eed9277986d43ce312cdb547805316182408ee5b670b9939920998a694657b10bd721d7e4ef08621aa7cc2d116fcbb76a892b95846b952422a9243a67ac26c078b4e13822e8945e9be3b629f4228c6a2c1f78e4390854bd5393768b18164b1ef74a60d2637d6d52d4c0fd76fa0220d5c0e7b929b3ce95f92313a1a7ba8eb1ee176369c00f9b11589da8a53eaf7e6a456c99a285a672d9289f1fda8b75e3a9b1a0554d39e395c10a221eb2d5217a8fcad1ae56134b7763", 0xc8, 0xc7a, 0x2, 0x80000000, 0x800, 0x3ff, &(0x7f00000002c0)="25d0d881676e5af8d271d8caf188d4531af31a99c3de23f33be2dcc56ac8c405cc464b529ba70cd8ed9a3b3a2a723af59d93164dfaf2b67f864320120572f6ed97ae2423058303e2834a45f74a77fd99cac52a7b46ec7314151fe98d5d36b4910093b2dfe87a36460af5c62edd91ba956d4562caff6af1b69f9193ffa8c994bcfe35478f626cdcb9640ad79f8a5e207f7cc3689f"}) (async) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000180)=[r1, r1, 0xffffffffffffffff, r1], 0x4) (async) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf09]}, 0x8) 00:12:12 executing program 3: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000800000/0x800000)=nil, &(0x7f0000e1f000/0x2000)=nil, 0x0, 0x0) io_uring_enter(r0, 0x80040b3, 0x0, 0x20000000, &(0x7f0000000000)={[0xf13]}, 0x8) [ 732.451921][ T8205] FAULT_INJECTION: forcing a failure. [ 732.451921][ T8205] name failslab, interval 1, probability 0, space 0, times 0 [ 732.468016][ T8205] CPU: 0 PID: 8205 Comm: syz-executor.5 Not tainted 5.15.120-syzkaller #0 [ 732.469849][ T8205] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 732.472079][ T8205] Call trace: [ 732.472766][ T8205] dump_backtrace+0x0/0x530 [ 732.473693][ T8205] show_stack+0x2c/0x3c [ 732.474486][ T8205] dump_stack_lvl+0x108/0x170 [ 732.475574][ T8205] dump_stack+0x1c/0x58 [ 732.476456][ T8205] should_fail+0x400/0x5cc [ 732.477419][ T8205] __should_failslab+0xbc/0x110 [ 732.478585][ T8205] should_failslab+0x10/0x28 [ 732.479612][ T8205] slab_pre_alloc_hook+0x64/0xe8 [ 732.480642][ T8205] kmem_cache_alloc_bulk+0x50/0x4c0 [ 732.481772][ T8205] io_submit_sqes+0x4f00/0x8970 [ 732.482761][ T8205] __arm64_sys_io_uring_enter+0x2a0/0x1cb8 [ 732.483899][ T8205] invoke_syscall+0x98/0x2b8 [ 732.484815][ T8205] el0_svc_common+0x138/0x258 [ 732.485751][ T8205] do_el0_svc+0x58/0x14c [ 732.486644][ T8205] el0_svc+0x7c/0x1f0 [ 732.487521][ T8205] el0t_64_sync_handler+0x84/0xe4 [ 732.488547][ T8205] el0t_64_sync+0x1a0/0x1a4 00:12:12 executing program 4: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100)={0x0, 0x0, 0x8, 0x800000, 0xfffffffd}, &(0x7f0000000000/0x4000)=nil, &(0x7f00008d5000/0x2000)=nil, &(0x7f00000000c0), &(0x7f00000003c0)) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x100}, &(0x7f0000e1e000/0x4000)=nil, &(0x7f0000e1f000/0x2000)=nil, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[r1], 0x1) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf02]}, 0x8) (async) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf02]}, 0x8) 00:12:12 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x5, 0x5}}}, 0x90) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"000000000000000100"}, 0x5, 0x5}}}, 0x90) 00:12:12 executing program 3: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000800000/0x800000)=nil, &(0x7f0000e1f000/0x2000)=nil, 0x0, 0x0) io_uring_enter(r0, 0x80040b3, 0x0, 0x8000000000000, &(0x7f0000000000)={[0xf13]}, 0x8) 00:12:12 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0xe, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="1802000000000000000000000000000061106c00000000009500000000000000eef6039d4cfd3ac3e64b626a5537d7dd82396a47f5d1700a8c5b7740694cb810e5ecbe2ef9985b6ce33709fe534e6044d04663d5f95eba22b979211b0c92fb329c3ca57160c1dea6888e8f0c6386ecc6b32e06"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1b, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x29, 0x20, 0x0, 0x20cf, 0x39, @private1={0xfc, 0x1, '\x00', 0x1}, @private2, 0x8, 0x7, 0x19, 0xb4}}) 00:12:12 executing program 4: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r2, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {}, 0x5, 0x5}}}, 0x90) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="2d66eb2d8d7cdf8bcadf6c5df133c18ea4974b00a41fc8a095a1c67d1c9f456a377533c619420668db20dcd71320ea7559eb3de0fe5ce37b72ad5b73b2c8c989aa5cb4304fa37897de9dea92e21f096ca5d724d993a166af7b09ff5f3edf5a7874bce95713b1ff4c0b8516206af2d7dd2654759f4b39ae9ff537c4e3747855443a9a9a7e5681f4d1c641c7e3eda63e7c574c24647539aaa2c00f7a8720082eb04c47c700e8095339d171e1a734d091cbcbd2ef811bff02", 0xb7}], 0x1) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000800000/0x800000)=nil, &(0x7f0000e1f000/0x2000)=nil, 0x0, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[r3], 0x1) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf02]}, 0x8) 00:12:12 executing program 5: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000800000/0x800000)=nil, &(0x7f0000e1f000/0x2000)=nil, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[r1], 0x1) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf0d]}, 0x8) (fail_nth: 42) 00:12:12 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0xe, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="1802000000000000000000000000000061106c00000000009500000000000000eef6039d4cfd3ac3e64b626a5537d7dd82396a47f5d1700a8c5b7740694cb810e5ecbe2ef9985b6ce33709fe534e6044d04663d5f95eba22b979211b0c92fb329c3ca57160c1dea6888e8f0c6386ecc6b32e06"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1b, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x29, 0x20, 0x0, 0x20cf, 0x39, @private1={0xfc, 0x1, '\x00', 0x1}, @private2, 0x8, 0x7, 0x19, 0xb4}}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0xe, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="1802000000000000000000000000000061106c00000000009500000000000000eef6039d4cfd3ac3e64b626a5537d7dd82396a47f5d1700a8c5b7740694cb810e5ecbe2ef9985b6ce33709fe534e6044d04663d5f95eba22b979211b0c92fb329c3ca57160c1dea6888e8f0c6386ecc6b32e06"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1b, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x29, 0x20, 0x0, 0x20cf, 0x39, @private1={0xfc, 0x1, '\x00', 0x1}, @private2, 0x8, 0x7, 0x19, 0xb4}}) (async) 00:12:12 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x5, 0x5}}}, 0x90) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"000000000000000200"}, 0x5, 0x5}}}, 0x90) 00:12:12 executing program 3: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000800000/0x800000)=nil, &(0x7f0000e1f000/0x2000)=nil, 0x0, 0x0) io_uring_enter(r0, 0x80040b3, 0x0, 0x100000000000000, &(0x7f0000000000)={[0xf13]}, 0x8) 00:12:12 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x5, 0x5}}}, 0x90) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {'\x00\x00\x00\x00\x00\x00\x00@\x00'}, 0x5, 0x5}}}, 0x90) [ 732.771598][ T8250] FAULT_INJECTION: forcing a failure. [ 732.771598][ T8250] name failslab, interval 1, probability 0, space 0, times 0 [ 732.788967][ T8250] CPU: 0 PID: 8250 Comm: syz-executor.5 Not tainted 5.15.120-syzkaller #0 [ 732.790704][ T8250] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 732.792731][ T8250] Call trace: [ 732.793374][ T8250] dump_backtrace+0x0/0x530 [ 732.794336][ T8250] show_stack+0x2c/0x3c [ 732.795201][ T8250] dump_stack_lvl+0x108/0x170 [ 732.796361][ T8250] dump_stack+0x1c/0x58 [ 732.797193][ T8250] should_fail+0x400/0x5cc [ 732.798160][ T8250] __should_failslab+0xbc/0x110 [ 732.799170][ T8250] should_failslab+0x10/0x28 [ 732.800245][ T8250] slab_pre_alloc_hook+0x64/0xe8 [ 732.801333][ T8250] __kmalloc_node+0xbc/0x5b8 [ 732.802312][ T8250] memcg_alloc_page_obj_cgroups+0x80/0x174 [ 732.803654][ T8250] new_slab+0x120/0x56c [ 732.804567][ T8250] ___slab_alloc+0x6bc/0xdbc [ 732.805566][ T8250] kmem_cache_alloc_bulk+0x1a0/0x4c0 [ 732.806682][ T8250] io_submit_sqes+0x4f00/0x8970 [ 732.807739][ T8250] __arm64_sys_io_uring_enter+0x2a0/0x1cb8 [ 732.808959][ T8250] invoke_syscall+0x98/0x2b8 [ 732.809837][ T8250] el0_svc_common+0x138/0x258 [ 732.810856][ T8250] do_el0_svc+0x58/0x14c [ 732.811755][ T8250] el0_svc+0x7c/0x1f0 [ 732.812579][ T8250] el0t_64_sync_handler+0x84/0xe4 [ 732.813690][ T8250] el0t_64_sync+0x1a0/0x1a4 00:12:12 executing program 1: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[r1], 0x1) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf09]}, 0x8) r2 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB="2c7752526e6f3d0ce1b870ab7c1a4264f98286be17300000000000", @ANYRESHEX=r2, @ANYBLOB=',\x00']) sendmsg$NL80211_CMD_GET_COALESCE(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x14, 0x0, 0x1, 0x70bd26, 0x25dfdbfd, {{}, {@void, @void, @void}}, ["", "", ""]}, 0x14}}, 0x80) io_uring_enter(r3, 0x330, 0x7287, 0xa, &(0x7f00000000c0)={[0x5]}, 0x8) 00:12:12 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0xe, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="1802000000000000000000000000000061106c00000000009500000000000000eef6039d4cfd3ac3e64b626a5537d7dd82396a47f5d1700a8c5b7740694cb810e5ecbe2ef9985b6ce33709fe534e6044d04663d5f95eba22b979211b0c92fb329c3ca57160c1dea6888e8f0c6386ecc6b32e06"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1b, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x29, 0x20, 0x0, 0x20cf, 0x39, @private1={0xfc, 0x1, '\x00', 0x1}, @private2, 0x8, 0x7, 0x19, 0xb4}}) 00:12:12 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x5, 0x5}}}, 0x90) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000100"}, 0x5, 0x5}}}, 0x90) 00:12:12 executing program 3: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000800000/0x800000)=nil, &(0x7f0000e1f000/0x2000)=nil, 0x0, 0x0) io_uring_enter(r0, 0x80040b3, 0x0, 0x700000000000000, &(0x7f0000000000)={[0xf13]}, 0x8) 00:12:12 executing program 4: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r2, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {}, 0x5, 0x5}}}, 0x90) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="2d66eb2d8d7cdf8bcadf6c5df133c18ea4974b00a41fc8a095a1c67d1c9f456a377533c619420668db20dcd71320ea7559eb3de0fe5ce37b72ad5b73b2c8c989aa5cb4304fa37897de9dea92e21f096ca5d724d993a166af7b09ff5f3edf5a7874bce95713b1ff4c0b8516206af2d7dd2654759f4b39ae9ff537c4e3747855443a9a9a7e5681f4d1c641c7e3eda63e7c574c24647539aaa2c00f7a8720082eb04c47c700e8095339d171e1a734d091cbcbd2ef811bff02", 0xb7}], 0x1) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000800000/0x800000)=nil, &(0x7f0000e1f000/0x2000)=nil, 0x0, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[r3], 0x1) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf02]}, 0x8) syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x111}}, 0x20) (async) write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r2, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {}, 0x5, 0x5}}}, 0x90) (async) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="2d66eb2d8d7cdf8bcadf6c5df133c18ea4974b00a41fc8a095a1c67d1c9f456a377533c619420668db20dcd71320ea7559eb3de0fe5ce37b72ad5b73b2c8c989aa5cb4304fa37897de9dea92e21f096ca5d724d993a166af7b09ff5f3edf5a7874bce95713b1ff4c0b8516206af2d7dd2654759f4b39ae9ff537c4e3747855443a9a9a7e5681f4d1c641c7e3eda63e7c574c24647539aaa2c00f7a8720082eb04c47c700e8095339d171e1a734d091cbcbd2ef811bff02", 0xb7}], 0x1) (async) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000800000/0x800000)=nil, &(0x7f0000e1f000/0x2000)=nil, 0x0, 0x0) (async) syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) (async) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[r3], 0x1) (async) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf02]}, 0x8) (async) 00:12:12 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0xe, 0x4, &(0x7f00000000c0)=@framed={{0x18, 0x2}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x6c}]}, &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r0 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000200)={r1, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0], &(0x7f0000000080), 0x0, 0x8, &(0x7f0000000100)=[{}, {}], 0x10, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) 00:12:12 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x5, 0x5}}}, 0x90) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000200"}, 0x5, 0x5}}}, 0x90) 00:12:12 executing program 5: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000800000/0x800000)=nil, &(0x7f0000e1f000/0x2000)=nil, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[r1], 0x1) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf0d]}, 0x8) (fail_nth: 43) [ 733.046538][ T8276] FAULT_INJECTION: forcing a failure. [ 733.046538][ T8276] name failslab, interval 1, probability 0, space 0, times 0 00:12:13 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x5, 0x5}}}, 0x90) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}, 0x5, 0x5}}}, 0x90) 00:12:13 executing program 3: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000800000/0x800000)=nil, &(0x7f0000e1f000/0x2000)=nil, 0x0, 0x0) io_uring_enter(r0, 0x80040b3, 0x0, 0x800000000000000, &(0x7f0000000000)={[0xf13]}, 0x8) [ 733.066396][ T8276] CPU: 0 PID: 8276 Comm: syz-executor.5 Not tainted 5.15.120-syzkaller #0 [ 733.068282][ T8276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 733.070487][ T8276] Call trace: [ 733.071198][ T8276] dump_backtrace+0x0/0x530 [ 733.072129][ T8276] show_stack+0x2c/0x3c [ 733.073081][ T8276] dump_stack_lvl+0x108/0x170 [ 733.074125][ T8276] dump_stack+0x1c/0x58 00:12:13 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0xe, 0x4, &(0x7f00000000c0)=@framed={{0x18, 0x2}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x6c}]}, &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r0 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000200)={r1, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0], &(0x7f0000000080), 0x0, 0x8, &(0x7f0000000100)=[{}, {}], 0x10, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0xe, 0x4, &(0x7f00000000c0)=@framed={{0x18, 0x2}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x6c}]}, &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) (async) openat$vcs(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) (async) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000200)={r1, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0], &(0x7f0000000080), 0x0, 0x8, &(0x7f0000000100)=[{}, {}], 0x10, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) (async) [ 733.075088][ T8276] should_fail+0x400/0x5cc [ 733.076109][ T8276] __should_failslab+0xbc/0x110 [ 733.077253][ T8276] should_failslab+0x10/0x28 [ 733.078158][ T8276] slab_pre_alloc_hook+0x64/0xe8 [ 733.079239][ T8276] kmem_cache_alloc_bulk+0x50/0x4c0 [ 733.080248][ T8276] io_submit_sqes+0x4f00/0x8970 [ 733.081344][ T8276] __arm64_sys_io_uring_enter+0x2a0/0x1cb8 [ 733.082608][ T8276] invoke_syscall+0x98/0x2b8 [ 733.083619][ T8276] el0_svc_common+0x138/0x258 [ 733.084530][ T8276] do_el0_svc+0x58/0x14c [ 733.085467][ T8276] el0_svc+0x7c/0x1f0 [ 733.086365][ T8276] el0t_64_sync_handler+0x84/0xe4 [ 733.087472][ T8276] el0t_64_sync+0x1a0/0x1a4 00:12:13 executing program 4: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r2, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {}, 0x5, 0x5}}}, 0x90) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="2d66eb2d8d7cdf8bcadf6c5df133c18ea4974b00a41fc8a095a1c67d1c9f456a377533c619420668db20dcd71320ea7559eb3de0fe5ce37b72ad5b73b2c8c989aa5cb4304fa37897de9dea92e21f096ca5d724d993a166af7b09ff5f3edf5a7874bce95713b1ff4c0b8516206af2d7dd2654759f4b39ae9ff537c4e3747855443a9a9a7e5681f4d1c641c7e3eda63e7c574c24647539aaa2c00f7a8720082eb04c47c700e8095339d171e1a734d091cbcbd2ef811bff02", 0xb7}], 0x1) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000800000/0x800000)=nil, &(0x7f0000e1f000/0x2000)=nil, 0x0, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[r3], 0x1) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf02]}, 0x8) syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x111}}, 0x20) (async) write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r2, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {}, 0x5, 0x5}}}, 0x90) (async) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="2d66eb2d8d7cdf8bcadf6c5df133c18ea4974b00a41fc8a095a1c67d1c9f456a377533c619420668db20dcd71320ea7559eb3de0fe5ce37b72ad5b73b2c8c989aa5cb4304fa37897de9dea92e21f096ca5d724d993a166af7b09ff5f3edf5a7874bce95713b1ff4c0b8516206af2d7dd2654759f4b39ae9ff537c4e3747855443a9a9a7e5681f4d1c641c7e3eda63e7c574c24647539aaa2c00f7a8720082eb04c47c700e8095339d171e1a734d091cbcbd2ef811bff02", 0xb7}], 0x1) (async) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000800000/0x800000)=nil, &(0x7f0000e1f000/0x2000)=nil, 0x0, 0x0) (async) syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) (async) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[r3], 0x1) (async) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf02]}, 0x8) (async) 00:12:13 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x5, 0x5}}}, 0x90) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000200"}, 0x5, 0x5}}}, 0x90) 00:12:13 executing program 1: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) (async) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[r1], 0x1) (async) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf09]}, 0x8) r2 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) (async) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB="2c7752526e6f3d0ce1b870ab7c1a4264f98286be17300000000000", @ANYRESHEX=r2, @ANYBLOB=',\x00']) (async) sendmsg$NL80211_CMD_GET_COALESCE(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x14, 0x0, 0x1, 0x70bd26, 0x25dfdbfd, {{}, {@void, @void, @void}}, ["", "", ""]}, 0x14}}, 0x80) (async) io_uring_enter(r3, 0x330, 0x7287, 0xa, &(0x7f00000000c0)={[0x5]}, 0x8) 00:12:13 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0xe, 0x4, &(0x7f00000000c0)=@framed={{0x18, 0x2}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x6c}]}, &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) (async) r0 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000200)={r1, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0], &(0x7f0000000080), 0x0, 0x8, &(0x7f0000000100)=[{}, {}], 0x10, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) 00:12:13 executing program 3: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000800000/0x800000)=nil, &(0x7f0000e1f000/0x2000)=nil, 0x0, 0x0) io_uring_enter(r0, 0x80040b3, 0x0, 0x1000000000000000, &(0x7f0000000000)={[0xf13]}, 0x8) 00:12:13 executing program 5: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000800000/0x800000)=nil, &(0x7f0000e1f000/0x2000)=nil, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[r1], 0x1) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf0d]}, 0x8) (fail_nth: 44) 00:12:13 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x5, 0x5}}}, 0x90) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {'\x00\x00\x00\x00\x00\x00@\x00'}, 0x5, 0x5}}}, 0x90) 00:12:13 executing program 2: r0 = accept4$netrom(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x800) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) r1 = fcntl$dupfd(r0, 0x0, r0) sendto$netrom(r1, &(0x7f0000000100)="16d1bd321bc95cca51b72e205fff0bc9811f9fe322b5e5e0f8aa2338a50878172ef4463a6b06520ba6a31289e5f95019f3d31b1f9e6258162f7790b32e7fd60be3d43c4e21c90e9d377ee2354b374a2af703124a8841eac4", 0x58, 0x1, &(0x7f0000000180)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x6}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x101400, 0x0) sendto$netrom(r2, &(0x7f00000002c0)="b2a84efe7f2e5b1eb225ffcca96b34bf8d86d9db3f33eb99e8b78ac3b766d2d45bd2d5a757eba3b055d2d3155ebcf1b66ac216258e10a72629519eb167503ac67aa4076fa626f92a772f775564020947fb6a689a75f5329a2dab9702bc8864f0f5d984168ee30016ce1ce7ce35ee19fedf406fcac48c3c4a9596b62d0271e7b8f27a4e07b0bf627b2a75c753ad13703f52ce2b3da2dcaeaf31f98186681e6ac684f34242529db71767d0f1d1e665c425741e0eb21d27fef3f32f1e", 0xbb, 0x44, &(0x7f0000000380)={{0x3, @default, 0x7}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @null, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0xe, 0x4, &(0x7f00000000c0)=@framed={{0x18, 0x2}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x6c}]}, &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 733.375193][ T8314] FAULT_INJECTION: forcing a failure. [ 733.375193][ T8314] name failslab, interval 1, probability 0, space 0, times 0 [ 733.395123][ T8314] CPU: 0 PID: 8314 Comm: syz-executor.5 Not tainted 5.15.120-syzkaller #0 [ 733.396958][ T8314] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 733.399012][ T8314] Call trace: [ 733.399686][ T8314] dump_backtrace+0x0/0x530 [ 733.400569][ T8314] show_stack+0x2c/0x3c [ 733.401505][ T8314] dump_stack_lvl+0x108/0x170 [ 733.402439][ T8314] dump_stack+0x1c/0x58 [ 733.403301][ T8314] should_fail+0x400/0x5cc [ 733.404294][ T8314] __should_failslab+0xbc/0x110 [ 733.405263][ T8314] should_failslab+0x10/0x28 [ 733.406262][ T8314] slab_pre_alloc_hook+0x64/0xe8 [ 733.407252][ T8314] kmem_cache_alloc_bulk+0x50/0x4c0 [ 733.408355][ T8314] io_submit_sqes+0x4f00/0x8970 [ 733.409340][ T8314] __arm64_sys_io_uring_enter+0x2a0/0x1cb8 [ 733.410687][ T8314] invoke_syscall+0x98/0x2b8 [ 733.411648][ T8314] el0_svc_common+0x138/0x258 [ 733.412614][ T8314] do_el0_svc+0x58/0x14c [ 733.413524][ T8314] el0_svc+0x7c/0x1f0 00:12:13 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x5, 0x5}}}, 0x90) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000100"}, 0x5, 0x5}}}, 0x90) [ 733.414330][ T8314] el0t_64_sync_handler+0x84/0xe4 [ 733.415368][ T8314] el0t_64_sync+0x1a0/0x1a4 00:12:13 executing program 1: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) (async) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[r1], 0x1) (async) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf09]}, 0x8) r2 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) (async) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB="2c7752526e6f3d0ce1b870ab7c1a4264f98286be17300000000000", @ANYRESHEX=r2, @ANYBLOB=',\x00']) sendmsg$NL80211_CMD_GET_COALESCE(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x14, 0x0, 0x1, 0x70bd26, 0x25dfdbfd, {{}, {@void, @void, @void}}, ["", "", ""]}, 0x14}}, 0x80) io_uring_enter(r3, 0x330, 0x7287, 0xa, &(0x7f00000000c0)={[0x5]}, 0x8) 00:12:13 executing program 2: r0 = accept4$netrom(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x800) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) fcntl$dupfd(r0, 0x0, r0) (async) r1 = fcntl$dupfd(r0, 0x0, r0) sendto$netrom(r1, &(0x7f0000000100)="16d1bd321bc95cca51b72e205fff0bc9811f9fe322b5e5e0f8aa2338a50878172ef4463a6b06520ba6a31289e5f95019f3d31b1f9e6258162f7790b32e7fd60be3d43c4e21c90e9d377ee2354b374a2af703124a8841eac4", 0x58, 0x1, &(0x7f0000000180)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x6}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x101400, 0x0) sendto$netrom(r2, &(0x7f00000002c0)="b2a84efe7f2e5b1eb225ffcca96b34bf8d86d9db3f33eb99e8b78ac3b766d2d45bd2d5a757eba3b055d2d3155ebcf1b66ac216258e10a72629519eb167503ac67aa4076fa626f92a772f775564020947fb6a689a75f5329a2dab9702bc8864f0f5d984168ee30016ce1ce7ce35ee19fedf406fcac48c3c4a9596b62d0271e7b8f27a4e07b0bf627b2a75c753ad13703f52ce2b3da2dcaeaf31f98186681e6ac684f34242529db71767d0f1d1e665c425741e0eb21d27fef3f32f1e", 0xbb, 0x44, &(0x7f0000000380)={{0x3, @default, 0x7}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @null, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0xe, 0x4, &(0x7f00000000c0)=@framed={{0x18, 0x2}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x6c}]}, &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:12:13 executing program 3: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000800000/0x800000)=nil, &(0x7f0000e1f000/0x2000)=nil, 0x0, 0x0) io_uring_enter(r0, 0x80040b3, 0x0, 0x1100000000000000, &(0x7f0000000000)={[0xf13]}, 0x8) 00:12:13 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x5, 0x5}}}, 0x90) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {'\x00\x00\x00\x00\x00\x00@\x00'}, 0x5, 0x5}}}, 0x90) 00:12:13 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x5, 0x5}}}, 0x90) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000200"}, 0x5, 0x5}}}, 0x90) 00:12:13 executing program 1: r0 = syz_io_uring_setup(0x56e0, &(0x7f0000000100), &(0x7f0000000000/0x1000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000540)) r2 = mmap$IORING_OFF_SQES(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x17, 0x2010, r0, 0x10000000) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r3, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r4, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {}, 0x5, 0x5}}}, 0x90) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0xf110f2e85d47d142, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r5}}, 0x7) r6 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, &(0x7f0000000400)={0x4, 0x1, "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"}) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000380)=[r0, r6, r3, 0xffffffffffffffff, r3], 0x5) r7 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) r8 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="7472616e733d5f642c7251fabe513d", @ANYRESHEX=r8, @ANYBLOB=',wfdno=', @ANYRESHEX=r7, @ANYBLOB=',\x00']) io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r8, 0x12, 0x0, 0x0) ioctl$USBDEVFS_SUBMITURB(r6, 0x8038550a, &(0x7f00000000c0)=@urb_type_interrupt={0x1, {0x5, 0x1}, 0xfffff000, 0xc0, &(0x7f0000000180)="30d5bdf57e30752fec5828e1b0841c5f5fc6c9faebf2838963a0904502538fb99baa908bd8d6cd99f2cc5591344cf7ef4e421245b818409083a39acb5ddd1f4b8d3ef7e3d93671600e1c8c19d1f9c56a8f019cd611eef1fa1e9ca417e81d131d4e5be578c615ce2e9e9c4aac9d0c4f390fb9", 0x72, 0x5, 0x9, 0x0, 0x2, 0x1, &(0x7f0000000280)="9d503043fb03586bb7d33ff4ce919f8fdb696bfd6f1d663a87ae26c727dfc7726f0af2f9f3a94b726cac7fbb1c50418c60793227391f2f481bd0d78ccc3da1cfd58960bc559ca5a2a76bbca8dd25afe3b42d606888b631ed8999ed5d1c7505ac5e5e608d5eca7b56e94f60fec1d0afc6eebd164a62d15b87fba6dbdf27af1591f3a115df82a8922659a0356b679236b68f4c4cf159b3eee6608f262ebd840744dd94a4c89e6497307cc9dc4108cb808de748fb782ae44d6a1356eddd2c5b5207f64e520eb044382402dd9c6dd53c5da24668a8e8ed"}) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf09]}, 0x8) 00:12:13 executing program 2: r0 = accept4$netrom(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x800) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) (async) r1 = fcntl$dupfd(r0, 0x0, r0) sendto$netrom(r1, &(0x7f0000000100)="16d1bd321bc95cca51b72e205fff0bc9811f9fe322b5e5e0f8aa2338a50878172ef4463a6b06520ba6a31289e5f95019f3d31b1f9e6258162f7790b32e7fd60be3d43c4e21c90e9d377ee2354b374a2af703124a8841eac4", 0x58, 0x1, &(0x7f0000000180)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x6}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x101400, 0x0) sendto$netrom(r2, &(0x7f00000002c0)="b2a84efe7f2e5b1eb225ffcca96b34bf8d86d9db3f33eb99e8b78ac3b766d2d45bd2d5a757eba3b055d2d3155ebcf1b66ac216258e10a72629519eb167503ac67aa4076fa626f92a772f775564020947fb6a689a75f5329a2dab9702bc8864f0f5d984168ee30016ce1ce7ce35ee19fedf406fcac48c3c4a9596b62d0271e7b8f27a4e07b0bf627b2a75c753ad13703f52ce2b3da2dcaeaf31f98186681e6ac684f34242529db71767d0f1d1e665c425741e0eb21d27fef3f32f1e", 0xbb, 0x44, &(0x7f0000000380)={{0x3, @default, 0x7}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @null, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0xe, 0x4, &(0x7f00000000c0)=@framed={{0x18, 0x2}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x6c}]}, &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:12:13 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x5, 0x5}}}, 0x90) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {'\x00\x00\x00\x00\x00@\x00'}, 0x5, 0x5}}}, 0x90) 00:12:13 executing program 5: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000800000/0x800000)=nil, &(0x7f0000e1f000/0x2000)=nil, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[r1], 0x1) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf0d]}, 0x8) (fail_nth: 45) 00:12:13 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x5, 0x5}}}, 0x90) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {'\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}, 0x5, 0x5}}}, 0x90) 00:12:13 executing program 2: socketpair(0x26, 0x800, 0x1, &(0x7f0000000000)={0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000940)={0x28, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SCAN_FREQUENCIES={0xc, 0x2c, 0x0, 0x1, [{0x8}]}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x68, r4, 0x1, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x9}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x51}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x14}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x23}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x17}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7b}]}, 0x68}, 0x1, 0x0, 0x0, 0x40880}, 0x10000000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0xe, 0x4, &(0x7f00000000c0)=@framed={{0x18, 0x2}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x6c}]}, &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:12:13 executing program 3: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000800000/0x800000)=nil, &(0x7f0000e1f000/0x2000)=nil, 0x0, 0x0) io_uring_enter(r0, 0x80040b3, 0x0, 0x2000000000000000, &(0x7f0000000000)={[0xf13]}, 0x8) 00:12:13 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x5, 0x5}}}, 0x90) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"0000000000000000000000000100"}, 0x5, 0x5}}}, 0x90) 00:12:13 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x5, 0x5}}}, 0x90) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"000000000000000000000100"}, 0x5, 0x5}}}, 0x90) 00:12:13 executing program 1: syz_io_uring_setup(0x56e0, &(0x7f0000000100), &(0x7f0000000000/0x1000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000540)) (async) r0 = syz_io_uring_setup(0x56e0, &(0x7f0000000100), &(0x7f0000000000/0x1000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000540)) mmap$IORING_OFF_SQES(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x17, 0x2010, r0, 0x10000000) (async) r2 = mmap$IORING_OFF_SQES(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x17, 0x2010, r0, 0x10000000) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r3, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r4, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {}, 0x5, 0x5}}}, 0x90) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0xf110f2e85d47d142, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r5}}, 0x7) r6 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, &(0x7f0000000400)={0x4, 0x1, "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"}) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000380)=[r0, r6, r3, 0xffffffffffffffff, r3], 0x5) (async) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000380)=[r0, r6, r3, 0xffffffffffffffff, r3], 0x5) r7 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) r8 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="7472616e733d5f642c7251fabe513d", @ANYRESHEX=r8, @ANYBLOB=',wfdno=', @ANYRESHEX=r7, @ANYBLOB=',\x00']) (async) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="7472616e733d5f642c7251fabe513d", @ANYRESHEX=r8, @ANYBLOB=',wfdno=', @ANYRESHEX=r7, @ANYBLOB=',\x00']) io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r8, 0x12, 0x0, 0x0) (async) io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r8, 0x12, 0x0, 0x0) ioctl$USBDEVFS_SUBMITURB(r6, 0x8038550a, &(0x7f00000000c0)=@urb_type_interrupt={0x1, {0x5, 0x1}, 0xfffff000, 0xc0, &(0x7f0000000180)="30d5bdf57e30752fec5828e1b0841c5f5fc6c9faebf2838963a0904502538fb99baa908bd8d6cd99f2cc5591344cf7ef4e421245b818409083a39acb5ddd1f4b8d3ef7e3d93671600e1c8c19d1f9c56a8f019cd611eef1fa1e9ca417e81d131d4e5be578c615ce2e9e9c4aac9d0c4f390fb9", 0x72, 0x5, 0x9, 0x0, 0x2, 0x1, &(0x7f0000000280)="9d503043fb03586bb7d33ff4ce919f8fdb696bfd6f1d663a87ae26c727dfc7726f0af2f9f3a94b726cac7fbb1c50418c60793227391f2f481bd0d78ccc3da1cfd58960bc559ca5a2a76bbca8dd25afe3b42d606888b631ed8999ed5d1c7505ac5e5e608d5eca7b56e94f60fec1d0afc6eebd164a62d15b87fba6dbdf27af1591f3a115df82a8922659a0356b679236b68f4c4cf159b3eee6608f262ebd840744dd94a4c89e6497307cc9dc4108cb808de748fb782ae44d6a1356eddd2c5b5207f64e520eb044382402dd9c6dd53c5da24668a8e8ed"}) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf09]}, 0x8) [ 733.729334][ T8347] FAULT_INJECTION: forcing a failure. [ 733.729334][ T8347] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 733.750202][ T8347] CPU: 1 PID: 8347 Comm: syz-executor.5 Not tainted 5.15.120-syzkaller #0 [ 733.751980][ T8347] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 733.754096][ T8347] Call trace: [ 733.754783][ T8347] dump_backtrace+0x0/0x530 [ 733.755769][ T8347] show_stack+0x2c/0x3c [ 733.756554][ T8347] dump_stack_lvl+0x108/0x170 [ 733.757530][ T8347] dump_stack+0x1c/0x58 [ 733.758378][ T8347] should_fail+0x400/0x5cc [ 733.759250][ T8347] should_fail_alloc_page+0x74/0xa8 [ 733.760325][ T8347] prepare_alloc_pages+0x160/0x4cc [ 733.761376][ T8347] __alloc_pages+0x138/0x674 [ 733.762276][ T8347] alloc_pages+0x390/0x634 [ 733.763244][ T8347] new_slab+0xec/0x56c [ 733.764115][ T8347] ___slab_alloc+0x6bc/0xdbc [ 733.764979][ T8347] kmem_cache_alloc_bulk+0x1a0/0x4c0 [ 733.766071][ T8347] io_submit_sqes+0x4f00/0x8970 [ 733.767149][ T8347] __arm64_sys_io_uring_enter+0x2a0/0x1cb8 [ 733.768362][ T8347] invoke_syscall+0x98/0x2b8 [ 733.769388][ T8347] el0_svc_common+0x138/0x258 [ 733.770352][ T8347] do_el0_svc+0x58/0x14c 00:12:13 executing program 2: socketpair(0x26, 0x800, 0x1, &(0x7f0000000000)={0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000940)={0x28, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SCAN_FREQUENCIES={0xc, 0x2c, 0x0, 0x1, [{0x8}]}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x68, r4, 0x1, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x9}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x51}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x14}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x23}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x17}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7b}]}, 0x68}, 0x1, 0x0, 0x0, 0x40880}, 0x10000000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0xe, 0x4, &(0x7f00000000c0)=@framed={{0x18, 0x2}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x6c}]}, &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) socketpair(0x26, 0x800, 0x1, &(0x7f0000000000)) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000940)={0x28, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SCAN_FREQUENCIES={0xc, 0x2c, 0x0, 0x1, [{0x8}]}]}, 0x28}}, 0x0) (async) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x68, r4, 0x1, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x9}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x51}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x14}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x23}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x17}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7b}]}, 0x68}, 0x1, 0x0, 0x0, 0x40880}, 0x10000000) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0xe, 0x4, &(0x7f00000000c0)=@framed={{0x18, 0x2}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x6c}]}, &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) [ 733.771209][ T8347] el0_svc+0x7c/0x1f0 [ 733.772052][ T8347] el0t_64_sync_handler+0x84/0xe4 [ 733.773344][ T8347] el0t_64_sync+0x1a0/0x1a4 00:12:13 executing program 4: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000800000/0x800000)=nil, &(0x7f0000e1f000/0x2000)=nil, 0x0, 0x0) io_uring_enter(r0, 0x80040b3, 0x7000000, 0x0, &(0x7f0000000000)={[0xf13]}, 0x8) 00:12:13 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x5, 0x5}}}, 0x90) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"0000000000000000000000000200"}, 0x5, 0x5}}}, 0x90) 00:12:13 executing program 1: r0 = syz_io_uring_setup(0x56e0, &(0x7f0000000100), &(0x7f0000000000/0x1000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000540)) r2 = mmap$IORING_OFF_SQES(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x17, 0x2010, r0, 0x10000000) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) (async) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r3, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r4, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {}, 0x5, 0x5}}}, 0x90) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) (async) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0xf110f2e85d47d142, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r5}}, 0x7) r6 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, &(0x7f0000000400)={0x4, 0x1, "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"}) (async) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, &(0x7f0000000400)={0x4, 0x1, "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"}) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000380)=[r0, r6, r3, 0xffffffffffffffff, r3], 0x5) (async) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000380)=[r0, r6, r3, 0xffffffffffffffff, r3], 0x5) r7 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) r8 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="7472616e733d5f642c7251fabe513d", @ANYRESHEX=r8, @ANYBLOB=',wfdno=', @ANYRESHEX=r7, @ANYBLOB=',\x00']) io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r8, 0x12, 0x0, 0x0) ioctl$USBDEVFS_SUBMITURB(r6, 0x8038550a, &(0x7f00000000c0)=@urb_type_interrupt={0x1, {0x5, 0x1}, 0xfffff000, 0xc0, &(0x7f0000000180)="30d5bdf57e30752fec5828e1b0841c5f5fc6c9faebf2838963a0904502538fb99baa908bd8d6cd99f2cc5591344cf7ef4e421245b818409083a39acb5ddd1f4b8d3ef7e3d93671600e1c8c19d1f9c56a8f019cd611eef1fa1e9ca417e81d131d4e5be578c615ce2e9e9c4aac9d0c4f390fb9", 0x72, 0x5, 0x9, 0x0, 0x2, 0x1, &(0x7f0000000280)="9d503043fb03586bb7d33ff4ce919f8fdb696bfd6f1d663a87ae26c727dfc7726f0af2f9f3a94b726cac7fbb1c50418c60793227391f2f481bd0d78ccc3da1cfd58960bc559ca5a2a76bbca8dd25afe3b42d606888b631ed8999ed5d1c7505ac5e5e608d5eca7b56e94f60fec1d0afc6eebd164a62d15b87fba6dbdf27af1591f3a115df82a8922659a0356b679236b68f4c4cf159b3eee6608f262ebd840744dd94a4c89e6497307cc9dc4108cb808de748fb782ae44d6a1356eddd2c5b5207f64e520eb044382402dd9c6dd53c5da24668a8e8ed"}) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf09]}, 0x8) (async) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf09]}, 0x8) 00:12:13 executing program 3: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000800000/0x800000)=nil, &(0x7f0000e1f000/0x2000)=nil, 0x0, 0x0) io_uring_enter(r0, 0x80040b3, 0x0, 0xffffffff00000000, &(0x7f0000000000)={[0xf13]}, 0x8) 00:12:13 executing program 5: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000800000/0x800000)=nil, &(0x7f0000e1f000/0x2000)=nil, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[r1], 0x1) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf0d]}, 0x8) (fail_nth: 46) 00:12:13 executing program 2: socketpair(0x26, 0x800, 0x1, &(0x7f0000000000)={0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000940)={0x28, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SCAN_FREQUENCIES={0xc, 0x2c, 0x0, 0x1, [{0x8}]}]}, 0x28}}, 0x0) (async) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x68, r4, 0x1, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x9}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x51}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x14}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x23}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x17}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7b}]}, 0x68}, 0x1, 0x0, 0x0, 0x40880}, 0x10000000) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0xe, 0x4, &(0x7f00000000c0)=@framed={{0x18, 0x2}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x6c}]}, &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:12:13 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x5, 0x5}}}, 0x90) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}, 0x5, 0x5}}}, 0x90) 00:12:13 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x5, 0x5}}}, 0x90) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"0000000000000200"}, 0x5, 0x5}}}, 0x90) [ 734.014281][ T8381] FAULT_INJECTION: forcing a failure. [ 734.014281][ T8381] name failslab, interval 1, probability 0, space 0, times 0 00:12:14 executing program 3: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000800000/0x800000)=nil, &(0x7f0000e1f000/0x2000)=nil, 0x0, 0x0) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf02]}, 0x8) 00:12:14 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f00000002c0)={0xd0, r1, 0x4, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x7, 0x4d}}}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "2a60b2d3e483c42e08cf659fa469bd1d311dcd332ce4d874"}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "b9aa2a48725c3e51531f3823ee51604a7e81d15d561de0ac"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "beb710f8afdcc1bd127135766606d6b12ec3712f8dfc4506"}], @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'veth0_to_bridge\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x1}]}, 0xd0}, 0x1, 0x0, 0x0, 0x20000050}, 0x1) r3 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r3}}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0xe, 0x4, &(0x7f00000000c0)=@framed={{0x18, 0x2}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x6c}]}, &(0x7f0000000400)='syzkaller\x00', 0x0, 0xfffffffffffffe1f, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r4, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:12:14 executing program 1: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100)={0x0, 0x0, 0x40, 0x0, 0x32c}, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x0) syz_io_uring_setup(0x376d, &(0x7f00000001c0)={0x0, 0xd7bf, 0x200, 0x0, 0x64, 0x0, r0}, &(0x7f0000001000/0x1000)=nil, &(0x7f0000002000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0)=0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000380)=@IORING_OP_OPENAT2={0x1c, 0x8, 0x0, 0xffffffffffffffff, &(0x7f0000000300)={0x340, 0x40, 0x19}, &(0x7f0000000340)='./file0\x00', 0x18, 0x0, 0x12345}, 0x2) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[r1], 0x1) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf09]}, 0x8) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000002100000018fdff00", @ANYRES32=0xffffffffffffffff, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) io_uring_enter(r3, 0x2d73, 0xc4cf, 0x0, &(0x7f0000000180)={[0x1]}, 0x8) [ 734.050268][ T8381] CPU: 1 PID: 8381 Comm: syz-executor.5 Not tainted 5.15.120-syzkaller #0 [ 734.052033][ T8381] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 734.054102][ T8381] Call trace: [ 734.054767][ T8381] dump_backtrace+0x0/0x530 [ 734.055735][ T8381] show_stack+0x2c/0x3c [ 734.056621][ T8381] dump_stack_lvl+0x108/0x170 [ 734.057627][ T8381] dump_stack+0x1c/0x58 [ 734.058564][ T8381] should_fail+0x400/0x5cc [ 734.059544][ T8381] __should_failslab+0xbc/0x110 [ 734.060582][ T8381] should_failslab+0x10/0x28 [ 734.061492][ T8381] slab_pre_alloc_hook+0x64/0xe8 [ 734.062498][ T8381] __kmalloc_node+0xbc/0x5b8 [ 734.063551][ T8381] memcg_alloc_page_obj_cgroups+0x80/0x174 [ 734.064664][ T8381] new_slab+0x120/0x56c [ 734.065514][ T8381] ___slab_alloc+0x6bc/0xdbc [ 734.066407][ T8381] kmem_cache_alloc_bulk+0x1a0/0x4c0 [ 734.067507][ T8381] io_submit_sqes+0x4f00/0x8970 [ 734.068530][ T8381] __arm64_sys_io_uring_enter+0x2a0/0x1cb8 [ 734.069712][ T8381] invoke_syscall+0x98/0x2b8 [ 734.070682][ T8381] el0_svc_common+0x138/0x258 [ 734.071577][ T8381] do_el0_svc+0x58/0x14c [ 734.072475][ T8381] el0_svc+0x7c/0x1f0 [ 734.073301][ T8381] el0t_64_sync_handler+0x84/0xe4 [ 734.074361][ T8381] el0t_64_sync+0x1a0/0x1a4 00:12:14 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x5, 0x5}}}, 0x90) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {'\x00\x00\x00\x00\x00\x00\x00@\x00'}, 0x5, 0x5}}}, 0x90) 00:12:14 executing program 4: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000800000/0x800000)=nil, &(0x7f0000e1f000/0x2000)=nil, 0x0, 0x0) io_uring_enter(r0, 0x80040b3, 0x2000, 0x0, &(0x7f0000000000)={[0xf13]}, 0x8) 00:12:14 executing program 1: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100)={0x0, 0x0, 0x40, 0x0, 0x32c}, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x0) (async) syz_io_uring_setup(0x376d, &(0x7f00000001c0)={0x0, 0xd7bf, 0x200, 0x0, 0x64, 0x0, r0}, &(0x7f0000001000/0x1000)=nil, &(0x7f0000002000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0)=0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000380)=@IORING_OP_OPENAT2={0x1c, 0x8, 0x0, 0xffffffffffffffff, &(0x7f0000000300)={0x340, 0x40, 0x19}, &(0x7f0000000340)='./file0\x00', 0x18, 0x0, 0x12345}, 0x2) (async) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[r1], 0x1) (async) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf09]}, 0x8) (async) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000002100000018fdff00", @ANYRES32=0xffffffffffffffff, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) (async) io_uring_enter(r3, 0x2d73, 0xc4cf, 0x0, &(0x7f0000000180)={[0x1]}, 0x8) 00:12:14 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f00000002c0)={0xd0, r1, 0x4, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x7, 0x4d}}}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "2a60b2d3e483c42e08cf659fa469bd1d311dcd332ce4d874"}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "b9aa2a48725c3e51531f3823ee51604a7e81d15d561de0ac"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "beb710f8afdcc1bd127135766606d6b12ec3712f8dfc4506"}], @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'veth0_to_bridge\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x1}]}, 0xd0}, 0x1, 0x0, 0x0, 0x20000050}, 0x1) (async) r3 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r3}}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0xe, 0x4, &(0x7f00000000c0)=@framed={{0x18, 0x2}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x6c}]}, &(0x7f0000000400)='syzkaller\x00', 0x0, 0xfffffffffffffe1f, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r4, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:12:14 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x5, 0x5}}}, 0x90) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"0000000000000000000100"}, 0x5, 0x5}}}, 0x90) 00:12:14 executing program 5: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000800000/0x800000)=nil, &(0x7f0000e1f000/0x2000)=nil, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[r1], 0x1) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf0d]}, 0x8) (fail_nth: 47) 00:12:14 executing program 3: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000800000/0x800000)=nil, &(0x7f0000e1f000/0x2000)=nil, 0x0, 0x0) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf03]}, 0x8) 00:12:14 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x5, 0x5}}}, 0x90) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @ib={0xa, 0x0, 0x0, {}, 0x5, 0x5}}}, 0x90) 00:12:14 executing program 1: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100)={0x0, 0x0, 0x40, 0x0, 0x32c}, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x0) (async) syz_io_uring_setup(0x376d, &(0x7f00000001c0)={0x0, 0xd7bf, 0x200, 0x0, 0x64, 0x0, r0}, &(0x7f0000001000/0x1000)=nil, &(0x7f0000002000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0)=0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000380)=@IORING_OP_OPENAT2={0x1c, 0x8, 0x0, 0xffffffffffffffff, &(0x7f0000000300)={0x340, 0x40, 0x19}, &(0x7f0000000340)='./file0\x00', 0x18, 0x0, 0x12345}, 0x2) (async) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[r1], 0x1) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf09]}, 0x8) (async) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000002100000018fdff00", @ANYRES32=0xffffffffffffffff, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) (async) io_uring_enter(r3, 0x2d73, 0xc4cf, 0x0, &(0x7f0000000180)={[0x1]}, 0x8) 00:12:14 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) (async) getsockname$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f00000002c0)={0xd0, r1, 0x4, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x7, 0x4d}}}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "2a60b2d3e483c42e08cf659fa469bd1d311dcd332ce4d874"}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "b9aa2a48725c3e51531f3823ee51604a7e81d15d561de0ac"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "beb710f8afdcc1bd127135766606d6b12ec3712f8dfc4506"}], @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'veth0_to_bridge\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x1}]}, 0xd0}, 0x1, 0x0, 0x0, 0x20000050}, 0x1) (async) r3 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r3}}) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0xe, 0x4, &(0x7f00000000c0)=@framed={{0x18, 0x2}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x6c}]}, &(0x7f0000000400)='syzkaller\x00', 0x0, 0xfffffffffffffe1f, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r4, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:12:14 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x5, 0x5}}}, 0x90) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"0000000000000000000200"}, 0x5, 0x5}}}, 0x90) 00:12:14 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0xe, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020002a58b3d02c45e69d897f3550000f279b5e46911e7d7d3bb2ffdd17d0600000000346478f2f130ac6cea3edc797b71744c7d5b34afdb"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r0 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000380)={0x1, 0x3, 0x2, 0x20}) r2 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) write$khugepaged_scan(r2, &(0x7f00000002c0), 0x8) sendmsg$nl_route(r1, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="180000005600200028bd7000fcdbdf2507000000", @ANYRES32=0x0, @ANYBLOB="cf7f750c78ec843ba474c8f1207bc90e19f14135b4fdaf682dd8d3532e924a548859507a098234d93e7ebe5bfb27ba31"], 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x4044844) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={r1, &(0x7f0000000000)="7c4852e850619881a0cb00f38d0427ccef6ec87c1fbf3c207659565cced8", &(0x7f0000000100)=""/157}, 0x20) 00:12:14 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x5, 0x5}}}, 0x90) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {'\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}, 0x5, 0x5}}}, 0x90) 00:12:14 executing program 1: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[r1], 0x1) io_uring_enter(r0, 0x7d32, 0x71c2, 0x5, &(0x7f00000000c0)={[0x80000000]}, 0x8) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf09]}, 0x8) [ 734.413565][ T8422] FAULT_INJECTION: forcing a failure. [ 734.413565][ T8422] name failslab, interval 1, probability 0, space 0, times 0 [ 734.416259][ T8422] CPU: 1 PID: 8422 Comm: syz-executor.5 Not tainted 5.15.120-syzkaller #0 [ 734.418034][ T8422] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 734.420254][ T8422] Call trace: [ 734.420933][ T8422] dump_backtrace+0x0/0x530 [ 734.421903][ T8422] show_stack+0x2c/0x3c [ 734.422686][ T8422] dump_stack_lvl+0x108/0x170 [ 734.423639][ T8422] dump_stack+0x1c/0x58 [ 734.424509][ T8422] should_fail+0x400/0x5cc [ 734.425426][ T8422] __should_failslab+0xbc/0x110 [ 734.426455][ T8422] should_failslab+0x10/0x28 [ 734.427418][ T8422] slab_pre_alloc_hook+0x64/0xe8 [ 734.428541][ T8422] __kmalloc_node+0xbc/0x5b8 [ 734.429534][ T8422] memcg_alloc_page_obj_cgroups+0x80/0x174 [ 734.430826][ T8422] new_slab+0x120/0x56c [ 734.431644][ T8422] ___slab_alloc+0x6bc/0xdbc [ 734.432649][ T8422] kmem_cache_alloc_bulk+0x1a0/0x4c0 [ 734.433810][ T8422] io_submit_sqes+0x4f00/0x8970 [ 734.434771][ T8422] __arm64_sys_io_uring_enter+0x2a0/0x1cb8 [ 734.435961][ T8422] invoke_syscall+0x98/0x2b8 [ 734.436884][ T8422] el0_svc_common+0x138/0x258 [ 734.437875][ T8422] do_el0_svc+0x58/0x14c [ 734.438842][ T8422] el0_svc+0x7c/0x1f0 [ 734.439598][ T8422] el0t_64_sync_handler+0x84/0xe4 [ 734.440545][ T8422] el0t_64_sync+0x1a0/0x1a4 00:12:14 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x5, 0x5}}}, 0x90) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"000000000000000000000000000100"}, 0x5, 0x5}}}, 0x90) 00:12:14 executing program 4: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) (fail_nth: 1) [ 734.485966][ T8430] FAULT_INJECTION: forcing a failure. [ 734.485966][ T8430] name failslab, interval 1, probability 0, space 0, times 0 [ 734.498891][ T8430] CPU: 0 PID: 8430 Comm: syz-executor.4 Not tainted 5.15.120-syzkaller #0 [ 734.500647][ T8430] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 734.502800][ T8430] Call trace: [ 734.503489][ T8430] dump_backtrace+0x0/0x530 [ 734.504470][ T8430] show_stack+0x2c/0x3c [ 734.505400][ T8430] dump_stack_lvl+0x108/0x170 [ 734.506362][ T8430] dump_stack+0x1c/0x58 [ 734.507323][ T8430] should_fail+0x400/0x5cc [ 734.508239][ T8430] __should_failslab+0xbc/0x110 [ 734.509243][ T8430] should_failslab+0x10/0x28 [ 734.510179][ T8430] slab_pre_alloc_hook+0x64/0xe8 [ 734.511108][ T8430] kmem_cache_alloc+0x98/0x45c [ 734.512015][ T8430] getname_flags+0xd0/0x480 [ 734.513009][ T8430] getname+0x28/0x38 [ 734.513814][ T8430] do_sys_openat2+0xd4/0x3d8 [ 734.514790][ T8430] __arm64_sys_openat+0x1f0/0x240 [ 734.515902][ T8430] invoke_syscall+0x98/0x2b8 [ 734.516930][ T8430] el0_svc_common+0x138/0x258 [ 734.517856][ T8430] do_el0_svc+0x58/0x14c [ 734.518724][ T8430] el0_svc+0x7c/0x1f0 [ 734.519599][ T8430] el0t_64_sync_handler+0x84/0xe4 [ 734.520618][ T8430] el0t_64_sync+0x1a0/0x1a4 00:12:14 executing program 3: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000800000/0x800000)=nil, &(0x7f0000e1f000/0x2000)=nil, 0x0, 0x0) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf04]}, 0x8) 00:12:14 executing program 5: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000800000/0x800000)=nil, &(0x7f0000e1f000/0x2000)=nil, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[r1], 0x1) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf0d]}, 0x8) (fail_nth: 48) 00:12:14 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0xe, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020002a58b3d02c45e69d897f3550000f279b5e46911e7d7d3bb2ffdd17d0600000000346478f2f130ac6cea3edc797b71744c7d5b34afdb"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r0 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000380)={0x1, 0x3, 0x2, 0x20}) (async) fcntl$lock(r0, 0x26, &(0x7f0000000380)={0x1, 0x3, 0x2, 0x20}) openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) (async) r2 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) write$khugepaged_scan(r2, &(0x7f00000002c0), 0x8) sendmsg$nl_route(r1, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="180000005600200028bd7000fcdbdf2507000000", @ANYRES32=0x0, @ANYBLOB="cf7f750c78ec843ba474c8f1207bc90e19f14135b4fdaf682dd8d3532e924a548859507a098234d93e7ebe5bfb27ba31"], 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x4044844) (async) sendmsg$nl_route(r1, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="180000005600200028bd7000fcdbdf2507000000", @ANYRES32=0x0, @ANYBLOB="cf7f750c78ec843ba474c8f1207bc90e19f14135b4fdaf682dd8d3532e924a548859507a098234d93e7ebe5bfb27ba31"], 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x4044844) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={r1, &(0x7f0000000000)="7c4852e850619881a0cb00f38d0427ccef6ec87c1fbf3c207659565cced8", &(0x7f0000000100)=""/157}, 0x20) 00:12:14 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x5, 0x5}}}, 0x90) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"000000000000000000000000000200"}, 0x5, 0x5}}}, 0x90) 00:12:14 executing program 3: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000800000/0x800000)=nil, &(0x7f0000e1f000/0x2000)=nil, 0x0, 0x0) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf05]}, 0x8) 00:12:14 executing program 4: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) (fail_nth: 2) [ 734.687434][ T8440] FAULT_INJECTION: forcing a failure. [ 734.687434][ T8440] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 734.690118][ T8440] CPU: 1 PID: 8440 Comm: syz-executor.4 Not tainted 5.15.120-syzkaller #0 [ 734.691733][ T8440] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 734.693827][ T8440] Call trace: [ 734.694494][ T8440] dump_backtrace+0x0/0x530 [ 734.695391][ T8440] show_stack+0x2c/0x3c [ 734.696307][ T8440] dump_stack_lvl+0x108/0x170 [ 734.697269][ T8440] dump_stack+0x1c/0x58 [ 734.698162][ T8440] should_fail+0x400/0x5cc [ 734.699117][ T8440] should_fail_usercopy+0x20/0x30 [ 734.700268][ T8440] strncpy_from_user+0x48/0x580 [ 734.701336][ T8440] getname_flags+0x104/0x480 [ 734.702293][ T8440] getname+0x28/0x38 [ 734.703143][ T8440] do_sys_openat2+0xd4/0x3d8 [ 734.704103][ T8440] __arm64_sys_openat+0x1f0/0x240 [ 734.705237][ T8440] invoke_syscall+0x98/0x2b8 [ 734.706186][ T8440] el0_svc_common+0x138/0x258 [ 734.707159][ T8440] do_el0_svc+0x58/0x14c [ 734.707996][ T8440] el0_svc+0x7c/0x1f0 [ 734.708841][ T8440] el0t_64_sync_handler+0x84/0xe4 [ 734.709860][ T8440] el0t_64_sync+0x1a0/0x1a4 00:12:14 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x5, 0x5}}}, 0x90) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}, 0x5, 0x5}}}, 0x90) 00:12:14 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0xe, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020002a58b3d02c45e69d897f3550000f279b5e46911e7d7d3bb2ffdd17d0600000000346478f2f130ac6cea3edc797b71744c7d5b34afdb"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) r0 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) (async) fcntl$lock(r0, 0x26, &(0x7f0000000380)={0x1, 0x3, 0x2, 0x20}) (async) r2 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) (async) write$khugepaged_scan(r2, &(0x7f00000002c0), 0x8) (async) sendmsg$nl_route(r1, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="180000005600200028bd7000fcdbdf2507000000", @ANYRES32=0x0, @ANYBLOB="cf7f750c78ec843ba474c8f1207bc90e19f14135b4fdaf682dd8d3532e924a548859507a098234d93e7ebe5bfb27ba31"], 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x4044844) (async) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) (async) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={r1, &(0x7f0000000000)="7c4852e850619881a0cb00f38d0427ccef6ec87c1fbf3c207659565cced8", &(0x7f0000000100)=""/157}, 0x20) 00:12:14 executing program 1: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x0) (async) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[r1], 0x1) io_uring_enter(r0, 0x7d32, 0x71c2, 0x5, &(0x7f00000000c0)={[0x80000000]}, 0x8) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf09]}, 0x8) [ 734.783636][ T8445] FAULT_INJECTION: forcing a failure. [ 734.783636][ T8445] name failslab, interval 1, probability 0, space 0, times 0 [ 734.791009][ T8445] CPU: 0 PID: 8445 Comm: syz-executor.5 Not tainted 5.15.120-syzkaller #0 [ 734.792790][ T8445] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 734.794935][ T8445] Call trace: [ 734.795614][ T8445] dump_backtrace+0x0/0x530 [ 734.796557][ T8445] show_stack+0x2c/0x3c [ 734.797405][ T8445] dump_stack_lvl+0x108/0x170 [ 734.798375][ T8445] dump_stack+0x1c/0x58 [ 734.799263][ T8445] should_fail+0x400/0x5cc [ 734.800194][ T8445] __should_failslab+0xbc/0x110 [ 734.800212][ T8445] should_failslab+0x10/0x28 [ 734.800226][ T8445] slab_pre_alloc_hook+0x64/0xe8 [ 734.800238][ T8445] kmem_cache_alloc_bulk+0x50/0x4c0 [ 734.800250][ T8445] io_submit_sqes+0x4f00/0x8970 00:12:14 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x5, 0x5}}}, 0x90) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"000000000000000200"}, 0x5, 0x5}}}, 0x90) 00:12:14 executing program 3: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000800000/0x800000)=nil, &(0x7f0000e1f000/0x2000)=nil, 0x0, 0x0) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf06]}, 0x8) 00:12:14 executing program 4: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) (fail_nth: 3) [ 734.800262][ T8445] __arm64_sys_io_uring_enter+0x2a0/0x1cb8 [ 734.800276][ T8445] invoke_syscall+0x98/0x2b8 [ 734.800288][ T8445] el0_svc_common+0x138/0x258 [ 734.800300][ T8445] do_el0_svc+0x58/0x14c [ 734.800311][ T8445] el0_svc+0x7c/0x1f0 [ 734.800322][ T8445] el0t_64_sync_handler+0x84/0xe4 [ 734.800335][ T8445] el0t_64_sync+0x1a0/0x1a4 00:12:14 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x5, 0x5}}}, 0x90) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {'\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}, 0x5, 0x5}}}, 0x90) [ 734.917670][ T8463] FAULT_INJECTION: forcing a failure. [ 734.917670][ T8463] name failslab, interval 1, probability 0, space 0, times 0 [ 734.922304][ T8463] CPU: 0 PID: 8463 Comm: syz-executor.4 Not tainted 5.15.120-syzkaller #0 [ 734.924066][ T8463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 734.926284][ T8463] Call trace: [ 734.926991][ T8463] dump_backtrace+0x0/0x530 [ 734.927872][ T8463] show_stack+0x2c/0x3c [ 734.928747][ T8463] dump_stack_lvl+0x108/0x170 [ 734.929732][ T8463] dump_stack+0x1c/0x58 [ 734.930584][ T8463] should_fail+0x400/0x5cc [ 734.931452][ T8463] __should_failslab+0xbc/0x110 [ 734.932452][ T8463] should_failslab+0x10/0x28 [ 734.933390][ T8463] slab_pre_alloc_hook+0x64/0xe8 [ 734.934398][ T8463] kmem_cache_alloc+0x98/0x45c [ 734.935364][ T8463] __alloc_file+0x30/0x240 [ 734.936274][ T8463] alloc_empty_file+0xa8/0x198 [ 734.937286][ T8463] path_openat+0xdc/0x26f0 [ 734.938236][ T8463] do_filp_open+0x1a8/0x3b4 [ 734.939107][ T8463] do_sys_openat2+0x128/0x3d8 [ 734.940179][ T8463] __arm64_sys_openat+0x1f0/0x240 [ 734.941262][ T8463] invoke_syscall+0x98/0x2b8 [ 734.942300][ T8463] el0_svc_common+0x138/0x258 [ 734.943191][ T8463] do_el0_svc+0x58/0x14c [ 734.944151][ T8463] el0_svc+0x7c/0x1f0 [ 734.945010][ T8463] el0t_64_sync_handler+0x84/0xe4 [ 734.945947][ T8463] el0t_64_sync+0x1a0/0x1a4 00:12:14 executing program 5: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000800000/0x800000)=nil, &(0x7f0000e1f000/0x2000)=nil, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[r1], 0x1) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf0d]}, 0x8) (fail_nth: 49) 00:12:14 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0xe, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18a4160000000000000000000000000061106c00000000009500000000000000"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000050423eeffffffffffff02000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) bind$packet(r0, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) r4 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) sendmsg$NL80211_CMD_RELOAD_REGDB(r4, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0x14, 0x0, 0x4, 0x70bd25, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000050}, 0x10) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f0000000000)={0x1, 0x4, 0x86, 0x1000000, @vifc_lcl_ifindex=r3, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10) [ 735.005843][ T8468] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 00:12:14 executing program 3: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000800000/0x800000)=nil, &(0x7f0000e1f000/0x2000)=nil, 0x0, 0x0) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf07]}, 0x8) 00:12:15 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x5, 0x5}}}, 0x90) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"000000000000000000000100"}, 0x5, 0x5}}}, 0x90) [ 735.064363][ T8472] FAULT_INJECTION: forcing a failure. [ 735.064363][ T8472] name failslab, interval 1, probability 0, space 0, times 0 [ 735.081422][ T8472] CPU: 1 PID: 8472 Comm: syz-executor.5 Not tainted 5.15.120-syzkaller #0 00:12:15 executing program 4: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) (fail_nth: 4) [ 735.083197][ T8472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 735.085181][ T8472] Call trace: [ 735.085864][ T8472] dump_backtrace+0x0/0x530 [ 735.086830][ T8472] show_stack+0x2c/0x3c [ 735.087809][ T8472] dump_stack_lvl+0x108/0x170 [ 735.088797][ T8472] dump_stack+0x1c/0x58 [ 735.089649][ T8472] should_fail+0x400/0x5cc [ 735.090535][ T8472] __should_failslab+0xbc/0x110 [ 735.091478][ T8472] should_failslab+0x10/0x28 [ 735.092496][ T8472] slab_pre_alloc_hook+0x64/0xe8 [ 735.093536][ T8472] kmem_cache_alloc_bulk+0x50/0x4c0 [ 735.094715][ T8472] io_submit_sqes+0x4f00/0x8970 [ 735.095739][ T8472] __arm64_sys_io_uring_enter+0x2a0/0x1cb8 [ 735.096980][ T8472] invoke_syscall+0x98/0x2b8 [ 735.097926][ T8472] el0_svc_common+0x138/0x258 [ 735.098924][ T8472] do_el0_svc+0x58/0x14c 00:12:15 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x5, 0x5}}}, 0x90) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"000000000000000000000200"}, 0x5, 0x5}}}, 0x90) [ 735.099849][ T8472] el0_svc+0x7c/0x1f0 [ 735.100690][ T8472] el0t_64_sync_handler+0x84/0xe4 [ 735.101751][ T8472] el0t_64_sync+0x1a0/0x1a4 [ 735.139890][ T8477] FAULT_INJECTION: forcing a failure. [ 735.139890][ T8477] name failslab, interval 1, probability 0, space 0, times 0 00:12:15 executing program 3: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000800000/0x800000)=nil, &(0x7f0000e1f000/0x2000)=nil, 0x0, 0x0) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf08]}, 0x8) [ 735.166698][ T8477] CPU: 1 PID: 8477 Comm: syz-executor.4 Not tainted 5.15.120-syzkaller #0 [ 735.168394][ T8477] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 735.170370][ T8477] Call trace: [ 735.171093][ T8477] dump_backtrace+0x0/0x530 [ 735.172036][ T8477] show_stack+0x2c/0x3c [ 735.172907][ T8477] dump_stack_lvl+0x108/0x170 [ 735.173905][ T8477] dump_stack+0x1c/0x58 [ 735.174762][ T8477] should_fail+0x400/0x5cc [ 735.175651][ T8477] __should_failslab+0xbc/0x110 [ 735.176743][ T8477] should_failslab+0x10/0x28 [ 735.177692][ T8477] slab_pre_alloc_hook+0x64/0xe8 [ 735.178688][ T8477] kmem_cache_alloc+0x98/0x45c [ 735.179706][ T8477] __alloc_file+0x30/0x240 [ 735.180674][ T8477] alloc_empty_file+0xa8/0x198 [ 735.181740][ T8477] path_openat+0xdc/0x26f0 [ 735.182737][ T8477] do_filp_open+0x1a8/0x3b4 [ 735.183623][ T8477] do_sys_openat2+0x128/0x3d8 [ 735.184688][ T8477] __arm64_sys_openat+0x1f0/0x240 [ 735.185710][ T8477] invoke_syscall+0x98/0x2b8 [ 735.186676][ T8477] el0_svc_common+0x138/0x258 [ 735.187677][ T8477] do_el0_svc+0x58/0x14c [ 735.188556][ T8477] el0_svc+0x7c/0x1f0 [ 735.189430][ T8477] el0t_64_sync_handler+0x84/0xe4 [ 735.190484][ T8477] el0t_64_sync+0x1a0/0x1a4 00:12:15 executing program 1: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[r1], 0x1) io_uring_enter(r0, 0x7d32, 0x71c2, 0x5, &(0x7f00000000c0)={[0x80000000]}, 0x8) (async) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf09]}, 0x8) 00:12:15 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0xe, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18a4160000000000000000000000000061106c00000000009500000000000000"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) socket$packet(0x11, 0x3, 0x300) (async) r0 = socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000050423eeffffffffffff02000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) bind$packet(r0, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) (async) bind$packet(r0, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) r4 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) (async) sendmsg$SMC_PNETID_GET(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) sendmsg$NL80211_CMD_RELOAD_REGDB(r4, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0x14, 0x0, 0x4, 0x70bd25, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000050}, 0x10) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f0000000000)={0x1, 0x4, 0x86, 0x1000000, @vifc_lcl_ifindex=r3, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10) 00:12:15 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x5, 0x5}}}, 0x90) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}, 0x5, 0x5}}}, 0x90) [ 735.243121][ T8482] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 00:12:15 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x5, 0x5}}}, 0x90) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000100"}, 0x5, 0x5}}}, 0x90) 00:12:15 executing program 5: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000800000/0x800000)=nil, &(0x7f0000e1f000/0x2000)=nil, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[r1], 0x1) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf0d]}, 0x8) (fail_nth: 50) 00:12:15 executing program 3: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000800000/0x800000)=nil, &(0x7f0000e1f000/0x2000)=nil, 0x0, 0x0) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf09]}, 0x8) [ 735.373138][ T8493] FAULT_INJECTION: forcing a failure. [ 735.373138][ T8493] name failslab, interval 1, probability 0, space 0, times 0 00:12:15 executing program 4: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) (fail_nth: 5) [ 735.380493][ T8493] CPU: 0 PID: 8493 Comm: syz-executor.5 Not tainted 5.15.120-syzkaller #0 [ 735.382181][ T8493] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 735.384256][ T8493] Call trace: [ 735.384906][ T8493] dump_backtrace+0x0/0x530 [ 735.385893][ T8493] show_stack+0x2c/0x3c [ 735.386813][ T8493] dump_stack_lvl+0x108/0x170 [ 735.387766][ T8493] dump_stack+0x1c/0x58 [ 735.388714][ T8493] should_fail+0x400/0x5cc [ 735.389681][ T8493] __should_failslab+0xbc/0x110 [ 735.390779][ T8493] should_failslab+0x10/0x28 [ 735.391766][ T8493] slab_pre_alloc_hook+0x64/0xe8 [ 735.392707][ T8493] kmem_cache_alloc_bulk+0x50/0x4c0 [ 735.393815][ T8493] io_submit_sqes+0x4f00/0x8970 [ 735.394870][ T8493] __arm64_sys_io_uring_enter+0x2a0/0x1cb8 [ 735.396165][ T8493] invoke_syscall+0x98/0x2b8 [ 735.397183][ T8493] el0_svc_common+0x138/0x258 [ 735.398170][ T8493] do_el0_svc+0x58/0x14c [ 735.399052][ T8493] el0_svc+0x7c/0x1f0 [ 735.399894][ T8493] el0t_64_sync_handler+0x84/0xe4 [ 735.400873][ T8493] el0t_64_sync+0x1a0/0x1a4 00:12:15 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x5, 0x5}}}, 0x90) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000200"}, 0x5, 0x5}}}, 0x90) 00:12:15 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0xe, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18a4160000000000000000000000000061106c00000000009500000000000000"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000050423eeffffffffffff02000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) bind$packet(r0, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) r4 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) (async) sendmsg$NL80211_CMD_RELOAD_REGDB(r4, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0x14, 0x0, 0x4, 0x70bd25, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000050}, 0x10) (async) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f0000000000)={0x1, 0x4, 0x86, 0x1000000, @vifc_lcl_ifindex=r3, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10) [ 735.447974][ T8499] FAULT_INJECTION: forcing a failure. [ 735.447974][ T8499] name failslab, interval 1, probability 0, space 0, times 0 [ 735.477300][ T8499] CPU: 0 PID: 8499 Comm: syz-executor.4 Not tainted 5.15.120-syzkaller #0 [ 735.479108][ T8499] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 735.481194][ T8499] Call trace: [ 735.481930][ T8499] dump_backtrace+0x0/0x530 [ 735.482839][ T8499] show_stack+0x2c/0x3c [ 735.483712][ T8499] dump_stack_lvl+0x108/0x170 [ 735.484697][ T8499] dump_stack+0x1c/0x58 [ 735.485587][ T8499] should_fail+0x400/0x5cc [ 735.486533][ T8499] __should_failslab+0xbc/0x110 [ 735.487643][ T8499] should_failslab+0x10/0x28 [ 735.488634][ T8499] slab_pre_alloc_hook+0x64/0xe8 [ 735.489693][ T8499] __kmalloc+0xc0/0x4c8 [ 735.490647][ T8499] tomoyo_realpath_from_path+0xd0/0x508 [ 735.491889][ T8499] tomoyo_check_open_permission+0x1dc/0x3f4 [ 735.493151][ T8499] tomoyo_file_open+0x138/0x1b0 [ 735.494156][ T8499] security_file_open+0x6c/0xb0 [ 735.495178][ T8499] do_dentry_open+0x29c/0xed8 [ 735.496162][ T8499] vfs_open+0x7c/0x90 [ 735.496933][ T8499] path_openat+0x1f28/0x26f0 [ 735.497889][ T8499] do_filp_open+0x1a8/0x3b4 [ 735.498889][ T8499] do_sys_openat2+0x128/0x3d8 [ 735.499806][ T8499] __arm64_sys_openat+0x1f0/0x240 [ 735.500841][ T8499] invoke_syscall+0x98/0x2b8 [ 735.501796][ T8499] el0_svc_common+0x138/0x258 [ 735.502835][ T8499] do_el0_svc+0x58/0x14c [ 735.503758][ T8499] el0_svc+0x7c/0x1f0 [ 735.504581][ T8499] el0t_64_sync_handler+0x84/0xe4 [ 735.505640][ T8499] el0t_64_sync+0x1a0/0x1a4 [ 735.530515][ T8502] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 00:12:15 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x5, 0x5}}}, 0x90) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}, 0x5, 0x5}}}, 0x90) [ 735.580900][ T8499] ERROR: Out of memory at tomoyo_realpath_from_path. 00:12:15 executing program 5: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000800000/0x800000)=nil, &(0x7f0000e1f000/0x2000)=nil, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[r1], 0x1) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf0d]}, 0x8) (fail_nth: 51) 00:12:15 executing program 3: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000800000/0x800000)=nil, &(0x7f0000e1f000/0x2000)=nil, 0x0, 0x0) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf0a]}, 0x8) [ 735.613456][ T8508] FAULT_INJECTION: forcing a failure. [ 735.613456][ T8508] name failslab, interval 1, probability 0, space 0, times 0 [ 735.623050][ T8508] CPU: 0 PID: 8508 Comm: syz-executor.5 Not tainted 5.15.120-syzkaller #0 [ 735.624812][ T8508] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 735.626894][ T8508] Call trace: [ 735.627588][ T8508] dump_backtrace+0x0/0x530 [ 735.628555][ T8508] show_stack+0x2c/0x3c [ 735.629405][ T8508] dump_stack_lvl+0x108/0x170 [ 735.630419][ T8508] dump_stack+0x1c/0x58 [ 735.631354][ T8508] should_fail+0x400/0x5cc [ 735.632259][ T8508] __should_failslab+0xbc/0x110 [ 735.633266][ T8508] should_failslab+0x10/0x28 [ 735.634253][ T8508] slab_pre_alloc_hook+0x64/0xe8 [ 735.635257][ T8508] kmem_cache_alloc_bulk+0x50/0x4c0 [ 735.636398][ T8508] io_submit_sqes+0x4f00/0x8970 [ 735.637458][ T8508] __arm64_sys_io_uring_enter+0x2a0/0x1cb8 [ 735.638653][ T8508] invoke_syscall+0x98/0x2b8 [ 735.639649][ T8508] el0_svc_common+0x138/0x258 [ 735.640616][ T8508] do_el0_svc+0x58/0x14c [ 735.641507][ T8508] el0_svc+0x7c/0x1f0 [ 735.642340][ T8508] el0t_64_sync_handler+0x84/0xe4 [ 735.643437][ T8508] el0t_64_sync+0x1a0/0x1a4 00:12:15 executing program 2: r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0xe, 0x4, &(0x7f00000000c0)=@framed={{0x18, 0x2}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0xffffffffffffffd2}]}, &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000050423eeffffffffffff02000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) bind$packet(r2, &(0x7f0000000100)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, {{0x8}, {0x8}}}}}]}, 0x40}}, 0x0) r7 = dup3(r0, r0, 0x80000) r8 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='blkio.bfq.io_service_time\x00', 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x1, &(0x7f0000000000)=@raw=[@ldst={0x1, 0x2, 0x0, 0x0, 0x4, 0xfffffffffffffffe}], &(0x7f0000000040)='GPL\x00', 0x7, 0xef, &(0x7f0000000100)=""/239, 0x41000, 0x9, '\x00', r6, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000080)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000000200)={0x4, 0xd, 0x3b6b, 0x65c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000300)=[r7, 0xffffffffffffffff, r8]}, 0x80) 00:12:15 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x5, 0x5}}}, 0x90) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000200"}, 0x5, 0x5}}}, 0x90) 00:12:15 executing program 4: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) (fail_nth: 6) 00:12:15 executing program 3: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000800000/0x800000)=nil, &(0x7f0000e1f000/0x2000)=nil, 0x0, 0x0) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf0b]}, 0x8) 00:12:15 executing program 5: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000800000/0x800000)=nil, &(0x7f0000e1f000/0x2000)=nil, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[r1], 0x1) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf0d]}, 0x8) (fail_nth: 52) 00:12:15 executing program 1: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[r1], 0x1) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf09]}, 0x8) r2 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) ppoll(&(0x7f0000000200)=[{r2, 0x2c0}], 0x1, &(0x7f0000000280), &(0x7f00000002c0)={[0x68]}, 0x8) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r3, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1}) r4 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP(r4, 0xd0009412, &(0x7f00000004c0)={0x0, 0xfffffffffffffff7}) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) io_uring_enter(r5, 0x4f98, 0xde8a, 0x19, &(0x7f00000000c0)={[0x1]}, 0x8) [ 735.812618][ T8516] FAULT_INJECTION: forcing a failure. [ 735.812618][ T8516] name failslab, interval 1, probability 0, space 0, times 0 [ 735.815419][ T8516] CPU: 1 PID: 8516 Comm: syz-executor.4 Not tainted 5.15.120-syzkaller #0 [ 735.817074][ T8516] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 735.819025][ T8516] Call trace: [ 735.819732][ T8516] dump_backtrace+0x0/0x530 [ 735.820669][ T8516] show_stack+0x2c/0x3c [ 735.821500][ T8516] dump_stack_lvl+0x108/0x170 [ 735.822482][ T8516] dump_stack+0x1c/0x58 [ 735.823302][ T8516] should_fail+0x400/0x5cc [ 735.824244][ T8516] __should_failslab+0xbc/0x110 [ 735.825265][ T8516] should_failslab+0x10/0x28 [ 735.826181][ T8516] slab_pre_alloc_hook+0x64/0xe8 [ 735.827190][ T8516] __kmalloc+0xc0/0x4c8 [ 735.828064][ T8516] tomoyo_encode+0x270/0x4b0 [ 735.828998][ T8516] tomoyo_realpath_from_path+0x4b4/0x508 [ 735.830212][ T8516] tomoyo_check_open_permission+0x1dc/0x3f4 [ 735.831484][ T8516] tomoyo_file_open+0x138/0x1b0 [ 735.832463][ T8516] security_file_open+0x6c/0xb0 [ 735.833561][ T8516] do_dentry_open+0x29c/0xed8 [ 735.834557][ T8516] vfs_open+0x7c/0x90 [ 735.835360][ T8516] path_openat+0x1f28/0x26f0 [ 735.836357][ T8516] do_filp_open+0x1a8/0x3b4 [ 735.837259][ T8516] do_sys_openat2+0x128/0x3d8 [ 735.838185][ T8516] __arm64_sys_openat+0x1f0/0x240 [ 735.839170][ T8516] invoke_syscall+0x98/0x2b8 [ 735.840038][ T8516] el0_svc_common+0x138/0x258 [ 735.840817][ T8517] FAULT_INJECTION: forcing a failure. [ 735.840817][ T8517] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 735.841095][ T8516] do_el0_svc+0x58/0x14c [ 735.844873][ T8516] el0_svc+0x7c/0x1f0 [ 735.845815][ T8516] el0t_64_sync_handler+0x84/0xe4 [ 735.846802][ T8516] el0t_64_sync+0x1a0/0x1a4 [ 735.849495][ T8515] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 735.857749][ T8517] CPU: 0 PID: 8517 Comm: syz-executor.5 Not tainted 5.15.120-syzkaller #0 [ 735.859581][ T8517] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 735.861654][ T8517] Call trace: [ 735.862271][ T8517] dump_backtrace+0x0/0x530 [ 735.863212][ T8517] show_stack+0x2c/0x3c [ 735.864104][ T8517] dump_stack_lvl+0x108/0x170 [ 735.865045][ T8517] dump_stack+0x1c/0x58 [ 735.865948][ T8517] should_fail+0x400/0x5cc [ 735.866880][ T8517] should_fail_alloc_page+0x74/0xa8 [ 735.867998][ T8517] prepare_alloc_pages+0x160/0x4cc [ 735.869083][ T8517] __alloc_pages+0x138/0x674 [ 735.870128][ T8517] alloc_pages+0x390/0x634 [ 735.870981][ T8517] new_slab+0xec/0x56c [ 735.871916][ T8517] ___slab_alloc+0x6bc/0xdbc [ 735.872814][ T8517] kmem_cache_alloc_bulk+0x1a0/0x4c0 [ 735.873969][ T8517] io_submit_sqes+0x4f00/0x8970 [ 735.874888][ T8517] __arm64_sys_io_uring_enter+0x2a0/0x1cb8 [ 735.876116][ T8517] invoke_syscall+0x98/0x2b8 [ 735.877004][ T8517] el0_svc_common+0x138/0x258 [ 735.877992][ T8517] do_el0_svc+0x58/0x14c [ 735.878874][ T8517] el0_svc+0x7c/0x1f0 [ 735.879768][ T8517] el0t_64_sync_handler+0x84/0xe4 [ 735.880789][ T8517] el0t_64_sync+0x1a0/0x1a4 00:12:15 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x5, 0x5}}}, 0x90) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {'\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}, 0x5, 0x5}}}, 0x90) [ 735.923517][ T8516] ERROR: Out of memory at tomoyo_realpath_from_path. 00:12:15 executing program 3: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000800000/0x800000)=nil, &(0x7f0000e1f000/0x2000)=nil, 0x0, 0x0) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf0c]}, 0x8) 00:12:15 executing program 4: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) (fail_nth: 7) 00:12:15 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x5, 0x5}}}, 0x90) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000100"}, 0x5, 0x5}}}, 0x90) 00:12:15 executing program 2: r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0xe, 0x4, &(0x7f00000000c0)=@framed={{0x18, 0x2}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0xffffffffffffffd2}]}, &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) (async, rerun: 32) getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (rerun: 32) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000050423eeffffffffffff02000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) (async, rerun: 32) bind$packet(r2, &(0x7f0000000100)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) (async, rerun: 32) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, {{0x8}, {0x8}}}}}]}, 0x40}}, 0x0) (async, rerun: 64) r7 = dup3(r0, r0, 0x80000) (async, rerun: 64) r8 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='blkio.bfq.io_service_time\x00', 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x1, &(0x7f0000000000)=@raw=[@ldst={0x1, 0x2, 0x0, 0x0, 0x4, 0xfffffffffffffffe}], &(0x7f0000000040)='GPL\x00', 0x7, 0xef, &(0x7f0000000100)=""/239, 0x41000, 0x9, '\x00', r6, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000080)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000000200)={0x4, 0xd, 0x3b6b, 0x65c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000300)=[r7, 0xffffffffffffffff, r8]}, 0x80) [ 736.040163][ T8532] FAULT_INJECTION: forcing a failure. [ 736.040163][ T8532] name failslab, interval 1, probability 0, space 0, times 0 [ 736.043097][ T8532] CPU: 1 PID: 8532 Comm: syz-executor.4 Not tainted 5.15.120-syzkaller #0 [ 736.044789][ T8532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 736.046871][ T8532] Call trace: [ 736.047564][ T8532] dump_backtrace+0x0/0x530 [ 736.048466][ T8532] show_stack+0x2c/0x3c [ 736.049335][ T8532] dump_stack_lvl+0x108/0x170 [ 736.050335][ T8532] dump_stack+0x1c/0x58 [ 736.051240][ T8532] should_fail+0x400/0x5cc [ 736.052240][ T8532] __should_failslab+0xbc/0x110 [ 736.053309][ T8532] should_failslab+0x10/0x28 [ 736.054259][ T8532] slab_pre_alloc_hook+0x64/0xe8 [ 736.055300][ T8532] kmem_cache_alloc_trace+0x9c/0x47c [ 736.056470][ T8532] ucma_open+0x60/0x174 [ 736.057425][ T8532] misc_open+0x2f0/0x368 [ 736.058274][ T8532] chrdev_open+0x3e8/0x4fc [ 736.059252][ T8532] do_dentry_open+0x780/0xed8 [ 736.060250][ T8532] vfs_open+0x7c/0x90 [ 736.061101][ T8532] path_openat+0x1f28/0x26f0 [ 736.062173][ T8532] do_filp_open+0x1a8/0x3b4 [ 736.063133][ T8532] do_sys_openat2+0x128/0x3d8 [ 736.064207][ T8532] __arm64_sys_openat+0x1f0/0x240 [ 736.065299][ T8532] invoke_syscall+0x98/0x2b8 [ 736.066323][ T8532] el0_svc_common+0x138/0x258 [ 736.067287][ T8532] do_el0_svc+0x58/0x14c [ 736.067844][ T8534] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 736.068187][ T8532] el0_svc+0x7c/0x1f0 [ 736.068225][ T8532] el0t_64_sync_handler+0x84/0xe4 [ 736.068238][ T8532] el0t_64_sync+0x1a0/0x1a4 00:12:16 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x5, 0x5}}}, 0x90) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000200"}, 0x5, 0x5}}}, 0x90) 00:12:16 executing program 3: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000800000/0x800000)=nil, &(0x7f0000e1f000/0x2000)=nil, 0x0, 0x0) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf0d]}, 0x8) 00:12:16 executing program 1: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[r1], 0x1) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf09]}, 0x8) (async) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf09]}, 0x8) r2 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) ppoll(&(0x7f0000000200)=[{r2, 0x2c0}], 0x1, &(0x7f0000000280), &(0x7f00000002c0)={[0x68]}, 0x8) (async) ppoll(&(0x7f0000000200)=[{r2, 0x2c0}], 0x1, &(0x7f0000000280), &(0x7f00000002c0)={[0x68]}, 0x8) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r3, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1}) r4 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP(r4, 0xd0009412, &(0x7f00000004c0)={0x0, 0xfffffffffffffff7}) openat$vcs(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) (async) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) io_uring_enter(r5, 0x4f98, 0xde8a, 0x19, &(0x7f00000000c0)={[0x1]}, 0x8) (async) io_uring_enter(r5, 0x4f98, 0xde8a, 0x19, &(0x7f00000000c0)={[0x1]}, 0x8) 00:12:16 executing program 5: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000800000/0x800000)=nil, &(0x7f0000e1f000/0x2000)=nil, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[r1], 0x1) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf0d]}, 0x8) (fail_nth: 53) 00:12:16 executing program 2: r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0xe, 0x4, &(0x7f00000000c0)=@framed={{0x18, 0x2}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0xffffffffffffffd2}]}, &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async, rerun: 32) r1 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) (async, rerun: 32) getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (rerun: 32) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000050423eeffffffffffff02000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) (async) bind$packet(r2, &(0x7f0000000100)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) (async) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, {{0x8}, {0x8}}}}}]}, 0x40}}, 0x0) r7 = dup3(r0, r0, 0x80000) (async) r8 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='blkio.bfq.io_service_time\x00', 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x1, &(0x7f0000000000)=@raw=[@ldst={0x1, 0x2, 0x0, 0x0, 0x4, 0xfffffffffffffffe}], &(0x7f0000000040)='GPL\x00', 0x7, 0xef, &(0x7f0000000100)=""/239, 0x41000, 0x9, '\x00', r6, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000080)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000000200)={0x4, 0xd, 0x3b6b, 0x65c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000300)=[r7, 0xffffffffffffffff, r8]}, 0x80) [ 736.215438][ T8547] FAULT_INJECTION: forcing a failure. [ 736.215438][ T8547] name failslab, interval 1, probability 0, space 0, times 0 [ 736.237582][ T8547] CPU: 0 PID: 8547 Comm: syz-executor.5 Not tainted 5.15.120-syzkaller #0 [ 736.239457][ T8547] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 736.241555][ T8547] Call trace: [ 736.242241][ T8547] dump_backtrace+0x0/0x530 [ 736.243209][ T8547] show_stack+0x2c/0x3c [ 736.244134][ T8547] dump_stack_lvl+0x108/0x170 [ 736.245034][ T8547] dump_stack+0x1c/0x58 [ 736.245933][ T8547] should_fail+0x400/0x5cc [ 736.246861][ T8547] __should_failslab+0xbc/0x110 [ 736.247897][ T8547] should_failslab+0x10/0x28 [ 736.248934][ T8547] slab_pre_alloc_hook+0x64/0xe8 [ 736.249950][ T8547] __kmalloc_node+0xbc/0x5b8 [ 736.250939][ T8547] memcg_alloc_page_obj_cgroups+0x80/0x174 [ 736.252239][ T8547] new_slab+0x120/0x56c [ 736.253122][ T8547] ___slab_alloc+0x6bc/0xdbc [ 736.253998][ T8547] kmem_cache_alloc_bulk+0x1a0/0x4c0 [ 736.255071][ T8547] io_submit_sqes+0x4f00/0x8970 [ 736.256074][ T8547] __arm64_sys_io_uring_enter+0x2a0/0x1cb8 [ 736.257282][ T8547] invoke_syscall+0x98/0x2b8 [ 736.258202][ T8547] el0_svc_common+0x138/0x258 [ 736.259152][ T8547] do_el0_svc+0x58/0x14c [ 736.260117][ T8547] el0_svc+0x7c/0x1f0 [ 736.260951][ T8547] el0t_64_sync_handler+0x84/0xe4 [ 736.262007][ T8547] el0t_64_sync+0x1a0/0x1a4 00:12:16 executing program 3: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000800000/0x800000)=nil, &(0x7f0000e1f000/0x2000)=nil, 0x0, 0x0) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf0e]}, 0x8) 00:12:16 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x5, 0x5}}}, 0x90) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}, 0x5, 0x5}}}, 0x90) [ 736.298636][ T8552] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 00:12:16 executing program 4: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) (fail_nth: 8) 00:12:16 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x5, 0x5}}}, 0x90) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x5, 0x5}}}, 0x90) [ 736.367450][ T8561] FAULT_INJECTION: forcing a failure. [ 736.367450][ T8561] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 736.371626][ T8561] CPU: 0 PID: 8561 Comm: syz-executor.4 Not tainted 5.15.120-syzkaller #0 [ 736.373374][ T8561] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 736.375513][ T8561] Call trace: [ 736.376218][ T8561] dump_backtrace+0x0/0x530 [ 736.377178][ T8561] show_stack+0x2c/0x3c [ 736.377992][ T8561] dump_stack_lvl+0x108/0x170 [ 736.378961][ T8561] dump_stack+0x1c/0x58 [ 736.379757][ T8561] should_fail+0x400/0x5cc [ 736.380701][ T8561] should_fail_usercopy+0x20/0x30 [ 736.381711][ T8561] simple_read_from_buffer+0xd8/0x26c [ 736.382851][ T8561] proc_fail_nth_read+0x1a0/0x248 [ 736.383882][ T8561] vfs_read+0x278/0xb10 [ 736.384757][ T8561] ksys_read+0x15c/0x26c [ 736.385568][ T8561] __arm64_sys_read+0x7c/0x90 [ 736.386621][ T8561] invoke_syscall+0x98/0x2b8 [ 736.387602][ T8561] el0_svc_common+0x138/0x258 [ 736.388538][ T8561] do_el0_svc+0x58/0x14c [ 736.389462][ T8561] el0_svc+0x7c/0x1f0 [ 736.390301][ T8561] el0t_64_sync_handler+0x84/0xe4 [ 736.391261][ T8561] el0t_64_sync+0x1a0/0x1a4 00:12:16 executing program 2: r0 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB="2c551792f41b45252bc00b102e37f148b9820d08410f737dabe2b3"]) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000200)='./file0\x00', &(0x7f00000002c0), &(0x7f0000000300)={0x0, 0xfb, 0xaf, 0x1, 0x40, "b32476226f24d16834cb39192a2a5d5e", "8ab555b9e8007b1e030a26fec81f75662277e194525d3495f3a32b7f5e6e268f059db73e7eff8f360dd1327daae227718609ab96a31133a8800be7b56318b6c32525c569d00539b37691bbce46afb18e9c51d7b34f0798e00e08a74cb3caf3d579e9e26c4d5385bcd1b28328ccca0bc40af6a3389d06a7ce0476ed68232186a740a2fd1dbb6f6ac293453ec6ae7312e4c167f0dde28e59d57c58"}, 0xaf, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0xe, 0x8, &(0x7f0000000040)=@raw=[@map_fd={0x18, 0x7, 0x1, 0x0, 0x1}, @exit, @alu={0x3, 0x0, 0x5, 0xa, 0x5, 0xfffffffffffffef2, 0x5}, @map_fd={0x18, 0x5, 0x1, 0x0, r1}, @map_fd={0x18, 0x3, 0x1, 0x0, r2}], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:12:16 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x5, 0x5}}}, 0x90) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000002"}, 0x5, 0x5}}}, 0x90) 00:12:16 executing program 1: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[r1], 0x1) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf09]}, 0x8) r2 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) ppoll(&(0x7f0000000200)=[{r2, 0x2c0}], 0x1, &(0x7f0000000280), &(0x7f00000002c0)={[0x68]}, 0x8) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r3, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1}) r4 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP(r4, 0xd0009412, &(0x7f00000004c0)={0x0, 0xfffffffffffffff7}) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) io_uring_enter(r5, 0x4f98, 0xde8a, 0x19, &(0x7f00000000c0)={[0x1]}, 0x8) syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) (async) syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x0) (async) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[r1], 0x1) (async) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf09]}, 0x8) (async) openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) (async) ppoll(&(0x7f0000000200)=[{r2, 0x2c0}], 0x1, &(0x7f0000000280), &(0x7f00000002c0)={[0x68]}, 0x8) (async) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) (async) ioctl$DRM_IOCTL_MODE_ADDFB(r3, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1}) (async) socket$vsock_stream(0x28, 0x1, 0x0) (async) ioctl$BTRFS_IOC_INO_LOOKUP(r4, 0xd0009412, &(0x7f00000004c0)={0x0, 0xfffffffffffffff7}) (async) openat$vcs(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) (async) io_uring_enter(r5, 0x4f98, 0xde8a, 0x19, &(0x7f00000000c0)={[0x1]}, 0x8) (async) 00:12:16 executing program 5: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000800000/0x800000)=nil, &(0x7f0000e1f000/0x2000)=nil, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[r1], 0x1) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf0d]}, 0x8) (fail_nth: 54) 00:12:16 executing program 4: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) 00:12:16 executing program 3: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000800000/0x800000)=nil, &(0x7f0000e1f000/0x2000)=nil, 0x0, 0x0) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf0f]}, 0x8) 00:12:16 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x5, 0x5}}}, 0x90) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@'}, 0x5, 0x5}}}, 0x90) 00:12:16 executing program 2: r0 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) (async) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB="2c551792f41b45252bc00b102e37f148b9820d08410f737dabe2b3"]) (async) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) setxattr$trusted_overlay_upper(&(0x7f0000000200)='./file0\x00', &(0x7f00000002c0), &(0x7f0000000300)={0x0, 0xfb, 0xaf, 0x1, 0x40, "b32476226f24d16834cb39192a2a5d5e", "8ab555b9e8007b1e030a26fec81f75662277e194525d3495f3a32b7f5e6e268f059db73e7eff8f360dd1327daae227718609ab96a31133a8800be7b56318b6c32525c569d00539b37691bbce46afb18e9c51d7b34f0798e00e08a74cb3caf3d579e9e26c4d5385bcd1b28328ccca0bc40af6a3389d06a7ce0476ed68232186a740a2fd1dbb6f6ac293453ec6ae7312e4c167f0dde28e59d57c58"}, 0xaf, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0xe, 0x8, &(0x7f0000000040)=@raw=[@map_fd={0x18, 0x7, 0x1, 0x0, 0x1}, @exit, @alu={0x3, 0x0, 0x5, 0xa, 0x5, 0xfffffffffffffef2, 0x5}, @map_fd={0x18, 0x5, 0x1, 0x0, r1}, @map_fd={0x18, 0x3, 0x1, 0x0, r2}], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 736.565854][ T8573] FAULT_INJECTION: forcing a failure. [ 736.565854][ T8573] name failslab, interval 1, probability 0, space 0, times 0 [ 736.586598][ T8573] CPU: 1 PID: 8573 Comm: syz-executor.5 Not tainted 5.15.120-syzkaller #0 [ 736.588391][ T8573] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 736.590553][ T8573] Call trace: [ 736.591210][ T8573] dump_backtrace+0x0/0x530 [ 736.592202][ T8573] show_stack+0x2c/0x3c [ 736.593121][ T8573] dump_stack_lvl+0x108/0x170 [ 736.593139][ T8573] dump_stack+0x1c/0x58 [ 736.593150][ T8573] should_fail+0x400/0x5cc [ 736.593162][ T8573] __should_failslab+0xbc/0x110 [ 736.593174][ T8573] should_failslab+0x10/0x28 [ 736.593187][ T8573] slab_pre_alloc_hook+0x64/0xe8 [ 736.593199][ T8573] __kmalloc_node+0xbc/0x5b8 [ 736.593211][ T8573] memcg_alloc_page_obj_cgroups+0x80/0x174 [ 736.593224][ T8573] new_slab+0x120/0x56c [ 736.593236][ T8573] ___slab_alloc+0x6bc/0xdbc [ 736.593247][ T8573] kmem_cache_alloc_bulk+0x1a0/0x4c0 [ 736.593259][ T8573] io_submit_sqes+0x4f00/0x8970 00:12:16 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x5, 0x5}}}, 0x90) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"0000000000000000000200"}, 0x5, 0x5}}}, 0x90) [ 736.593270][ T8573] __arm64_sys_io_uring_enter+0x2a0/0x1cb8 [ 736.593284][ T8573] invoke_syscall+0x98/0x2b8 [ 736.593296][ T8573] el0_svc_common+0x138/0x258 [ 736.593308][ T8573] do_el0_svc+0x58/0x14c [ 736.609119][ T8573] el0_svc+0x7c/0x1f0 [ 736.609928][ T8573] el0t_64_sync_handler+0x84/0xe4 [ 736.610891][ T8573] el0t_64_sync+0x1a0/0x1a4 00:12:16 executing program 4: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x3, 0x0) 00:12:16 executing program 2: r0 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) (async) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB="2c551792f41b45252bc00b102e37f148b9820d08410f737dabe2b3"]) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000200)='./file0\x00', &(0x7f00000002c0), &(0x7f0000000300)={0x0, 0xfb, 0xaf, 0x1, 0x40, "b32476226f24d16834cb39192a2a5d5e", "8ab555b9e8007b1e030a26fec81f75662277e194525d3495f3a32b7f5e6e268f059db73e7eff8f360dd1327daae227718609ab96a31133a8800be7b56318b6c32525c569d00539b37691bbce46afb18e9c51d7b34f0798e00e08a74cb3caf3d579e9e26c4d5385bcd1b28328ccca0bc40af6a3389d06a7ce0476ed68232186a740a2fd1dbb6f6ac293453ec6ae7312e4c167f0dde28e59d57c58"}, 0xaf, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0xe, 0x8, &(0x7f0000000040)=@raw=[@map_fd={0x18, 0x7, 0x1, 0x0, 0x1}, @exit, @alu={0x3, 0x0, 0x5, 0xa, 0x5, 0xfffffffffffffef2, 0x5}, @map_fd={0x18, 0x5, 0x1, 0x0, r1}, @map_fd={0x18, 0x3, 0x1, 0x0, r2}], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:12:16 executing program 4: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x8, 0x0) 00:12:16 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x5, 0x5}}}, 0x90) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}, 0x5, 0x5}}}, 0x90) 00:12:16 executing program 3: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000800000/0x800000)=nil, &(0x7f0000e1f000/0x2000)=nil, 0x0, 0x0) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf10]}, 0x8) 00:12:16 executing program 1: r0 = syz_io_uring_setup(0x5a9, &(0x7f0000000100)={0x0, 0xd722, 0x800}, &(0x7f0000004000/0x2000)=nil, &(0x7f0000001000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[r1], 0x1) syz_io_uring_setup(0x1d10, &(0x7f0000000180)={0x0, 0xa7ed, 0x800, 0x2, 0x3ba}, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000200)) io_uring_enter(r0, 0x80040b3, 0x0, 0x12, &(0x7f00000000c0), 0x8) 00:12:16 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000240), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000600)={0x0, 0xb0, &(0x7f00000005c0)={&(0x7f0000000500)={0x14, r1, 0x1, 0x0, 0x3}, 0x14}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEV(r0, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x54, 0x0, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x54}, 0x1, 0x0, 0x0, 0x8001}, 0x24000890) r4 = syz_open_dev$midi(&(0x7f0000000000), 0xfffffffffffffffe, 0x40003) vmsplice(r4, &(0x7f0000000300)=[{&(0x7f0000000040)="07cac1297009d7b6ca20", 0xa}, {&(0x7f0000000080)="6d4de17aa2834bc7230c9f54e3281d8f8836fa4ce1799e6f3afbd731c2a5c62c2bf3d6178acbaefef5ee019f9d80209ee87b41f17f47e2facfe8576903e519cf389fdaf7a2e56078b195e247089c04f97545ae5b22304cb8a3e58cd8405f540ec9fc029e2ab2228569aae76ddf44da006d64d04928b85ad7370c1ee3193793690690459f7a0cdddeaaf3e185862cef577a102704fca3a07193c4a418741f28949eecbf7ea83fdb08fdfb2cb5d193b75f728f71cad8aadd78ac08cb3c4429df770eb16f212e031feaa886924efc6794a4", 0xd0}, {&(0x7f0000000180)="57de06d95c32730476ba23f896d5e9dda4b900e5859964d66d03c2d1522ee518036ab4903c780ce584304ec15aa6fddbf07ba295ca33002c646c1c7865e23d65746ebdc871f2e318b0831b1a66480b43028ef0ec1b1a1caee71a1e7b35f775171af2c1ab31fece00471f4c60571f5316a6f8a13f756380a80c9b6da706854b05b961f71748be2addd0f41960d6", 0x8d}, {&(0x7f0000000240)="d1ca4602b4ec6e1fa6026bbcb2496387b7f3e49a220188adf293de0cf975d487482bbd0ab70bcc00c10f989502909596e256b88bdc6de100b2b704d6d17fec9631af9246b1a53b45b0ff2a82414a6212e5441210e042b172be709fd96710012cc3a28bf9e5108c16d4e490dcaa6be32a59039b507370655845d225345fafbc6583fa17a4df0401787b632247191c7c297fa2d6bb54f05cf71cacca71446413a780f348971e954d893d958175fde382ce8d7de5e700d149fb80d833", 0xbb}], 0x4, 0xd) 00:12:16 executing program 5: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000800000/0x800000)=nil, &(0x7f0000e1f000/0x2000)=nil, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[r1], 0x1) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf0d]}, 0x8) (fail_nth: 55) 00:12:16 executing program 4: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0xb, 0x0) 00:12:16 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x5, 0x5}}}, 0x90) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"0000000000000000000000000100"}, 0x5, 0x5}}}, 0x90) 00:12:16 executing program 3: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000800000/0x800000)=nil, &(0x7f0000e1f000/0x2000)=nil, 0x0, 0x0) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf11]}, 0x8) [ 736.871349][ T8614] FAULT_INJECTION: forcing a failure. [ 736.871349][ T8614] name failslab, interval 1, probability 0, space 0, times 0 00:12:16 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x5, 0x5}}}, 0x90) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"0000000000000000000000000200"}, 0x5, 0x5}}}, 0x90) [ 736.896864][ T8614] CPU: 1 PID: 8614 Comm: syz-executor.5 Not tainted 5.15.120-syzkaller #0 [ 736.898670][ T8614] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 736.900722][ T8614] Call trace: [ 736.901391][ T8614] dump_backtrace+0x0/0x530 [ 736.902316][ T8614] show_stack+0x2c/0x3c 00:12:16 executing program 4: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x2) [ 736.903163][ T8614] dump_stack_lvl+0x108/0x170 [ 736.904167][ T8614] dump_stack+0x1c/0x58 [ 736.905111][ T8614] should_fail+0x400/0x5cc [ 736.906031][ T8614] __should_failslab+0xbc/0x110 [ 736.907085][ T8614] should_failslab+0x10/0x28 [ 736.907976][ T8614] slab_pre_alloc_hook+0x64/0xe8 [ 736.908972][ T8614] kmem_cache_alloc_bulk+0x50/0x4c0 [ 736.910096][ T8614] io_submit_sqes+0x4f00/0x8970 [ 736.911078][ T8614] __arm64_sys_io_uring_enter+0x2a0/0x1cb8 [ 736.912431][ T8614] invoke_syscall+0x98/0x2b8 [ 736.913505][ T8614] el0_svc_common+0x138/0x258 [ 736.914467][ T8614] do_el0_svc+0x58/0x14c [ 736.915386][ T8614] el0_svc+0x7c/0x1f0 [ 736.916255][ T8614] el0t_64_sync_handler+0x84/0xe4 [ 736.917237][ T8614] el0t_64_sync+0x1a0/0x1a4 00:12:16 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000240), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000600)={0x0, 0xb0, &(0x7f00000005c0)={&(0x7f0000000500)={0x14, r1, 0x1, 0x0, 0x3}, 0x14}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wpan0\x00', 0x0}) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEV(r0, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x54, 0x0, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x54}, 0x1, 0x0, 0x0, 0x8001}, 0x24000890) r4 = syz_open_dev$midi(&(0x7f0000000000), 0xfffffffffffffffe, 0x40003) vmsplice(r4, &(0x7f0000000300)=[{&(0x7f0000000040)="07cac1297009d7b6ca20", 0xa}, {&(0x7f0000000080)="6d4de17aa2834bc7230c9f54e3281d8f8836fa4ce1799e6f3afbd731c2a5c62c2bf3d6178acbaefef5ee019f9d80209ee87b41f17f47e2facfe8576903e519cf389fdaf7a2e56078b195e247089c04f97545ae5b22304cb8a3e58cd8405f540ec9fc029e2ab2228569aae76ddf44da006d64d04928b85ad7370c1ee3193793690690459f7a0cdddeaaf3e185862cef577a102704fca3a07193c4a418741f28949eecbf7ea83fdb08fdfb2cb5d193b75f728f71cad8aadd78ac08cb3c4429df770eb16f212e031feaa886924efc6794a4", 0xd0}, {&(0x7f0000000180)="57de06d95c32730476ba23f896d5e9dda4b900e5859964d66d03c2d1522ee518036ab4903c780ce584304ec15aa6fddbf07ba295ca33002c646c1c7865e23d65746ebdc871f2e318b0831b1a66480b43028ef0ec1b1a1caee71a1e7b35f775171af2c1ab31fece00471f4c60571f5316a6f8a13f756380a80c9b6da706854b05b961f71748be2addd0f41960d6", 0x8d}, {&(0x7f0000000240)="d1ca4602b4ec6e1fa6026bbcb2496387b7f3e49a220188adf293de0cf975d487482bbd0ab70bcc00c10f989502909596e256b88bdc6de100b2b704d6d17fec9631af9246b1a53b45b0ff2a82414a6212e5441210e042b172be709fd96710012cc3a28bf9e5108c16d4e490dcaa6be32a59039b507370655845d225345fafbc6583fa17a4df0401787b632247191c7c297fa2d6bb54f05cf71cacca71446413a780f348971e954d893d958175fde382ce8d7de5e700d149fb80d833", 0xbb}], 0x4, 0xd) 00:12:16 executing program 1: r0 = syz_io_uring_setup(0x5a9, &(0x7f0000000100)={0x0, 0xd722, 0x800}, &(0x7f0000004000/0x2000)=nil, &(0x7f0000001000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[r1], 0x1) (async) syz_io_uring_setup(0x1d10, &(0x7f0000000180)={0x0, 0xa7ed, 0x800, 0x2, 0x3ba}, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000200)) (async) io_uring_enter(r0, 0x80040b3, 0x0, 0x12, &(0x7f00000000c0), 0x8) 00:12:16 executing program 4: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x3) 00:12:16 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000240), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000600)={0x0, 0xb0, &(0x7f00000005c0)={&(0x7f0000000500)={0x14, r1, 0x1, 0x0, 0x3}, 0x14}}, 0x0) (async) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000600)={0x0, 0xb0, &(0x7f00000005c0)={&(0x7f0000000500)={0x14, r1, 0x1, 0x0, 0x3}, 0x14}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wpan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEV(r0, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x54, 0x0, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x54}, 0x1, 0x0, 0x0, 0x8001}, 0x24000890) r4 = syz_open_dev$midi(&(0x7f0000000000), 0xfffffffffffffffe, 0x40003) vmsplice(r4, &(0x7f0000000300)=[{&(0x7f0000000040)="07cac1297009d7b6ca20", 0xa}, {&(0x7f0000000080)="6d4de17aa2834bc7230c9f54e3281d8f8836fa4ce1799e6f3afbd731c2a5c62c2bf3d6178acbaefef5ee019f9d80209ee87b41f17f47e2facfe8576903e519cf389fdaf7a2e56078b195e247089c04f97545ae5b22304cb8a3e58cd8405f540ec9fc029e2ab2228569aae76ddf44da006d64d04928b85ad7370c1ee3193793690690459f7a0cdddeaaf3e185862cef577a102704fca3a07193c4a418741f28949eecbf7ea83fdb08fdfb2cb5d193b75f728f71cad8aadd78ac08cb3c4429df770eb16f212e031feaa886924efc6794a4", 0xd0}, {&(0x7f0000000180)="57de06d95c32730476ba23f896d5e9dda4b900e5859964d66d03c2d1522ee518036ab4903c780ce584304ec15aa6fddbf07ba295ca33002c646c1c7865e23d65746ebdc871f2e318b0831b1a66480b43028ef0ec1b1a1caee71a1e7b35f775171af2c1ab31fece00471f4c60571f5316a6f8a13f756380a80c9b6da706854b05b961f71748be2addd0f41960d6", 0x8d}, {&(0x7f0000000240)="d1ca4602b4ec6e1fa6026bbcb2496387b7f3e49a220188adf293de0cf975d487482bbd0ab70bcc00c10f989502909596e256b88bdc6de100b2b704d6d17fec9631af9246b1a53b45b0ff2a82414a6212e5441210e042b172be709fd96710012cc3a28bf9e5108c16d4e490dcaa6be32a59039b507370655845d225345fafbc6583fa17a4df0401787b632247191c7c297fa2d6bb54f05cf71cacca71446413a780f348971e954d893d958175fde382ce8d7de5e700d149fb80d833", 0xbb}], 0x4, 0xd) 00:12:17 executing program 1: r0 = syz_io_uring_setup(0x5a9, &(0x7f0000000100)={0x0, 0xd722, 0x800}, &(0x7f0000004000/0x2000)=nil, &(0x7f0000001000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[r1], 0x1) (async) syz_io_uring_setup(0x1d10, &(0x7f0000000180)={0x0, 0xa7ed, 0x800, 0x2, 0x3ba}, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000200)) (async, rerun: 64) io_uring_enter(r0, 0x80040b3, 0x0, 0x12, &(0x7f00000000c0), 0x8) (rerun: 64) 00:12:17 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x5, 0x5}}}, 0x90) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}, 0x5, 0x5}}}, 0x90) 00:12:17 executing program 3: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000800000/0x800000)=nil, &(0x7f0000e1f000/0x2000)=nil, 0x0, 0x0) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf12]}, 0x8) 00:12:17 executing program 4: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x4) 00:12:17 executing program 5: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000800000/0x800000)=nil, &(0x7f0000e1f000/0x2000)=nil, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[r1], 0x1) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf0d]}, 0x8) (fail_nth: 56) 00:12:17 executing program 2: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8, 0x240000) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) io_setup(0x0, &(0x7f00000000c0)=0x0) r3 = accept$netrom(r1, 0x0, &(0x7f0000000180)) r4 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r4}}) r6 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000380)={r0, r0, 0xd}, 0x10) r7 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) r8 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r7}}) io_submit(r2, 0x3, &(0x7f00000004c0)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2, 0x8, r3, &(0x7f00000001c0)="fdadcffb52b671ccddceaa224e9da836206ed069543b4ba9342b0d2ac0f57e88efb8a0c470a3b17aadfe012f28bbe22c073cb3fc329f007fe775486e5bcbd7aeab12e4b610cda571e54b755c5f74cef7866c46b214d702e185780a15075b56c294e010af5fc0b983de47902a2a02b7", 0x6f, 0x20, 0x0, 0x1}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x8, 0x3b35, r1, &(0x7f0000000300)="3140f16c341fd1c4a38da3f2a7524bedba802b8f", 0x14, 0x4, 0x0, 0x3, r5}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0xfc00, r6, &(0x7f0000000440)="a64526e028d01bc2032288f50fb6f4997a8530b5af3b19fdf3a1a666c221d2bf714742d9cea6161b126ba02b219eeec56b36ff192f03dbad17e70152cda6ab8310b3e0995dc00a0e649b2e78eb1e92c6b6a381396125e2fa5ce2d9ead77ab437d34e73dd68", 0x65, 0x1ff, 0x0, 0x1, r8}]) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0xe, 0xc, &(0x7f0000000500)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x3}, @call={0x85, 0x0, 0x0, 0xd2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0xe94}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0xd8a6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x964b}, @map_val={0x18, 0x3, 0x2, 0x0, r1}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0x8}], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) setsockopt$MRT6_ASSERT(r0, 0x29, 0xcf, &(0x7f0000000080)=0x1, 0x4) 00:12:17 executing program 4: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x5) 00:12:17 executing program 1: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x0) pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$USBDEVFS_CLAIM_PORT(r2, 0x80045518, &(0x7f0000000180)=0x80) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[r1], 0x1) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf09]}, 0x8) 00:12:17 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x5, 0x5}}}, 0x90) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {}, 0x5, 0x5}}}, 0x90) 00:12:17 executing program 2: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8, 0x240000) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) io_setup(0x0, &(0x7f00000000c0)=0x0) r3 = accept$netrom(r1, 0x0, &(0x7f0000000180)) r4 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r4}}) r6 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000380)={r0, r0, 0xd}, 0x10) r7 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) r8 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r7}}) io_submit(r2, 0x3, &(0x7f00000004c0)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2, 0x8, r3, &(0x7f00000001c0)="fdadcffb52b671ccddceaa224e9da836206ed069543b4ba9342b0d2ac0f57e88efb8a0c470a3b17aadfe012f28bbe22c073cb3fc329f007fe775486e5bcbd7aeab12e4b610cda571e54b755c5f74cef7866c46b214d702e185780a15075b56c294e010af5fc0b983de47902a2a02b7", 0x6f, 0x20, 0x0, 0x1}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x8, 0x3b35, r1, &(0x7f0000000300)="3140f16c341fd1c4a38da3f2a7524bedba802b8f", 0x14, 0x4, 0x0, 0x3, r5}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0xfc00, r6, &(0x7f0000000440)="a64526e028d01bc2032288f50fb6f4997a8530b5af3b19fdf3a1a666c221d2bf714742d9cea6161b126ba02b219eeec56b36ff192f03dbad17e70152cda6ab8310b3e0995dc00a0e649b2e78eb1e92c6b6a381396125e2fa5ce2d9ead77ab437d34e73dd68", 0x65, 0x1ff, 0x0, 0x1, r8}]) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0xe, 0xc, &(0x7f0000000500)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x3}, @call={0x85, 0x0, 0x0, 0xd2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0xe94}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0xd8a6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x964b}, @map_val={0x18, 0x3, 0x2, 0x0, r1}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0x8}], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) setsockopt$MRT6_ASSERT(r0, 0x29, 0xcf, &(0x7f0000000080)=0x1, 0x4) syz_open_dev$vcsn(&(0x7f0000000000), 0x8, 0x240000) (async) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) (async) io_setup(0x0, &(0x7f00000000c0)) (async) accept$netrom(r1, 0x0, &(0x7f0000000180)) (async) openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) (async) openat$vcs(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) (async) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r4}}) (async) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000380)={r0, r0, 0xd}, 0x10) (async) openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) (async) openat$vcs(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) (async) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r7}}) (async) io_submit(r2, 0x3, &(0x7f00000004c0)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2, 0x8, r3, &(0x7f00000001c0)="fdadcffb52b671ccddceaa224e9da836206ed069543b4ba9342b0d2ac0f57e88efb8a0c470a3b17aadfe012f28bbe22c073cb3fc329f007fe775486e5bcbd7aeab12e4b610cda571e54b755c5f74cef7866c46b214d702e185780a15075b56c294e010af5fc0b983de47902a2a02b7", 0x6f, 0x20, 0x0, 0x1}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x8, 0x3b35, r1, &(0x7f0000000300)="3140f16c341fd1c4a38da3f2a7524bedba802b8f", 0x14, 0x4, 0x0, 0x3, r5}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0xfc00, r6, &(0x7f0000000440)="a64526e028d01bc2032288f50fb6f4997a8530b5af3b19fdf3a1a666c221d2bf714742d9cea6161b126ba02b219eeec56b36ff192f03dbad17e70152cda6ab8310b3e0995dc00a0e649b2e78eb1e92c6b6a381396125e2fa5ce2d9ead77ab437d34e73dd68", 0x65, 0x1ff, 0x0, 0x1, r8}]) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0xe, 0xc, &(0x7f0000000500)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x3}, @call={0x85, 0x0, 0x0, 0xd2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0xe94}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0xd8a6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x964b}, @map_val={0x18, 0x3, 0x2, 0x0, r1}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0x8}], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) setsockopt$MRT6_ASSERT(r0, 0x29, 0xcf, &(0x7f0000000080)=0x1, 0x4) (async) 00:12:17 executing program 4: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x6) [ 737.237043][ T8652] FAULT_INJECTION: forcing a failure. [ 737.237043][ T8652] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 737.247215][ T8652] CPU: 0 PID: 8652 Comm: syz-executor.5 Not tainted 5.15.120-syzkaller #0 [ 737.249012][ T8652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 737.251184][ T8652] Call trace: [ 737.251930][ T8652] dump_backtrace+0x0/0x530 [ 737.252896][ T8652] show_stack+0x2c/0x3c [ 737.253739][ T8652] dump_stack_lvl+0x108/0x170 [ 737.254700][ T8652] dump_stack+0x1c/0x58 [ 737.255598][ T8652] should_fail+0x400/0x5cc [ 737.256608][ T8652] should_fail_alloc_page+0x74/0xa8 [ 737.257691][ T8652] prepare_alloc_pages+0x160/0x4cc [ 737.258800][ T8652] __alloc_pages+0x138/0x674 [ 737.259706][ T8652] alloc_pages+0x390/0x634 [ 737.260658][ T8652] new_slab+0xec/0x56c [ 737.261458][ T8652] ___slab_alloc+0x6bc/0xdbc [ 737.262416][ T8652] kmem_cache_alloc_bulk+0x1a0/0x4c0 [ 737.263617][ T8652] io_submit_sqes+0x4f00/0x8970 [ 737.264602][ T8652] __arm64_sys_io_uring_enter+0x2a0/0x1cb8 [ 737.265806][ T8652] invoke_syscall+0x98/0x2b8 [ 737.266760][ T8652] el0_svc_common+0x138/0x258 [ 737.267712][ T8652] do_el0_svc+0x58/0x14c [ 737.268545][ T8652] el0_svc+0x7c/0x1f0 [ 737.269475][ T8652] el0t_64_sync_handler+0x84/0xe4 00:12:17 executing program 3: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000800000/0x800000)=nil, &(0x7f0000e1f000/0x2000)=nil, 0x0, 0x0) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf14]}, 0x8) [ 737.270629][ T8652] el0t_64_sync+0x1a0/0x1a4 00:12:17 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x5, 0x5}}}, 0x90) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {}, 0x5, 0x5}}}, 0x90) 00:12:17 executing program 4: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x7) 00:12:17 executing program 2: syz_open_dev$vcsn(&(0x7f0000000000), 0x8, 0x240000) (async) r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8, 0x240000) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) io_setup(0x0, &(0x7f00000000c0)=0x0) r3 = accept$netrom(r1, 0x0, &(0x7f0000000180)) r4 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r4}}) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000380)={r0, r0, 0xd}, 0x10) (async) r6 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000380)={r0, r0, 0xd}, 0x10) r7 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) r8 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r7}}) (async) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r7}}) io_submit(r2, 0x3, &(0x7f00000004c0)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2, 0x8, r3, &(0x7f00000001c0)="fdadcffb52b671ccddceaa224e9da836206ed069543b4ba9342b0d2ac0f57e88efb8a0c470a3b17aadfe012f28bbe22c073cb3fc329f007fe775486e5bcbd7aeab12e4b610cda571e54b755c5f74cef7866c46b214d702e185780a15075b56c294e010af5fc0b983de47902a2a02b7", 0x6f, 0x20, 0x0, 0x1}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x8, 0x3b35, r1, &(0x7f0000000300)="3140f16c341fd1c4a38da3f2a7524bedba802b8f", 0x14, 0x4, 0x0, 0x3, r5}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0xfc00, r6, &(0x7f0000000440)="a64526e028d01bc2032288f50fb6f4997a8530b5af3b19fdf3a1a666c221d2bf714742d9cea6161b126ba02b219eeec56b36ff192f03dbad17e70152cda6ab8310b3e0995dc00a0e649b2e78eb1e92c6b6a381396125e2fa5ce2d9ead77ab437d34e73dd68", 0x65, 0x1ff, 0x0, 0x1, r8}]) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0xe, 0xc, &(0x7f0000000500)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x3}, @call={0x85, 0x0, 0x0, 0xd2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0xe94}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0xd8a6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x964b}, @map_val={0x18, 0x3, 0x2, 0x0, r1}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0x8}], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) setsockopt$MRT6_ASSERT(r0, 0x29, 0xcf, &(0x7f0000000080)=0x1, 0x4) (async) setsockopt$MRT6_ASSERT(r0, 0x29, 0xcf, &(0x7f0000000080)=0x1, 0x4) 00:12:17 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x5, 0x5}}}, 0x90) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {}, 0x5, 0x5}}}, 0x90) 00:12:17 executing program 4: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x8) 00:12:17 executing program 5: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000800000/0x800000)=nil, &(0x7f0000e1f000/0x2000)=nil, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[r1], 0x1) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf0d]}, 0x8) (fail_nth: 57) 00:12:17 executing program 3: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000800000/0x800000)=nil, &(0x7f0000e1f000/0x2000)=nil, 0x0, 0x0) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf15]}, 0x8) [ 737.542974][ T8688] FAULT_INJECTION: forcing a failure. [ 737.542974][ T8688] name failslab, interval 1, probability 0, space 0, times 0 [ 737.545815][ T8688] CPU: 0 PID: 8688 Comm: syz-executor.5 Not tainted 5.15.120-syzkaller #0 [ 737.547606][ T8688] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 737.549706][ T8688] Call trace: [ 737.550340][ T8688] dump_backtrace+0x0/0x530 [ 737.551377][ T8688] show_stack+0x2c/0x3c [ 737.552269][ T8688] dump_stack_lvl+0x108/0x170 [ 737.553195][ T8688] dump_stack+0x1c/0x58 [ 737.554064][ T8688] should_fail+0x400/0x5cc [ 737.554898][ T8688] __should_failslab+0xbc/0x110 [ 737.555870][ T8688] should_failslab+0x10/0x28 [ 737.556762][ T8688] slab_pre_alloc_hook+0x64/0xe8 [ 737.557857][ T8688] kmem_cache_alloc_bulk+0x50/0x4c0 [ 737.558990][ T8688] io_submit_sqes+0x4f00/0x8970 [ 737.559966][ T8688] __arm64_sys_io_uring_enter+0x2a0/0x1cb8 [ 737.561134][ T8688] invoke_syscall+0x98/0x2b8 [ 737.562040][ T8688] el0_svc_common+0x138/0x258 [ 737.563003][ T8688] do_el0_svc+0x58/0x14c [ 737.563821][ T8688] el0_svc+0x7c/0x1f0 [ 737.564661][ T8688] el0t_64_sync_handler+0x84/0xe4 [ 737.565681][ T8688] el0t_64_sync+0x1a0/0x1a4 [ 737.566623][ C0] vkms_vblank_simulate: vblank timer overrun 00:12:17 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x5, 0x5}}}, 0x90) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"000000000000000000000200"}, 0x5, 0x5}}}, 0x90) 00:12:17 executing program 1: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x0) pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$USBDEVFS_CLAIM_PORT(r2, 0x80045518, &(0x7f0000000180)=0x80) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[r1], 0x1) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf09]}, 0x8) syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) (async) syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x0) (async) pipe2$watch_queue(&(0x7f00000000c0), 0x80) (async) ioctl$USBDEVFS_CLAIM_PORT(r2, 0x80045518, &(0x7f0000000180)=0x80) (async) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[r1], 0x1) (async) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf09]}, 0x8) (async) 00:12:17 executing program 4: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x9) 00:12:17 executing program 2: ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000180)={{0x1, 0x1, 0x18}, './file0\x00'}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0xe, 0x2, &(0x7f00000000c0)=@framed={{0x18, 0x2}, [@btf_id={0x18, 0x3, 0x3, 0x0, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x8}]}, &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r0 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="3c0000001000050423eeffffffffffff02000000", @ANYRES32=r5, @ANYBLOB="0100490001006272696467656a07fc1d591bba517dcc202914dbe5fc3d323460995a86bd2cf585fea487ae8009c88895c2412b0c7246325481a66a79762fd37556f0dc778844d770b755839ce5afa7b86b82c92a7cced15d5e0bf611460c5c7737da293f7b36e814767c5a2eb0c8208bba94a3f11946b0e777d74b"], 0x3c}}, 0x0) bind$packet(r2, &(0x7f0000000100)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="4000000010003704000000000000000000000000edb45a0d07003c299e01cfbd5939dc9a90074ad0abf0", @ANYRES32=r6, @ANYBLOB="00000000000000002000128008000100677470001400028008000100", @ANYRES32, @ANYBLOB="08000200", @ANYRES32, @ANYBLOB], 0x40}}, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x4c, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@ETHTOOL_A_FEATURES_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x4080) 00:12:17 executing program 3: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000800000/0x800000)=nil, &(0x7f0000e1f000/0x2000)=nil, 0x0, 0x0) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf16]}, 0x8) [ 737.629504][ T8693] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 737.634595][ T8693] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. 00:12:17 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x5, 0x5}}}, 0x90) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}, 0x5, 0x5}}}, 0x90) 00:12:17 executing program 4: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0xa) 00:12:17 executing program 2: ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000180)={{0x1, 0x1, 0x18}, './file0\x00'}) (async, rerun: 32) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0xe, 0x2, &(0x7f00000000c0)=@framed={{0x18, 0x2}, [@btf_id={0x18, 0x3, 0x3, 0x0, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x8}]}, &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async, rerun: 32) r0 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r2 = socket$packet(0x11, 0x3, 0x300) (async, rerun: 32) r3 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r4 = socket(0x10, 0x803, 0x0) (rerun: 32) sendmsg$BATADV_CMD_GET_MESH(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) (async) getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="3c0000001000050423eeffffffffffff02000000", @ANYRES32=r5, @ANYBLOB="0100490001006272696467656a07fc1d591bba517dcc202914dbe5fc3d323460995a86bd2cf585fea487ae8009c88895c2412b0c7246325481a66a79762fd37556f0dc778844d770b755839ce5afa7b86b82c92a7cced15d5e0bf611460c5c7737da293f7b36e814767c5a2eb0c8208bba94a3f11946b0e777d74b"], 0x3c}}, 0x0) bind$packet(r2, &(0x7f0000000100)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) (async) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="4000000010003704000000000000000000000000edb45a0d07003c299e01cfbd5939dc9a90074ad0abf0", @ANYRES32=r6, @ANYBLOB="00000000000000002000128008000100677470001400028008000100", @ANYRES32, @ANYBLOB="08000200", @ANYRES32, @ANYBLOB], 0x40}}, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x4c, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@ETHTOOL_A_FEATURES_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x4080) 00:12:17 executing program 4: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0xb) 00:12:17 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x5, 0x5}}}, 0x90) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"000000000000000000000000000100"}, 0x5, 0x5}}}, 0x90) 00:12:17 executing program 5: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000800000/0x800000)=nil, &(0x7f0000e1f000/0x2000)=nil, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[r1], 0x1) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf0d]}, 0x8) (fail_nth: 58) 00:12:17 executing program 3: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000800000/0x800000)=nil, &(0x7f0000e1f000/0x2000)=nil, 0x0, 0x0) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf17]}, 0x8) 00:12:17 executing program 4: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0xc) [ 737.860567][ T8722] FAULT_INJECTION: forcing a failure. [ 737.860567][ T8722] name failslab, interval 1, probability 0, space 0, times 0 [ 737.863291][ T8722] CPU: 0 PID: 8722 Comm: syz-executor.5 Not tainted 5.15.120-syzkaller #0 [ 737.865025][ T8722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 737.867184][ T8722] Call trace: [ 737.867842][ T8722] dump_backtrace+0x0/0x530 [ 737.868814][ T8722] show_stack+0x2c/0x3c [ 737.869659][ T8722] dump_stack_lvl+0x108/0x170 [ 737.870651][ T8722] dump_stack+0x1c/0x58 [ 737.871495][ T8722] should_fail+0x400/0x5cc [ 737.872424][ T8722] __should_failslab+0xbc/0x110 [ 737.873390][ T8722] should_failslab+0x10/0x28 [ 737.874389][ T8722] slab_pre_alloc_hook+0x64/0xe8 [ 737.875438][ T8722] __kmalloc_node+0xbc/0x5b8 [ 737.876384][ T8722] memcg_alloc_page_obj_cgroups+0x80/0x174 [ 737.877574][ T8722] new_slab+0x120/0x56c [ 737.878424][ T8722] ___slab_alloc+0x6bc/0xdbc [ 737.879332][ T8722] kmem_cache_alloc_bulk+0x1a0/0x4c0 [ 737.880391][ T8722] io_submit_sqes+0x4f00/0x8970 [ 737.881383][ T8722] __arm64_sys_io_uring_enter+0x2a0/0x1cb8 [ 737.882516][ T8722] invoke_syscall+0x98/0x2b8 [ 737.883450][ T8722] el0_svc_common+0x138/0x258 [ 737.884438][ T8722] do_el0_svc+0x58/0x14c [ 737.885364][ T8722] el0_svc+0x7c/0x1f0 [ 737.886215][ T8722] el0t_64_sync_handler+0x84/0xe4 [ 737.887340][ T8722] el0t_64_sync+0x1a0/0x1a4 [ 737.888262][ C0] vkms_vblank_simulate: vblank timer overrun 00:12:17 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x5, 0x5}}}, 0x90) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"000000000000000000000000000200"}, 0x5, 0x5}}}, 0x90) 00:12:17 executing program 4: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0xd) 00:12:17 executing program 3: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000800000/0x800000)=nil, &(0x7f0000e1f000/0x2000)=nil, 0x0, 0x0) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf18]}, 0x8) 00:12:17 executing program 1: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x0) pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$USBDEVFS_CLAIM_PORT(r2, 0x80045518, &(0x7f0000000180)=0x80) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[r1], 0x1) (async) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[r1], 0x1) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf09]}, 0x8) (async) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf09]}, 0x8) 00:12:17 executing program 5: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000800000/0x800000)=nil, &(0x7f0000e1f000/0x2000)=nil, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[r1], 0x1) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf0d]}, 0x8) (fail_nth: 59) 00:12:18 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x5, 0x5}}}, 0x90) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}, 0x5, 0x5}}}, 0x90) [ 738.090937][ T8738] FAULT_INJECTION: forcing a failure. [ 738.090937][ T8738] name failslab, interval 1, probability 0, space 0, times 0 [ 738.099819][ T8738] CPU: 1 PID: 8738 Comm: syz-executor.5 Not tainted 5.15.120-syzkaller #0 [ 738.101681][ T8738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 738.103851][ T8738] Call trace: [ 738.104506][ T8738] dump_backtrace+0x0/0x530 [ 738.105474][ T8738] show_stack+0x2c/0x3c [ 738.106234][ T8738] dump_stack_lvl+0x108/0x170 [ 738.107250][ T8738] dump_stack+0x1c/0x58 [ 738.108100][ T8738] should_fail+0x400/0x5cc [ 738.108954][ T8738] __should_failslab+0xbc/0x110 [ 738.109965][ T8738] should_failslab+0x10/0x28 [ 738.110886][ T8738] slab_pre_alloc_hook+0x64/0xe8 [ 738.111880][ T8738] kmem_cache_alloc_bulk+0x50/0x4c0 [ 738.112854][ T8738] io_submit_sqes+0x4f00/0x8970 [ 738.113880][ T8738] __arm64_sys_io_uring_enter+0x2a0/0x1cb8 [ 738.115039][ T8738] invoke_syscall+0x98/0x2b8 [ 738.116039][ T8738] el0_svc_common+0x138/0x258 [ 738.117079][ T8738] do_el0_svc+0x58/0x14c [ 738.118001][ T8738] el0_svc+0x7c/0x1f0 [ 738.118765][ T8738] el0t_64_sync_handler+0x84/0xe4 [ 738.119862][ T8738] el0t_64_sync+0x1a0/0x1a4 [ 738.827051][T15276] ------------[ cut here ]------------ [ 738.828353][T15276] WARNING: CPU: 1 PID: 15276 at io_uring/io_uring.c:9696 io_ring_exit_work+0x228/0x126c [ 738.830429][T15276] Modules linked in: [ 738.831198][T15276] CPU: 1 PID: 15276 Comm: kworker/u4:20 Not tainted 5.15.120-syzkaller #0 [ 738.832845][T15276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 738.834908][T15276] Workqueue: events_unbound io_ring_exit_work [ 738.836282][T15276] pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 738.837911][T15276] pc : io_ring_exit_work+0x228/0x126c [ 738.839118][T15276] lr : io_ring_exit_work+0x224/0x126c [ 738.840210][T15276] sp : ffff80001e4679a0 [ 738.841109][T15276] x29: ffff80001e467b00 x28: 1fffe0001acbcc94 x27: 0000000000001770 [ 738.842870][T15276] x26: ffff80000a8f42f0 x25: ffff0000d65e64a0 x24: ffff0000d65e6000 [ 738.844509][T15276] x23: dfff800000000000 x22: 000000010000ab64 x21: ffff0000d65e6920 [ 738.846331][T15276] x20: ffff80001e467a40 x19: fffffffffffffffb x18: 1fffe0003690338e [ 738.847909][T15276] x17: 1fffe0003690338e x16: ffff80000824cbf4 x15: ffff80001498f100 [ 738.849617][T15276] x14: 1ffff0000291e06a x13: ffffffffffffffff x12: 0000000000000000 [ 738.851246][T15276] x11: ff8080000a924098 x10: 0000000000000000 x9 : ffff80000a924098 [ 738.852922][T15276] x8 : ffff000120909b40 x7 : 0000000000000000 x6 : 0000000000000000 [ 738.854622][T15276] x5 : 0000000000000080 x4 : 0000000000000000 x3 : ffff800008303750 [ 738.856293][T15276] x2 : 0000000000000001 x1 : fffffffffffffffb x0 : 0000000000000000 [ 738.858072][T15276] Call trace: [ 738.858716][T15276] io_ring_exit_work+0x228/0x126c [ 738.859704][T15276] process_one_work+0x790/0x11b8 [ 738.860704][T15276] worker_thread+0x910/0x1034 [ 738.861667][T15276] kthread+0x37c/0x45c [ 738.862462][T15276] ret_from_fork+0x10/0x20 [ 738.863461][T15276] irq event stamp: 561674 [ 738.864344][T15276] hardirqs last enabled at (561673): [] _raw_spin_unlock_irq+0x9c/0x134 [ 738.866441][T15276] hardirqs last disabled at (561674): [] el1_dbg+0x24/0x80 [ 738.868221][T15276] softirqs last enabled at (556376): [] __do_softirq+0xb5c/0xe20 [ 738.870162][T15276] softirqs last disabled at (556351): [] __irq_exit_rcu+0x28c/0x534 [ 738.872172][T15276] ---[ end trace 4097ae424344978a ]--- 00:12:19 executing program 2: ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000180)={{0x1, 0x1, 0x18}, './file0\x00'}) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0xe, 0x2, &(0x7f00000000c0)=@framed={{0x18, 0x2}, [@btf_id={0x18, 0x3, 0x3, 0x0, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x8}]}, &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) r0 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$packet(0x11, 0x3, 0x300) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="3c0000001000050423eeffffffffffff02000000", @ANYRES32=r5, @ANYBLOB="0100490001006272696467656a07fc1d591bba517dcc202914dbe5fc3d323460995a86bd2cf585fea487ae8009c88895c2412b0c7246325481a66a79762fd37556f0dc778844d770b755839ce5afa7b86b82c92a7cced15d5e0bf611460c5c7737da293f7b36e814767c5a2eb0c8208bba94a3f11946b0e777d74b"], 0x3c}}, 0x0) (async) bind$packet(r2, &(0x7f0000000100)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="4000000010003704000000000000000000000000edb45a0d07003c299e01cfbd5939dc9a90074ad0abf0", @ANYRES32=r6, @ANYBLOB="00000000000000002000128008000100677470001400028008000100", @ANYRES32, @ANYBLOB="08000200", @ANYRES32, @ANYBLOB], 0x40}}, 0x0) (async) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x4c, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@ETHTOOL_A_FEATURES_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x4080) 00:12:19 executing program 4: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0xe) 00:12:19 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x5, 0x5}}}, 0x90) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {}, 0x5, 0x5}}}, 0x90) 00:12:19 executing program 3: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000800000/0x800000)=nil, &(0x7f0000e1f000/0x2000)=nil, 0x0, 0x0) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf19]}, 0x8) 00:12:19 executing program 5: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000800000/0x800000)=nil, &(0x7f0000e1f000/0x2000)=nil, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[r1], 0x1) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf0d]}, 0x8) (fail_nth: 60) 00:12:19 executing program 1: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[r1], 0x1) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf09]}, 0x8) io_uring_setup(0x3f59, &(0x7f0000000180)={0x0, 0x8043, 0x400, 0x1, 0x114, 0x0, r0}) [ 739.390844][ T8746] FAULT_INJECTION: forcing a failure. [ 739.390844][ T8746] name failslab, interval 1, probability 0, space 0, times 0 [ 739.393746][ T8746] CPU: 1 PID: 8746 Comm: syz-executor.5 Tainted: G W 5.15.120-syzkaller #0 [ 739.395768][ T8746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 739.397734][ T8746] Call trace: [ 739.398407][ T8746] dump_backtrace+0x0/0x530 [ 739.399482][ T8746] show_stack+0x2c/0x3c [ 739.400407][ T8746] dump_stack_lvl+0x108/0x170 [ 739.401347][ T8746] dump_stack+0x1c/0x58 [ 739.402190][ T8746] should_fail+0x400/0x5cc [ 739.403101][ T8746] __should_failslab+0xbc/0x110 [ 739.404126][ T8746] should_failslab+0x10/0x28 [ 739.405100][ T8746] slab_pre_alloc_hook+0x64/0xe8 00:12:19 executing program 4: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x10) [ 739.406051][ T8746] kmem_cache_alloc_bulk+0x50/0x4c0 [ 739.407272][ T8746] io_submit_sqes+0x4f00/0x8970 [ 739.408339][ T8746] __arm64_sys_io_uring_enter+0x2a0/0x1cb8 [ 739.409560][ T8746] invoke_syscall+0x98/0x2b8 [ 739.410574][ T8746] el0_svc_common+0x138/0x258 [ 739.411682][ T8746] do_el0_svc+0x58/0x14c [ 739.412590][ T8746] el0_svc+0x7c/0x1f0 [ 739.413617][ T8746] el0t_64_sync_handler+0x84/0xe4 [ 739.414696][ T8746] el0t_64_sync+0x1a0/0x1a4 00:12:19 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x5, 0x5}}}, 0x90) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {}, 0x5, 0x5}}}, 0x90) [ 739.449639][ T8753] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. 00:12:19 executing program 4: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x11) 00:12:19 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x5, 0x5}}}, 0x90) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {}, 0x5, 0x5}}}, 0x90) 00:12:19 executing program 2: ioctl$VHOST_VDPA_GET_IOVA_RANGE(0xffffffffffffffff, 0x8010af78, &(0x7f0000000000)) r0 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xc, 0x12, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x6ad0, &(0x7f0000000040)={0x0, 0x2d, 0xe08, 0x4, 0x35}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000500)=@IORING_OP_RECVMSG={0xa, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @local}, 0x80, &(0x7f0000000200)=[{&(0x7f00000002c0)=""/210, 0xd2}, {&(0x7f0000000440)=""/89, 0x59}], 0x2, &(0x7f00000003c0)=""/62, 0x3e}, 0x0, 0x10061, 0x1, {0x1, r2}}, 0x76d) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0xe, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="1802000000000000000000000061106c000000000095de2201d7000000000000"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:12:19 executing program 3: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000800000/0x800000)=nil, &(0x7f0000e1f000/0x2000)=nil, 0x0, 0x0) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf1a]}, 0x8) 00:12:19 executing program 5: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000800000/0x800000)=nil, &(0x7f0000e1f000/0x2000)=nil, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[r1], 0x1) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf0d]}, 0x8) (fail_nth: 61) 00:12:19 executing program 4: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x12) 00:12:19 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x5, 0x5}}}, 0x90) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000200"}, 0x5, 0x5}}}, 0x90) 00:12:19 executing program 2: ioctl$VHOST_VDPA_GET_IOVA_RANGE(0xffffffffffffffff, 0x8010af78, &(0x7f0000000000)) r0 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xc, 0x12, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x6ad0, &(0x7f0000000040)={0x0, 0x2d, 0xe08, 0x4, 0x35}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000500)=@IORING_OP_RECVMSG={0xa, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @local}, 0x80, &(0x7f0000000200)=[{&(0x7f00000002c0)=""/210, 0xd2}, {&(0x7f0000000440)=""/89, 0x59}], 0x2, &(0x7f00000003c0)=""/62, 0x3e}, 0x0, 0x10061, 0x1, {0x1, r2}}, 0x76d) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0xe, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="1802000000000000000000000061106c000000000095de2201d7000000000000"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) ioctl$VHOST_VDPA_GET_IOVA_RANGE(0xffffffffffffffff, 0x8010af78, &(0x7f0000000000)) (async) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xc, 0x12, 0xffffffffffffffff, 0x8000000) (async) syz_io_uring_setup(0x6ad0, &(0x7f0000000040)={0x0, 0x2d, 0xe08, 0x4, 0x35}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (async) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) (async) syz_io_uring_submit(r0, r1, &(0x7f0000000500)=@IORING_OP_RECVMSG={0xa, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @local}, 0x80, &(0x7f0000000200)=[{&(0x7f00000002c0)=""/210, 0xd2}, {&(0x7f0000000440)=""/89, 0x59}], 0x2, &(0x7f00000003c0)=""/62, 0x3e}, 0x0, 0x10061, 0x1, {0x1, r2}}, 0x76d) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0xe, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="1802000000000000000000000061106c000000000095de2201d7000000000000"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) [ 739.677577][ T8775] FAULT_INJECTION: forcing a failure. [ 739.677577][ T8775] name failslab, interval 1, probability 0, space 0, times 0 [ 739.696999][ T8775] CPU: 1 PID: 8775 Comm: syz-executor.5 Tainted: G W 5.15.120-syzkaller #0 [ 739.699156][ T8775] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 739.701230][ T8775] Call trace: [ 739.701905][ T8775] dump_backtrace+0x0/0x530 [ 739.702852][ T8775] show_stack+0x2c/0x3c [ 739.703793][ T8775] dump_stack_lvl+0x108/0x170 [ 739.704719][ T8775] dump_stack+0x1c/0x58 [ 739.705568][ T8775] should_fail+0x400/0x5cc [ 739.706571][ T8775] __should_failslab+0xbc/0x110 [ 739.707576][ T8775] should_failslab+0x10/0x28 [ 739.708722][ T8775] slab_pre_alloc_hook+0x64/0xe8 [ 739.709781][ T8775] __kmalloc_node+0xbc/0x5b8 [ 739.710685][ T8775] memcg_alloc_page_obj_cgroups+0x80/0x174 [ 739.711848][ T8775] new_slab+0x120/0x56c [ 739.712699][ T8775] ___slab_alloc+0x6bc/0xdbc [ 739.713706][ T8775] kmem_cache_alloc_bulk+0x1a0/0x4c0 [ 739.714821][ T8775] io_submit_sqes+0x4f00/0x8970 [ 739.716001][ T8775] __arm64_sys_io_uring_enter+0x2a0/0x1cb8 [ 739.717278][ T8775] invoke_syscall+0x98/0x2b8 [ 739.718264][ T8775] el0_svc_common+0x138/0x258 [ 739.719178][ T8775] do_el0_svc+0x58/0x14c [ 739.720043][ T8775] el0_svc+0x7c/0x1f0 [ 739.720839][ T8775] el0t_64_sync_handler+0x84/0xe4 [ 739.721875][ T8775] el0t_64_sync+0x1a0/0x1a4 00:12:19 executing program 4: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x18) 00:12:19 executing program 1: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[r1], 0x1) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf09]}, 0x8) io_uring_setup(0x3f59, &(0x7f0000000180)={0x0, 0x8043, 0x400, 0x1, 0x114, 0x0, r0}) syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) (async) syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x0) (async) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[r1], 0x1) (async) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf09]}, 0x8) (async) io_uring_setup(0x3f59, &(0x7f0000000180)={0x0, 0x8043, 0x400, 0x1, 0x114, 0x0, r0}) (async) 00:12:19 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x5, 0x5}}}, 0x90) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}, 0x5, 0x5}}}, 0x90) 00:12:19 executing program 3: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000800000/0x800000)=nil, &(0x7f0000e1f000/0x2000)=nil, 0x0, 0x0) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf1b]}, 0x8) 00:12:19 executing program 2: ioctl$VHOST_VDPA_GET_IOVA_RANGE(0xffffffffffffffff, 0x8010af78, &(0x7f0000000000)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xc, 0x12, 0xffffffffffffffff, 0x8000000) (async) r0 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xc, 0x12, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x6ad0, &(0x7f0000000040)={0x0, 0x2d, 0xe08, 0x4, 0x35}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) (async) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000500)=@IORING_OP_RECVMSG={0xa, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @local}, 0x80, &(0x7f0000000200)=[{&(0x7f00000002c0)=""/210, 0xd2}, {&(0x7f0000000440)=""/89, 0x59}], 0x2, &(0x7f00000003c0)=""/62, 0x3e}, 0x0, 0x10061, 0x1, {0x1, r2}}, 0x76d) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0xe, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="1802000000000000000000000061106c000000000095de2201d7000000000000"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:12:19 executing program 2: r0 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) write$UHID_INPUT2(r1, &(0x7f0000000000)={0xc, {0x5a, "d42108207ff548b27535ce787a332c4c13294ec55594e424153e7e7714e8130b045ee5e4a609c34ecd7f1aebad8d606ddd6e1b08648782a157c5b3fbe5c35aacd5549a33d4ebd4ce0ae248ba69b26cd818a664e7e77b40f47953"}}, 0x60) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0xe, 0x4, &(0x7f00000000c0)=@framed={{0x18, 0x2}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x6c}]}, &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:12:19 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x5, 0x5}}}, 0x90) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000100"}, 0x5, 0x5}}}, 0x90) 00:12:19 executing program 4: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x25) 00:12:19 executing program 5: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000800000/0x800000)=nil, &(0x7f0000e1f000/0x2000)=nil, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[r1], 0x1) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf0d]}, 0x8) (fail_nth: 62) 00:12:19 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x5, 0x5}}}, 0x90) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000200"}, 0x5, 0x5}}}, 0x90) 00:12:19 executing program 2: r0 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) (async) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) write$UHID_INPUT2(r1, &(0x7f0000000000)={0xc, {0x5a, "d42108207ff548b27535ce787a332c4c13294ec55594e424153e7e7714e8130b045ee5e4a609c34ecd7f1aebad8d606ddd6e1b08648782a157c5b3fbe5c35aacd5549a33d4ebd4ce0ae248ba69b26cd818a664e7e77b40f47953"}}, 0x60) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0xe, 0x4, &(0x7f00000000c0)=@framed={{0x18, 0x2}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x6c}]}, &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:12:19 executing program 4: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x5c) 00:12:19 executing program 3: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000800000/0x800000)=nil, &(0x7f0000e1f000/0x2000)=nil, 0x0, 0x0) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf1c]}, 0x8) [ 739.992531][ T8804] FAULT_INJECTION: forcing a failure. [ 739.992531][ T8804] name failslab, interval 1, probability 0, space 0, times 0 [ 740.004378][ T8804] CPU: 1 PID: 8804 Comm: syz-executor.5 Tainted: G W 5.15.120-syzkaller #0 [ 740.006421][ T8804] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 740.008722][ T8804] Call trace: [ 740.009381][ T8804] dump_backtrace+0x0/0x530 [ 740.010396][ T8804] show_stack+0x2c/0x3c [ 740.011253][ T8804] dump_stack_lvl+0x108/0x170 [ 740.012227][ T8804] dump_stack+0x1c/0x58 [ 740.013137][ T8804] should_fail+0x400/0x5cc [ 740.014016][ T8804] __should_failslab+0xbc/0x110 [ 740.015114][ T8804] should_failslab+0x10/0x28 [ 740.015996][ T8804] slab_pre_alloc_hook+0x64/0xe8 [ 740.016963][ T8804] __kmalloc_node+0xbc/0x5b8 [ 740.017955][ T8804] memcg_alloc_page_obj_cgroups+0x80/0x174 [ 740.019129][ T8804] new_slab+0x120/0x56c [ 740.019951][ T8804] ___slab_alloc+0x6bc/0xdbc [ 740.020873][ T8804] kmem_cache_alloc_bulk+0x1a0/0x4c0 [ 740.022037][ T8804] io_submit_sqes+0x4f00/0x8970 [ 740.023016][ T8804] __arm64_sys_io_uring_enter+0x2a0/0x1cb8 [ 740.024185][ T8804] invoke_syscall+0x98/0x2b8 [ 740.025200][ T8804] el0_svc_common+0x138/0x258 [ 740.026265][ T8804] do_el0_svc+0x58/0x14c [ 740.027140][ T8804] el0_svc+0x7c/0x1f0 [ 740.028062][ T8804] el0t_64_sync_handler+0x84/0xe4 [ 740.029027][ T8804] el0t_64_sync+0x1a0/0x1a4 00:12:20 executing program 1: syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) (async) r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[r1], 0x1) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf09]}, 0x8) io_uring_setup(0x3f59, &(0x7f0000000180)={0x0, 0x8043, 0x400, 0x1, 0x114, 0x0, r0}) 00:12:20 executing program 2: r0 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) (async) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) write$UHID_INPUT2(r1, &(0x7f0000000000)={0xc, {0x5a, "d42108207ff548b27535ce787a332c4c13294ec55594e424153e7e7714e8130b045ee5e4a609c34ecd7f1aebad8d606ddd6e1b08648782a157c5b3fbe5c35aacd5549a33d4ebd4ce0ae248ba69b26cd818a664e7e77b40f47953"}}, 0x60) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0xe, 0x4, &(0x7f00000000c0)=@framed={{0x18, 0x2}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x6c}]}, &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:12:20 executing program 5: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000800000/0x800000)=nil, &(0x7f0000e1f000/0x2000)=nil, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[r1], 0x1) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf0d]}, 0x8) (fail_nth: 63) 00:12:20 executing program 3: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000800000/0x800000)=nil, &(0x7f0000e1f000/0x2000)=nil, 0x0, 0x0) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf1d]}, 0x8) 00:12:20 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x5, 0x5}}}, 0x90) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}, 0x5, 0x5}}}, 0x90) 00:12:20 executing program 4: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x300) 00:12:20 executing program 4: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x500) 00:12:20 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0xe, 0x4, &(0x7f00000000c0)=@framed={{0x18, 0x2}, [@ldst={0x1, 0x0, 0x2, 0x0, 0x1, 0x6c}]}, &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff01}, 0x80) [ 740.303662][ T8821] FAULT_INJECTION: forcing a failure. [ 740.303662][ T8821] name failslab, interval 1, probability 0, space 0, times 0 [ 740.309432][ T8821] CPU: 0 PID: 8821 Comm: syz-executor.5 Tainted: G W 5.15.120-syzkaller #0 [ 740.311549][ T8821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 740.313786][ T8821] Call trace: [ 740.314475][ T8821] dump_backtrace+0x0/0x530 [ 740.315448][ T8821] show_stack+0x2c/0x3c [ 740.316325][ T8821] dump_stack_lvl+0x108/0x170 [ 740.317356][ T8821] dump_stack+0x1c/0x58 [ 740.318220][ T8821] should_fail+0x400/0x5cc [ 740.319128][ T8821] __should_failslab+0xbc/0x110 [ 740.320148][ T8821] should_failslab+0x10/0x28 [ 740.321159][ T8821] slab_pre_alloc_hook+0x64/0xe8 [ 740.322204][ T8821] kmem_cache_alloc_bulk+0x50/0x4c0 [ 740.323353][ T8821] io_submit_sqes+0x4f00/0x8970 [ 740.324392][ T8821] __arm64_sys_io_uring_enter+0x2a0/0x1cb8 [ 740.325657][ T8821] invoke_syscall+0x98/0x2b8 [ 740.326626][ T8821] el0_svc_common+0x138/0x258 [ 740.327649][ T8821] do_el0_svc+0x58/0x14c [ 740.328479][ T8821] el0_svc+0x7c/0x1f0 [ 740.329413][ T8821] el0t_64_sync_handler+0x84/0xe4 [ 740.330414][ T8821] el0t_64_sync+0x1a0/0x1a4 [ 740.331360][ C0] vkms_vblank_simulate: vblank timer overrun 00:12:20 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x5, 0x5}}}, 0x90) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {}, 0x5, 0x5}}}, 0x90) 00:12:20 executing program 4: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x600) 00:12:20 executing program 1: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x0) r2 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) ioctl$USBDEVFS_FREE_STREAMS(r3, 0x8008551d, &(0x7f00000000c0)={0x2033, 0x2, [{0xb}, {0xc}]}) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[r1], 0x1) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf09]}, 0x8) 00:12:20 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x5, 0x5}}}, 0x90) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {}, 0x5, 0x5}}}, 0x90) 00:12:20 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0xe, 0x4, &(0x7f00000000c0)=@framed={{0x18, 0x2}, [@ldst={0x1, 0x0, 0x2, 0x0, 0x1, 0x6c}]}, &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff01}, 0x80) 00:12:20 executing program 4: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x700) 00:12:20 executing program 4: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x900) 00:12:20 executing program 5: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000800000/0x800000)=nil, &(0x7f0000e1f000/0x2000)=nil, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[r1], 0x1) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf0d]}, 0x8) (fail_nth: 64) 00:12:20 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0xe, 0x4, &(0x7f00000000c0)=@framed={{0x18, 0x2}, [@ldst={0x1, 0x0, 0x2, 0x0, 0x1, 0x6c}]}, &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff01}, 0x80) 00:12:20 executing program 3: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000800000/0x800000)=nil, &(0x7f0000e1f000/0x2000)=nil, 0x0, 0x0) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf1e]}, 0x8) 00:12:20 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x5, 0x5}}}, 0x90) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {}, 0x5, 0x5}}}, 0x90) 00:12:20 executing program 4: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0xa00) [ 740.593330][ T8850] FAULT_INJECTION: forcing a failure. [ 740.593330][ T8850] name failslab, interval 1, probability 0, space 0, times 0 00:12:20 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0xe, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18020000f7ffffff000000000000000061106c00000000009500000000000000d0eb22b5a78a05d74dc5acc326aed6c3d50d979726d5b1d8bdf50b21a5ee5c914c062fd59a96cc0a6c7b2b3e30071aa7654ab9df3bf5e8f0ca37f962e1c18fbe36040ba6b0ed75445aa165120efaccd70109c32e2e5de09c7434acc5f8231f59a12b9174dd9daa2d1477195b64b9a9f510c1c56629cbc863c8840a5ef02e59f67c81b85458d4ed2196"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r0 = syz_open_dev$audion(&(0x7f0000000000), 0xc9, 0xc802) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$USBDEVFS_DROP_PRIVILEGES(r0, 0x4004551e, &(0x7f00000000c0)=0x101) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000050423eeffffffffffff02000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) bind$packet(r1, &(0x7f0000000100)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={r0, r4, 0x25, 0x15}, 0x10) [ 740.604202][ T8850] CPU: 0 PID: 8850 Comm: syz-executor.5 Tainted: G W 5.15.120-syzkaller #0 [ 740.606387][ T8850] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 740.608514][ T8850] Call trace: [ 740.609202][ T8850] dump_backtrace+0x0/0x530 [ 740.610191][ T8850] show_stack+0x2c/0x3c [ 740.611017][ T8850] dump_stack_lvl+0x108/0x170 [ 740.612034][ T8850] dump_stack+0x1c/0x58 [ 740.612962][ T8850] should_fail+0x400/0x5cc [ 740.613881][ T8850] __should_failslab+0xbc/0x110 [ 740.614936][ T8850] should_failslab+0x10/0x28 [ 740.615998][ T8850] slab_pre_alloc_hook+0x64/0xe8 [ 740.617159][ T8850] kmem_cache_alloc_bulk+0x50/0x4c0 [ 740.618229][ T8850] io_submit_sqes+0x4f00/0x8970 [ 740.619321][ T8850] __arm64_sys_io_uring_enter+0x2a0/0x1cb8 [ 740.620592][ T8850] invoke_syscall+0x98/0x2b8 [ 740.621521][ T8850] el0_svc_common+0x138/0x258 [ 740.622397][ T8850] do_el0_svc+0x58/0x14c [ 740.623304][ T8850] el0_svc+0x7c/0x1f0 [ 740.624179][ T8850] el0t_64_sync_handler+0x84/0xe4 [ 740.625240][ T8850] el0t_64_sync+0x1a0/0x1a4 00:12:20 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x5, 0x5}}}, 0x90) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"0000000000000000000000000200"}, 0x5, 0x5}}}, 0x90) [ 740.655339][ T8855] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 00:12:20 executing program 1: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) (async) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x0) (async) r2 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) ioctl$USBDEVFS_FREE_STREAMS(r3, 0x8008551d, &(0x7f00000000c0)={0x2033, 0x2, [{0xb}, {0xc}]}) (async) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[r1], 0x1) (async, rerun: 32) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf09]}, 0x8) (rerun: 32) 00:12:20 executing program 4: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0xb00) 00:12:20 executing program 3: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000800000/0x800000)=nil, &(0x7f0000e1f000/0x2000)=nil, 0x0, 0x0) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf21]}, 0x8) 00:12:20 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x5, 0x5}}}, 0x90) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}, 0x5, 0x5}}}, 0x90) 00:12:20 executing program 4: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0xc00) 00:12:20 executing program 5: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000800000/0x800000)=nil, &(0x7f0000e1f000/0x2000)=nil, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[r1], 0x1) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf0d]}, 0x8) (fail_nth: 65) 00:12:20 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x5, 0x5}}}, 0x90) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x5, 0x5}}}, 0x90) 00:12:20 executing program 4: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0xd00) 00:12:20 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0xe, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18020000f7ffffff000000000000000061106c00000000009500000000000000d0eb22b5a78a05d74dc5acc326aed6c3d50d979726d5b1d8bdf50b21a5ee5c914c062fd59a96cc0a6c7b2b3e30071aa7654ab9df3bf5e8f0ca37f962e1c18fbe36040ba6b0ed75445aa165120efaccd70109c32e2e5de09c7434acc5f8231f59a12b9174dd9daa2d1477195b64b9a9f510c1c56629cbc863c8840a5ef02e59f67c81b85458d4ed2196"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) r0 = syz_open_dev$audion(&(0x7f0000000000), 0xc9, 0xc802) (async) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$USBDEVFS_DROP_PRIVILEGES(r0, 0x4004551e, &(0x7f00000000c0)=0x101) (async) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000050423eeffffffffffff02000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) bind$packet(r1, &(0x7f0000000100)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={r0, r4, 0x25, 0x15}, 0x10) [ 740.895740][ T8875] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 00:12:20 executing program 3: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000800000/0x800000)=nil, &(0x7f0000e1f000/0x2000)=nil, 0x0, 0x0) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf22]}, 0x8) 00:12:20 executing program 4: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0xe00) 00:12:20 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x5, 0x5}}}, 0x90) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000002"}, 0x5, 0x5}}}, 0x90) [ 740.962817][ T8882] FAULT_INJECTION: forcing a failure. [ 740.962817][ T8882] name failslab, interval 1, probability 0, space 0, times 0 [ 740.985396][ T8882] CPU: 1 PID: 8882 Comm: syz-executor.5 Tainted: G W 5.15.120-syzkaller #0 [ 740.987461][ T8882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 740.989551][ T8882] Call trace: [ 740.990237][ T8882] dump_backtrace+0x0/0x530 [ 740.991177][ T8882] show_stack+0x2c/0x3c [ 740.992035][ T8882] dump_stack_lvl+0x108/0x170 [ 740.993121][ T8882] dump_stack+0x1c/0x58 [ 740.994014][ T8882] should_fail+0x400/0x5cc [ 740.994957][ T8882] __should_failslab+0xbc/0x110 [ 740.995984][ T8882] should_failslab+0x10/0x28 [ 740.996932][ T8882] slab_pre_alloc_hook+0x64/0xe8 [ 740.997925][ T8882] kmem_cache_alloc_bulk+0x50/0x4c0 [ 740.998955][ T8882] io_submit_sqes+0x4f00/0x8970 [ 740.999947][ T8882] __arm64_sys_io_uring_enter+0x2a0/0x1cb8 [ 741.001152][ T8882] invoke_syscall+0x98/0x2b8 [ 741.002132][ T8882] el0_svc_common+0x138/0x258 [ 741.003218][ T8882] do_el0_svc+0x58/0x14c [ 741.004126][ T8882] el0_svc+0x7c/0x1f0 [ 741.004980][ T8882] el0t_64_sync_handler+0x84/0xe4 [ 741.006029][ T8882] el0t_64_sync+0x1a0/0x1a4 00:12:21 executing program 1: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x0) r2 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) ioctl$USBDEVFS_FREE_STREAMS(r3, 0x8008551d, &(0x7f00000000c0)={0x2033, 0x2, [{0xb}, {0xc}]}) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[r1], 0x1) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf09]}, 0x8) syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) (async) syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x0) (async) openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) (async) openat$vcs(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) (async) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) (async) ioctl$USBDEVFS_FREE_STREAMS(r3, 0x8008551d, &(0x7f00000000c0)={0x2033, 0x2, [{0xb}, {0xc}]}) (async) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[r1], 0x1) (async) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf09]}, 0x8) (async) 00:12:21 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x5, 0x5}}}, 0x90) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@'}, 0x5, 0x5}}}, 0x90) 00:12:21 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0xe, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18020000f7ffffff000000000000000061106c00000000009500000000000000d0eb22b5a78a05d74dc5acc326aed6c3d50d979726d5b1d8bdf50b21a5ee5c914c062fd59a96cc0a6c7b2b3e30071aa7654ab9df3bf5e8f0ca37f962e1c18fbe36040ba6b0ed75445aa165120efaccd70109c32e2e5de09c7434acc5f8231f59a12b9174dd9daa2d1477195b64b9a9f510c1c56629cbc863c8840a5ef02e59f67c81b85458d4ed2196"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) syz_open_dev$audion(&(0x7f0000000000), 0xc9, 0xc802) (async) r0 = syz_open_dev$audion(&(0x7f0000000000), 0xc9, 0xc802) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) (async) r3 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$USBDEVFS_DROP_PRIVILEGES(r0, 0x4004551e, &(0x7f00000000c0)=0x101) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000050423eeffffffffffff02000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000050423eeffffffffffff02000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) bind$packet(r1, &(0x7f0000000100)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={r0, r4, 0x25, 0x15}, 0x10) 00:12:21 executing program 4: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x1100) 00:12:21 executing program 3: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000800000/0x800000)=nil, &(0x7f0000e1f000/0x2000)=nil, 0x0, 0x0) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf23]}, 0x8) 00:12:21 executing program 5: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000800000/0x800000)=nil, &(0x7f0000e1f000/0x2000)=nil, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[r1], 0x1) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf0d]}, 0x8) (fail_nth: 66) [ 741.849137][ T8892] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 741.859615][ T8896] FAULT_INJECTION: forcing a failure. [ 741.859615][ T8896] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 741.862492][ T8896] CPU: 1 PID: 8896 Comm: syz-executor.5 Tainted: G W 5.15.120-syzkaller #0 [ 741.864605][ T8896] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 741.866654][ T8896] Call trace: [ 741.867246][ T8896] dump_backtrace+0x0/0x530 [ 741.868151][ T8896] show_stack+0x2c/0x3c [ 741.868957][ T8896] dump_stack_lvl+0x108/0x170 [ 741.869839][ T8896] dump_stack+0x1c/0x58 [ 741.870635][ T8896] should_fail+0x400/0x5cc [ 741.871523][ T8896] should_fail_alloc_page+0x74/0xa8 [ 741.872612][ T8896] prepare_alloc_pages+0x160/0x4cc [ 741.873706][ T8896] __alloc_pages+0x138/0x674 [ 741.874694][ T8896] alloc_pages+0x390/0x634 [ 741.875504][ T8896] new_slab+0xec/0x56c [ 741.876306][ T8896] ___slab_alloc+0x6bc/0xdbc [ 741.877274][ T8896] kmem_cache_alloc_bulk+0x1a0/0x4c0 [ 741.878426][ T8896] io_submit_sqes+0x4f00/0x8970 [ 741.879344][ T8896] __arm64_sys_io_uring_enter+0x2a0/0x1cb8 [ 741.880549][ T8896] invoke_syscall+0x98/0x2b8 [ 741.881483][ T8896] el0_svc_common+0x138/0x258 [ 741.882416][ T8896] do_el0_svc+0x58/0x14c [ 741.883282][ T8896] el0_svc+0x7c/0x1f0 [ 741.884036][ T8896] el0t_64_sync_handler+0x84/0xe4 [ 741.885078][ T8896] el0t_64_sync+0x1a0/0x1a4 00:12:21 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x5, 0x5}}}, 0x90) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {}, 0x5, 0x5}}}, 0x90) 00:12:21 executing program 4: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x1200) [ 741.907116][ T8897] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 00:12:21 executing program 3: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000800000/0x800000)=nil, &(0x7f0000e1f000/0x2000)=nil, 0x0, 0x0) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf24]}, 0x8) 00:12:21 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x5, 0x5}}}, 0x90) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {}, 0x5, 0x5}}}, 0x90) 00:12:22 executing program 5: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000800000/0x800000)=nil, &(0x7f0000e1f000/0x2000)=nil, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[r1], 0x1) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf0d]}, 0x8) (fail_nth: 67) 00:12:22 executing program 2: r0 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) mq_notify(r1, &(0x7f00000003c0)={0x0, 0x5, 0x4, @thr={&(0x7f0000000300)="cc45bfc9557eb42bdd05891049bb14d47ea399f261e58fe075ae0967daac36caceabe71ec88e048ab4fce7305e5739ee701d7fb41f0d89a751614f37c28a3511a66d5bc0928a540c85fd5fe23f2314f38b02c7cf5375bc1d771c24dbdcb81e88c7c66808cc5a86b22cd12ed0a6e8680c7c220cdde3a2095bccd120cc1e955c86fc56c131ef58f671f1", &(0x7f0000000500)="1485d846cf0a8355c316320fa40582c24f1e943ce4082984776bc3037f76537c585e835e31976b9bbf2d5d7f7c2412107c4ac8f8e7578037826819a73532edf4c5aa84e2fbb02e1c078526e239310f327ecff2eda230cc8a6540c5b524baa29c59d360a2acaa82f0b2ab365fa71d74b51ba00d22f32be0b71cabaf5f1f6e349963adaa2708254955ce21a875f0acc4632cf34aa0578eb6f4a929fb1a9908d43b776bc9326311281199ae0f57f150c2ab1ddfae7a6ffe5503e981407ad137169286293214dd6de6daea79"}}) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0xe, 0x4, &(0x7f00000000c0)=@framed={{0x18, 0x2}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x6c}]}, &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) bind$packet(r4, &(0x7f0000000180)={0x11, 0x5, r7, 0x1, 0x3f, 0x6, @multicast}, 0x14) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r8, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r9, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r8, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r9, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x5, 0x5}}}, 0x90) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYRES16=r8, @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x8080}, 0x0) bind$packet(r4, &(0x7f0000000100)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x28, 0x10, 0x300, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r10}, [@IFLA_LINK_NETNSID={0x8, 0x25, 0x5}]}, 0x28}}, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r2, r10, 0x25, 0x1}, 0x10) [ 742.084799][ T8921] FAULT_INJECTION: forcing a failure. [ 742.084799][ T8921] name failslab, interval 1, probability 0, space 0, times 0 [ 742.095547][ T8921] CPU: 0 PID: 8921 Comm: syz-executor.5 Tainted: G W 5.15.120-syzkaller #0 [ 742.098125][ T8921] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 742.100168][ T8921] Call trace: [ 742.100885][ T8921] dump_backtrace+0x0/0x530 [ 742.101845][ T8921] show_stack+0x2c/0x3c [ 742.102652][ T8921] dump_stack_lvl+0x108/0x170 [ 742.103728][ T8921] dump_stack+0x1c/0x58 [ 742.104570][ T8921] should_fail+0x400/0x5cc [ 742.105491][ T8921] __should_failslab+0xbc/0x110 [ 742.106543][ T8921] should_failslab+0x10/0x28 [ 742.107469][ T8921] slab_pre_alloc_hook+0x64/0xe8 [ 742.108554][ T8921] __kmalloc_node+0xbc/0x5b8 [ 742.109496][ T8921] memcg_alloc_page_obj_cgroups+0x80/0x174 [ 742.110730][ T8921] new_slab+0x120/0x56c [ 742.111521][ T8921] ___slab_alloc+0x6bc/0xdbc [ 742.112535][ T8921] kmem_cache_alloc_bulk+0x1a0/0x4c0 [ 742.113718][ T8921] io_submit_sqes+0x4f00/0x8970 [ 742.114717][ T8921] __arm64_sys_io_uring_enter+0x2a0/0x1cb8 [ 742.115968][ T8921] invoke_syscall+0x98/0x2b8 [ 742.116937][ T8921] el0_svc_common+0x138/0x258 [ 742.117842][ T8921] do_el0_svc+0x58/0x14c [ 742.118782][ T8921] el0_svc+0x7c/0x1f0 [ 742.119640][ T8921] el0t_64_sync_handler+0x84/0xe4 [ 742.120650][ T8921] el0t_64_sync+0x1a0/0x1a4 00:12:22 executing program 1: semtimedop(0xffffffffffffffff, &(0x7f00000000c0)=[{0x2, 0x1, 0x1000}, {0x3, 0xfffd, 0x1800}, {}, {0x3, 0x4, 0x1800}], 0x4, &(0x7f0000000180)) r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[r1], 0x1) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf09]}, 0x8) 00:12:22 executing program 4: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x1800) 00:12:22 executing program 3: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000800000/0x800000)=nil, &(0x7f0000e1f000/0x2000)=nil, 0x0, 0x0) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf25]}, 0x8) 00:12:22 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x5, 0x5}}}, 0x90) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {}, 0x5, 0x5}}}, 0x90) 00:12:22 executing program 2: r0 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) (async) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) (async) mq_notify(r1, &(0x7f00000003c0)={0x0, 0x5, 0x4, @thr={&(0x7f0000000300)="cc45bfc9557eb42bdd05891049bb14d47ea399f261e58fe075ae0967daac36caceabe71ec88e048ab4fce7305e5739ee701d7fb41f0d89a751614f37c28a3511a66d5bc0928a540c85fd5fe23f2314f38b02c7cf5375bc1d771c24dbdcb81e88c7c66808cc5a86b22cd12ed0a6e8680c7c220cdde3a2095bccd120cc1e955c86fc56c131ef58f671f1", &(0x7f0000000500)="1485d846cf0a8355c316320fa40582c24f1e943ce4082984776bc3037f76537c585e835e31976b9bbf2d5d7f7c2412107c4ac8f8e7578037826819a73532edf4c5aa84e2fbb02e1c078526e239310f327ecff2eda230cc8a6540c5b524baa29c59d360a2acaa82f0b2ab365fa71d74b51ba00d22f32be0b71cabaf5f1f6e349963adaa2708254955ce21a875f0acc4632cf34aa0578eb6f4a929fb1a9908d43b776bc9326311281199ae0f57f150c2ab1ddfae7a6ffe5503e981407ad137169286293214dd6de6daea79"}}) (async) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0xe, 0x4, &(0x7f00000000c0)=@framed={{0x18, 0x2}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x6c}]}, &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$packet(0x11, 0x3, 0x300) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) (async) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) bind$packet(r4, &(0x7f0000000180)={0x11, 0x5, r7, 0x1, 0x3f, 0x6, @multicast}, 0x14) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r8, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r9, 0x0, 0x1, 0x4}}, 0x20) (async) write$RDMA_USER_CM_CMD_BIND(r8, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r9, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x5, 0x5}}}, 0x90) (async) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYRES16=r8, @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x8080}, 0x0) (async) bind$packet(r4, &(0x7f0000000100)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x28, 0x10, 0x300, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r10}, [@IFLA_LINK_NETNSID={0x8, 0x25, 0x5}]}, 0x28}}, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r2, r10, 0x25, 0x1}, 0x10) 00:12:22 executing program 5: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000800000/0x800000)=nil, &(0x7f0000e1f000/0x2000)=nil, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[r1], 0x1) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf0d]}, 0x8) (fail_nth: 68) 00:12:22 executing program 4: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x2500) 00:12:22 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x5, 0x5}}}, 0x90) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"000000000000000000000000000200"}, 0x5, 0x5}}}, 0x90) 00:12:22 executing program 2: openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) (async) r0 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) (async) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) mq_notify(r1, &(0x7f00000003c0)={0x0, 0x5, 0x4, @thr={&(0x7f0000000300)="cc45bfc9557eb42bdd05891049bb14d47ea399f261e58fe075ae0967daac36caceabe71ec88e048ab4fce7305e5739ee701d7fb41f0d89a751614f37c28a3511a66d5bc0928a540c85fd5fe23f2314f38b02c7cf5375bc1d771c24dbdcb81e88c7c66808cc5a86b22cd12ed0a6e8680c7c220cdde3a2095bccd120cc1e955c86fc56c131ef58f671f1", &(0x7f0000000500)="1485d846cf0a8355c316320fa40582c24f1e943ce4082984776bc3037f76537c585e835e31976b9bbf2d5d7f7c2412107c4ac8f8e7578037826819a73532edf4c5aa84e2fbb02e1c078526e239310f327ecff2eda230cc8a6540c5b524baa29c59d360a2acaa82f0b2ab365fa71d74b51ba00d22f32be0b71cabaf5f1f6e349963adaa2708254955ce21a875f0acc4632cf34aa0578eb6f4a929fb1a9908d43b776bc9326311281199ae0f57f150c2ab1ddfae7a6ffe5503e981407ad137169286293214dd6de6daea79"}}) (async) mq_notify(r1, &(0x7f00000003c0)={0x0, 0x5, 0x4, @thr={&(0x7f0000000300)="cc45bfc9557eb42bdd05891049bb14d47ea399f261e58fe075ae0967daac36caceabe71ec88e048ab4fce7305e5739ee701d7fb41f0d89a751614f37c28a3511a66d5bc0928a540c85fd5fe23f2314f38b02c7cf5375bc1d771c24dbdcb81e88c7c66808cc5a86b22cd12ed0a6e8680c7c220cdde3a2095bccd120cc1e955c86fc56c131ef58f671f1", &(0x7f0000000500)="1485d846cf0a8355c316320fa40582c24f1e943ce4082984776bc3037f76537c585e835e31976b9bbf2d5d7f7c2412107c4ac8f8e7578037826819a73532edf4c5aa84e2fbb02e1c078526e239310f327ecff2eda230cc8a6540c5b524baa29c59d360a2acaa82f0b2ab365fa71d74b51ba00d22f32be0b71cabaf5f1f6e349963adaa2708254955ce21a875f0acc4632cf34aa0578eb6f4a929fb1a9908d43b776bc9326311281199ae0f57f150c2ab1ddfae7a6ffe5503e981407ad137169286293214dd6de6daea79"}}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0xe, 0x4, &(0x7f00000000c0)=@framed={{0x18, 0x2}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x6c}]}, &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0xe, 0x4, &(0x7f00000000c0)=@framed={{0x18, 0x2}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x6c}]}, &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) (async) r6 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) bind$packet(r4, &(0x7f0000000180)={0x11, 0x5, r7, 0x1, 0x3f, 0x6, @multicast}, 0x14) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r8, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r9, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r8, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r9, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x5, 0x5}}}, 0x90) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYRES16=r8, @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x8080}, 0x0) bind$packet(r4, &(0x7f0000000100)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) (async) bind$packet(r4, &(0x7f0000000100)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x28, 0x10, 0x300, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r10}, [@IFLA_LINK_NETNSID={0x8, 0x25, 0x5}]}, 0x28}}, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r2, r10, 0x25, 0x1}, 0x10) 00:12:22 executing program 3: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000800000/0x800000)=nil, &(0x7f0000e1f000/0x2000)=nil, 0x0, 0x0) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf26]}, 0x8) 00:12:22 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x5, 0x5}}}, 0x90) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}, 0x5, 0x5}}}, 0x90) 00:12:22 executing program 4: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x3f00) [ 742.375710][ T8942] FAULT_INJECTION: forcing a failure. [ 742.375710][ T8942] name failslab, interval 1, probability 0, space 0, times 0 [ 742.390232][ T8942] CPU: 1 PID: 8942 Comm: syz-executor.5 Tainted: G W 5.15.120-syzkaller #0 [ 742.392617][ T8942] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 742.394906][ T8942] Call trace: [ 742.394914][ T8942] dump_backtrace+0x0/0x530 [ 742.394934][ T8942] show_stack+0x2c/0x3c [ 742.394946][ T8942] dump_stack_lvl+0x108/0x170 [ 742.394960][ T8942] dump_stack+0x1c/0x58 [ 742.394972][ T8942] should_fail+0x400/0x5cc [ 742.394983][ T8942] __should_failslab+0xbc/0x110 [ 742.394995][ T8942] should_failslab+0x10/0x28 [ 742.395008][ T8942] slab_pre_alloc_hook+0x64/0xe8 [ 742.395021][ T8942] kmem_cache_alloc_bulk+0x50/0x4c0 [ 742.395033][ T8942] io_submit_sqes+0x4f00/0x8970 [ 742.395045][ T8942] __arm64_sys_io_uring_enter+0x2a0/0x1cb8 [ 742.395071][ T8942] invoke_syscall+0x98/0x2b8 [ 742.395085][ T8942] el0_svc_common+0x138/0x258 [ 742.395096][ T8942] do_el0_svc+0x58/0x14c [ 742.395107][ T8942] el0_svc+0x7c/0x1f0 [ 742.395119][ T8942] el0t_64_sync_handler+0x84/0xe4 [ 742.395132][ T8942] el0t_64_sync+0x1a0/0x1a4 00:12:22 executing program 1: semtimedop(0xffffffffffffffff, &(0x7f00000000c0)=[{0x2, 0x1, 0x1000}, {0x3, 0xfffd, 0x1800}, {}, {0x3, 0x4, 0x1800}], 0x4, &(0x7f0000000180)) (async) r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) (async) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[r1], 0x1) (async) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf09]}, 0x8) 00:12:22 executing program 4: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x5c00) 00:12:22 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x5, 0x5}}}, 0x90) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {}, 0x5, 0x5}}}, 0x90) 00:12:22 executing program 3: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000800000/0x800000)=nil, &(0x7f0000e1f000/0x2000)=nil, 0x0, 0x0) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf27]}, 0x8) 00:12:22 executing program 5: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000800000/0x800000)=nil, &(0x7f0000e1f000/0x2000)=nil, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[r1], 0x1) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf0d]}, 0x8) (fail_nth: 69) 00:12:22 executing program 2: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4, 0x8010, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0xe, 0x4, &(0x7f00000000c0)=@framed={{0x18, 0x2}, [@generic={0x1, 0x7, 0x4, 0x6237, 0x6d}]}, &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x19, 0x6, 0x7, 0x4, 0x104, 0x1, 0x1, '\x00', 0x0, r1, 0x0, 0x2}, 0x48) [ 742.643581][ T8961] FAULT_INJECTION: forcing a failure. [ 742.643581][ T8961] name failslab, interval 1, probability 0, space 0, times 0 [ 742.646416][ T8961] CPU: 0 PID: 8961 Comm: syz-executor.5 Tainted: G W 5.15.120-syzkaller #0 [ 742.648701][ T8961] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 742.650866][ T8961] Call trace: [ 742.651587][ T8961] dump_backtrace+0x0/0x530 [ 742.652532][ T8961] show_stack+0x2c/0x3c [ 742.653356][ T8961] dump_stack_lvl+0x108/0x170 [ 742.654433][ T8961] dump_stack+0x1c/0x58 [ 742.655407][ T8961] should_fail+0x400/0x5cc [ 742.656390][ T8961] __should_failslab+0xbc/0x110 [ 742.657417][ T8961] should_failslab+0x10/0x28 [ 742.658341][ T8961] slab_pre_alloc_hook+0x64/0xe8 [ 742.659524][ T8961] kmem_cache_alloc_bulk+0x50/0x4c0 [ 742.660688][ T8961] io_submit_sqes+0x4f00/0x8970 [ 742.661640][ T8961] __arm64_sys_io_uring_enter+0x2a0/0x1cb8 [ 742.662758][ T8961] invoke_syscall+0x98/0x2b8 [ 742.663745][ T8961] el0_svc_common+0x138/0x258 [ 742.664809][ T8961] do_el0_svc+0x58/0x14c [ 742.665719][ T8961] el0_svc+0x7c/0x1f0 [ 742.666620][ T8961] el0t_64_sync_handler+0x84/0xe4 [ 742.667737][ T8961] el0t_64_sync+0x1a0/0x1a4 00:12:22 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x5, 0x5}}}, 0x90) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {}, 0x5, 0x5}}}, 0x90) 00:12:22 executing program 4: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0xffffff) 00:12:22 executing program 2: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4, 0x8010, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0xe, 0x4, &(0x7f00000000c0)=@framed={{0x18, 0x2}, [@generic={0x1, 0x7, 0x4, 0x6237, 0x6d}]}, &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0xe, 0x4, &(0x7f00000000c0)=@framed={{0x18, 0x2}, [@generic={0x1, 0x7, 0x4, 0x6237, 0x6d}]}, &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x19, 0x6, 0x7, 0x4, 0x104, 0x1, 0x1, '\x00', 0x0, r1, 0x0, 0x2}, 0x48) 00:12:22 executing program 3: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000800000/0x800000)=nil, &(0x7f0000e1f000/0x2000)=nil, 0x0, 0x0) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf28]}, 0x8) 00:12:22 executing program 4: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x1000000) 00:12:22 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x5, 0x5}}}, 0x90) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {}, 0x5, 0x5}}}, 0x90) 00:12:22 executing program 1: semtimedop(0xffffffffffffffff, &(0x7f00000000c0)=[{0x2, 0x1, 0x1000}, {0x3, 0xfffd, 0x1800}, {}, {0x3, 0x4, 0x1800}], 0x4, &(0x7f0000000180)) r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[r1], 0x1) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf09]}, 0x8) semtimedop(0xffffffffffffffff, &(0x7f00000000c0)=[{0x2, 0x1, 0x1000}, {0x3, 0xfffd, 0x1800}, {}, {0x3, 0x4, 0x1800}], 0x4, &(0x7f0000000180)) (async) syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) (async) syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x0) (async) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[r1], 0x1) (async) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf09]}, 0x8) (async) 00:12:22 executing program 2: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4, 0x8010, 0xffffffffffffffff, 0x0) (async) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0xe, 0x4, &(0x7f00000000c0)=@framed={{0x18, 0x2}, [@generic={0x1, 0x7, 0x4, 0x6237, 0x6d}]}, &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x19, 0x6, 0x7, 0x4, 0x104, 0x1, 0x1, '\x00', 0x0, r1, 0x0, 0x2}, 0x48) 00:12:22 executing program 4: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x2000000) 00:12:22 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x5, 0x5}}}, 0x90) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {}, 0x5, 0x5}}}, 0x90) 00:12:22 executing program 5: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000800000/0x800000)=nil, &(0x7f0000e1f000/0x2000)=nil, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[r1], 0x1) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf0d]}, 0x8) (fail_nth: 70) 00:12:22 executing program 2: r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0xe, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="ffff0000000000009500000000000000ad1074af5ae6e85b30740c9cf542c2ba99e37a88dc77e1c902070a2443c54a4f6d0300"/66], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r0, 0x0, 0x25, 0x15}, 0x10) 00:12:22 executing program 4: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x3000000) 00:12:22 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x5, 0x5}}}, 0x90) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {}, 0x5, 0x5}}}, 0x90) 00:12:22 executing program 3: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x216a00, 0x0) ioctl$DRM_IOCTL_GET_MAP(r0, 0xc0286404, &(0x7f00000000c0)={&(0x7f0000ffb000/0x3000)=nil}) r1 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000800000/0x800000)=nil, &(0x7f0000e1f000/0x2000)=nil, 0x0, 0x0) io_uring_enter(r1, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf13]}, 0x8) 00:12:22 executing program 4: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x4000000) 00:12:23 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0xe, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="ffff0000000000009500000000000000ad1074af5ae6e85b30740c9cf542c2ba99e37a88dc77e1c902070a2443c54a4f6d0300"/66], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0xe, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="ffff0000000000009500000000000000ad1074af5ae6e85b30740c9cf542c2ba99e37a88dc77e1c902070a2443c54a4f6d0300"/66], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r0, 0x0, 0x25, 0x15}, 0x10) [ 743.047499][ T8999] FAULT_INJECTION: forcing a failure. [ 743.047499][ T8999] name failslab, interval 1, probability 0, space 0, times 0 [ 743.066864][ T8999] CPU: 0 PID: 8999 Comm: syz-executor.5 Tainted: G W 5.15.120-syzkaller #0 [ 743.068942][ T8999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 743.071196][ T8999] Call trace: [ 743.071898][ T8999] dump_backtrace+0x0/0x530 [ 743.072926][ T8999] show_stack+0x2c/0x3c [ 743.073733][ T8999] dump_stack_lvl+0x108/0x170 [ 743.074692][ T8999] dump_stack+0x1c/0x58 [ 743.075481][ T8999] should_fail+0x400/0x5cc [ 743.076469][ T8999] __should_failslab+0xbc/0x110 [ 743.077459][ T8999] should_failslab+0x10/0x28 [ 743.078374][ T8999] slab_pre_alloc_hook+0x64/0xe8 [ 743.079485][ T8999] kmem_cache_alloc_bulk+0x50/0x4c0 [ 743.080701][ T8999] io_submit_sqes+0x4f00/0x8970 [ 743.081752][ T8999] __arm64_sys_io_uring_enter+0x2a0/0x1cb8 [ 743.082983][ T8999] invoke_syscall+0x98/0x2b8 [ 743.084079][ T8999] el0_svc_common+0x138/0x258 00:12:23 executing program 4: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x5000000) [ 743.085028][ T8999] do_el0_svc+0x58/0x14c [ 743.085863][ T8999] el0_svc+0x7c/0x1f0 [ 743.086695][ T8999] el0t_64_sync_handler+0x84/0xe4 [ 743.087757][ T8999] el0t_64_sync+0x1a0/0x1a4 00:12:23 executing program 1: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) syz_io_uring_setup(0x2d9c, &(0x7f0000000180)={0x0, 0xcda9, 0x43a, 0x1, 0x2c6, 0x0, r0}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000200)) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[r1], 0x1) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf09]}, 0x8) 00:12:23 executing program 3: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x216a00, 0x0) ioctl$DRM_IOCTL_GET_MAP(r0, 0xc0286404, &(0x7f00000000c0)={&(0x7f0000ffb000/0x3000)=nil}) (async, rerun: 32) r1 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) (rerun: 32) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000800000/0x800000)=nil, &(0x7f0000e1f000/0x2000)=nil, 0x0, 0x0) (async) io_uring_enter(r1, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf13]}, 0x8) 00:12:23 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x5, 0x5}}}, 0x90) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {}, 0x5, 0x5}}}, 0x90) 00:12:23 executing program 2: r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0xe, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="ffff0000000000009500000000000000ad1074af5ae6e85b30740c9cf542c2ba99e37a88dc77e1c902070a2443c54a4f6d0300"/66], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r0, 0x0, 0x25, 0x15}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0xe, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="ffff0000000000009500000000000000ad1074af5ae6e85b30740c9cf542c2ba99e37a88dc77e1c902070a2443c54a4f6d0300"/66], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r0, 0x0, 0x25, 0x15}, 0x10) (async) 00:12:23 executing program 4: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x6000000) 00:12:23 executing program 5: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000800000/0x800000)=nil, &(0x7f0000e1f000/0x2000)=nil, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[r1], 0x1) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf0d]}, 0x8) (fail_nth: 71) 00:12:23 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x5, 0x5}}}, 0x90) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000200"}, 0x5, 0x5}}}, 0x90) [ 743.347930][ T9016] FAULT_INJECTION: forcing a failure. [ 743.347930][ T9016] name failslab, interval 1, probability 0, space 0, times 0 00:12:23 executing program 4: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x7000000) [ 743.359919][ T9016] CPU: 1 PID: 9016 Comm: syz-executor.5 Tainted: G W 5.15.120-syzkaller #0 [ 743.362211][ T9016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 743.364341][ T9016] Call trace: [ 743.365157][ T9016] dump_backtrace+0x0/0x530 [ 743.366243][ T9016] show_stack+0x2c/0x3c [ 743.367205][ T9016] dump_stack_lvl+0x108/0x170 [ 743.368169][ T9016] dump_stack+0x1c/0x58 [ 743.369035][ T9016] should_fail+0x400/0x5cc [ 743.369921][ T9016] __should_failslab+0xbc/0x110 [ 743.370941][ T9016] should_failslab+0x10/0x28 [ 743.371894][ T9016] slab_pre_alloc_hook+0x64/0xe8 [ 743.372896][ T9016] kmem_cache_alloc_bulk+0x50/0x4c0 [ 743.374104][ T9016] io_submit_sqes+0x4f00/0x8970 [ 743.375236][ T9016] __arm64_sys_io_uring_enter+0x2a0/0x1cb8 [ 743.376418][ T9016] invoke_syscall+0x98/0x2b8 [ 743.377446][ T9016] el0_svc_common+0x138/0x258 [ 743.378393][ T9016] do_el0_svc+0x58/0x14c [ 743.379269][ T9016] el0_svc+0x7c/0x1f0 [ 743.380129][ T9016] el0t_64_sync_handler+0x84/0xe4 [ 743.381114][ T9016] el0t_64_sync+0x1a0/0x1a4 00:12:23 executing program 3: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x216a00, 0x0) ioctl$DRM_IOCTL_GET_MAP(r0, 0xc0286404, &(0x7f00000000c0)={&(0x7f0000ffb000/0x3000)=nil}) r1 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) (async) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000800000/0x800000)=nil, &(0x7f0000e1f000/0x2000)=nil, 0x0, 0x0) io_uring_enter(r1, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf13]}, 0x8) 00:12:23 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x5, 0x5}}}, 0x90) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@'}, 0x5, 0x5}}}, 0x90) 00:12:23 executing program 4: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x8000000) 00:12:23 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x5, 0x5}}}, 0x90) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {}, 0x5, 0x5}}}, 0x90) 00:12:23 executing program 1: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) syz_io_uring_setup(0x2d9c, &(0x7f0000000180)={0x0, 0xcda9, 0x43a, 0x1, 0x2c6, 0x0, r0}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000200)) (async) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[r1], 0x1) (async) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf09]}, 0x8) 00:12:23 executing program 4: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x9000000) 00:12:23 executing program 3: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x1ef}, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000080)) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x4, 0x0, 0x20000005}, &(0x7f0000800000/0x800000)=nil, &(0x7f00008ad000/0x1000)=nil, 0x0, 0x0) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf13]}, 0x8) 00:12:23 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x5, 0x5}}}, 0x90) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {}, 0x5, 0x5}}}, 0x90) 00:12:23 executing program 5: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000800000/0x800000)=nil, &(0x7f0000e1f000/0x2000)=nil, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[r1], 0x1) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf0d]}, 0x8) (fail_nth: 72) 00:12:23 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x5, 0x5}}}, 0x90) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {}, 0x5, 0x5}}}, 0x90) 00:12:23 executing program 4: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0xa000000) 00:12:23 executing program 3: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x1ef}, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000080)) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x4, 0x0, 0x20000005}, &(0x7f0000800000/0x800000)=nil, &(0x7f00008ad000/0x1000)=nil, 0x0, 0x0) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf13]}, 0x8) syz_io_uring_setup(0x5ad, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x1ef}, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000080)) (async) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x4, 0x0, 0x20000005}, &(0x7f0000800000/0x800000)=nil, &(0x7f00008ad000/0x1000)=nil, 0x0, 0x0) (async) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf13]}, 0x8) (async) [ 743.730027][ T9053] FAULT_INJECTION: forcing a failure. [ 743.730027][ T9053] name failslab, interval 1, probability 0, space 0, times 0 00:12:23 executing program 4: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0xb000000) 00:12:23 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x5, 0x5}}}, 0x90) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {}, 0x5, 0x5}}}, 0x90) [ 743.744323][ T9053] CPU: 0 PID: 9053 Comm: syz-executor.5 Tainted: G W 5.15.120-syzkaller #0 [ 743.746516][ T9053] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 743.748699][ T9053] Call trace: [ 743.749369][ T9053] dump_backtrace+0x0/0x530 [ 743.750407][ T9053] show_stack+0x2c/0x3c [ 743.751298][ T9053] dump_stack_lvl+0x108/0x170 [ 743.752322][ T9053] dump_stack+0x1c/0x58 [ 743.753229][ T9053] should_fail+0x400/0x5cc [ 743.754134][ T9053] __should_failslab+0xbc/0x110 [ 743.755144][ T9053] should_failslab+0x10/0x28 [ 743.756201][ T9053] slab_pre_alloc_hook+0x64/0xe8 [ 743.757482][ T9053] kmem_cache_alloc_bulk+0x50/0x4c0 [ 743.758587][ T9053] io_submit_sqes+0x4f00/0x8970 [ 743.759598][ T9053] __arm64_sys_io_uring_enter+0x2a0/0x1cb8 [ 743.760830][ T9053] invoke_syscall+0x98/0x2b8 [ 743.761834][ T9053] el0_svc_common+0x138/0x258 [ 743.762842][ T9053] do_el0_svc+0x58/0x14c [ 743.763717][ T9053] el0_svc+0x7c/0x1f0 [ 743.764705][ T9053] el0t_64_sync_handler+0x84/0xe4 [ 743.765861][ T9053] el0t_64_sync+0x1a0/0x1a4 00:12:23 executing program 3: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x1ef}, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000080)) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x4, 0x0, 0x20000005}, &(0x7f0000800000/0x800000)=nil, &(0x7f00008ad000/0x1000)=nil, 0x0, 0x0) (async) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf13]}, 0x8) 00:12:23 executing program 4: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0xc000000) 00:12:23 executing program 1: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) syz_io_uring_setup(0x2d9c, &(0x7f0000000180)={0x0, 0xcda9, 0x43a, 0x1, 0x2c6, 0x0, r0}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000200)) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[r1], 0x1) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf09]}, 0x8) (async) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf09]}, 0x8) 00:12:23 executing program 3: r0 = syz_io_uring_setup(0x45f4, &(0x7f0000000100)={0x0, 0xa05d, 0x2, 0xfffffffd}, &(0x7f0000b52000/0x1000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000480)=0x0, &(0x7f00000003c0)=0x0) r3 = syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000800000/0x800000)=nil, &(0x7f0000e1f000/0x2000)=nil, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000440)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r0}}, './file0\x00'}) syz_io_uring_setup(0x5303, &(0x7f00000004c0)={0x0, 0xd41, 0x100, 0x2, 0x59, 0x0, r4}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00008f5000/0x3000)=nil, &(0x7f0000000540), &(0x7f0000000580)) syz_io_uring_setup(0x7127, &(0x7f0000000300)={0x0, 0x9766, 0x800, 0x0, 0x33c, 0x0, r3}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000a11000/0x2000)=nil, &(0x7f0000000380), &(0x7f0000000400)) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf13]}, 0x8) syz_io_uring_setup(0x6f3, &(0x7f0000000200)={0x0, 0xdfd4, 0x4, 0x0, 0x99, 0x0, r3}, &(0x7f0000e7d000/0x2000)=nil, &(0x7f0000923000/0x3000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_MSG_RING={0x28, 0x20, 0x0, r3, 0x7ff, &(0x7f0000000080)="0dc2492573fbfe256e22558bb7bb8b9db331524bfe49cd7cf01f20932e9c77445d7e007fd3126226d4d98e6cf7799d3ac3204db53ac73e461d", 0x39}, 0x5) openat2(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x80001, 0x6, 0x2}, 0x18) 00:12:23 executing program 4: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0xd000000) 00:12:23 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x5, 0x5}}}, 0x90) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {}, 0x5, 0x5}}}, 0x90) 00:12:23 executing program 5: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000800000/0x800000)=nil, &(0x7f0000e1f000/0x2000)=nil, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[r1], 0x1) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf0d]}, 0x8) (fail_nth: 73) 00:12:24 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x5, 0x5}}}, 0x90) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {}, 0x5, 0x5}}}, 0x90) 00:12:24 executing program 4: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0xe000000) [ 744.057338][ T9073] FAULT_INJECTION: forcing a failure. [ 744.057338][ T9073] name failslab, interval 1, probability 0, space 0, times 0 [ 744.063362][ T9073] CPU: 1 PID: 9073 Comm: syz-executor.5 Tainted: G W 5.15.120-syzkaller #0 [ 744.065390][ T9073] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 744.067515][ T9073] Call trace: [ 744.068222][ T9073] dump_backtrace+0x0/0x530 [ 744.069213][ T9073] show_stack+0x2c/0x3c [ 744.070053][ T9073] dump_stack_lvl+0x108/0x170 [ 744.070982][ T9073] dump_stack+0x1c/0x58 [ 744.071771][ T9073] should_fail+0x400/0x5cc [ 744.072656][ T9073] __should_failslab+0xbc/0x110 [ 744.073656][ T9073] should_failslab+0x10/0x28 [ 744.074742][ T9073] slab_pre_alloc_hook+0x64/0xe8 [ 744.075801][ T9073] kmem_cache_alloc_bulk+0x50/0x4c0 [ 744.076845][ T9073] io_submit_sqes+0x4f00/0x8970 [ 744.077875][ T9073] __arm64_sys_io_uring_enter+0x2a0/0x1cb8 [ 744.079033][ T9073] invoke_syscall+0x98/0x2b8 [ 744.080011][ T9073] el0_svc_common+0x138/0x258 [ 744.080915][ T9073] do_el0_svc+0x58/0x14c [ 744.081837][ T9073] el0_svc+0x7c/0x1f0 [ 744.082627][ T9073] el0t_64_sync_handler+0x84/0xe4 [ 744.083789][ T9073] el0t_64_sync+0x1a0/0x1a4 00:12:24 executing program 3: r0 = syz_io_uring_setup(0x45f4, &(0x7f0000000100)={0x0, 0xa05d, 0x2, 0xfffffffd}, &(0x7f0000b52000/0x1000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000480)=0x0, &(0x7f00000003c0)=0x0) r3 = syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000800000/0x800000)=nil, &(0x7f0000e1f000/0x2000)=nil, 0x0, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000440)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r0}}, './file0\x00'}) syz_io_uring_setup(0x5303, &(0x7f00000004c0)={0x0, 0xd41, 0x100, 0x2, 0x59, 0x0, r4}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00008f5000/0x3000)=nil, &(0x7f0000000540), &(0x7f0000000580)) (async) syz_io_uring_setup(0x7127, &(0x7f0000000300)={0x0, 0x9766, 0x800, 0x0, 0x33c, 0x0, r3}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000a11000/0x2000)=nil, &(0x7f0000000380), &(0x7f0000000400)) (async) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf13]}, 0x8) syz_io_uring_setup(0x6f3, &(0x7f0000000200)={0x0, 0xdfd4, 0x4, 0x0, 0x99, 0x0, r3}, &(0x7f0000e7d000/0x2000)=nil, &(0x7f0000923000/0x3000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) (async) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_MSG_RING={0x28, 0x20, 0x0, r3, 0x7ff, &(0x7f0000000080)="0dc2492573fbfe256e22558bb7bb8b9db331524bfe49cd7cf01f20932e9c77445d7e007fd3126226d4d98e6cf7799d3ac3204db53ac73e461d", 0x39}, 0x5) openat2(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x80001, 0x6, 0x2}, 0x18) 00:12:24 executing program 4: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x10000000) 00:12:24 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x5, 0x5}}}, 0x90) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000002"}, 0x5, 0x5}}}, 0x90) 00:12:24 executing program 4: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x11000000) 00:12:24 executing program 3: r0 = syz_io_uring_setup(0x45f4, &(0x7f0000000100)={0x0, 0xa05d, 0x2, 0xfffffffd}, &(0x7f0000b52000/0x1000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000480)=0x0, &(0x7f00000003c0)=0x0) r3 = syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000800000/0x800000)=nil, &(0x7f0000e1f000/0x2000)=nil, 0x0, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000440)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r0}}, './file0\x00'}) syz_io_uring_setup(0x5303, &(0x7f00000004c0)={0x0, 0xd41, 0x100, 0x2, 0x59, 0x0, r4}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00008f5000/0x3000)=nil, &(0x7f0000000540), &(0x7f0000000580)) syz_io_uring_setup(0x7127, &(0x7f0000000300)={0x0, 0x9766, 0x800, 0x0, 0x33c, 0x0, r3}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000a11000/0x2000)=nil, &(0x7f0000000380), &(0x7f0000000400)) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf13]}, 0x8) (async) syz_io_uring_setup(0x6f3, &(0x7f0000000200)={0x0, 0xdfd4, 0x4, 0x0, 0x99, 0x0, r3}, &(0x7f0000e7d000/0x2000)=nil, &(0x7f0000923000/0x3000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) (async) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_MSG_RING={0x28, 0x20, 0x0, r3, 0x7ff, &(0x7f0000000080)="0dc2492573fbfe256e22558bb7bb8b9db331524bfe49cd7cf01f20932e9c77445d7e007fd3126226d4d98e6cf7799d3ac3204db53ac73e461d", 0x39}, 0x5) (async) openat2(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x80001, 0x6, 0x2}, 0x18) 00:12:24 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x5, 0x5}}}, 0x90) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {}, 0x5, 0x5}}}, 0x90) 00:12:24 executing program 3: ioctl$sock_x25_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000004c0)={@null, 0xd, 'team0\x00'}) r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ed3000/0x4000)=nil, 0x4000, 0x2, 0x10, r0, 0x0) r2 = syz_io_uring_setup(0x2494, &(0x7f00000001c0)={0x0, 0x7cd6}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0)=0x0, &(0x7f00000002c0)=0x0) r5 = socket$inet6_dccp(0xa, 0x6, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f0000000240)=@l2tp6={0xa, 0x0, 0x0, @remote}}, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000280)=@IORING_OP_SENDMSG={0x9, 0x12, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@tipc=@name={0x1e, 0x2, 0x3, {{0x0, 0x2}, 0xffffffff}}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000300)="e3fb9faaa5255ee689dcbacb0e94c8a60594dd50779f7c5e1ad05475ce6b7589d0902a49443d36d75c143e8172d9da2c1ff6b80a52a2ce8f8c6599d8979beb79f262ef63b7128e80a91d0f7dec5b264e8b754bab3117fc96263ae8417fd512d1d63b34fdbcd48c369275d339a92856aa5bb65fdf32873c", 0x77}], 0x1, &(0x7f0000000400)=ANY=[@ANYRESOCT=r3], 0x20d8}, 0x0, 0xc000, 0x0, {0x0, r6}}, 0x8) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x9749}, &(0x7f0000800000/0x800000)=nil, &(0x7f0000e1f000/0x2000)=nil, 0x0, 0x0) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf13]}, 0x8) r7 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) r8 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r7}}) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r8, 0xa, 0x0, r9) 00:12:24 executing program 1: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x0) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x1, 0x10, r0, 0x8000000) syz_io_uring_setup(0x2494, &(0x7f00000001c0), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000040)=0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x10, r0, 0x8000000) r5 = socket$inet6_dccp(0xa, 0x6, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f0000000240)=@l2tp6={0xa, 0x0, 0x0, @remote}}, 0x0) r6 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) r7 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r6}}) ioctl$USBDEVFS_SUBMITURB(r7, 0x8038550a, &(0x7f0000000380)=@urb_type_bulk={0x3, {0x4}, 0x1, 0x20, &(0x7f0000000340)="0862fca72e533aa222fee03a4a5d813475db194926ed65d1dce8606dd79858", 0x1f, 0x2, 0xf8cade2a, 0x2, 0x6, 0x5, &(0x7f0000000400)="1590575267436860c53d90afeb508fdd90d007fb3d37efb79be87b79ec988f8f2616e97866f1aac940d8e639c1ebddd2fb42d0666fcccc669e9c4fcde1c29e14e754576238b7919fe6ec64d13369f795459326c6b4049c853cbaeded94d3fef303a0b7e755378c1a875ea817dfb322e14ac73f95a4b28fa3e35ab7bdaa1f06b96327a0d9c0f1346a3bbfe77578546ddb439c5c37b851c479a793a1b9916579"}) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, r4, &(0x7f0000000300)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x12, 0x0, 0x0, 0x3, &(0x7f00000002c0)="9442ef6b5e7af582bef1836af1b603f1dded7f4652cc9c04463ade00e88c01618edd8c191759aca09ba1edd165f75a04bce9ff681bea95c231", 0x2, 0x0, 0x1, {0x0, r8}}, 0x2) syz_io_uring_setup(0x61f3, &(0x7f0000000600)={0x0, 0x2906, 0x200, 0x3, 0xe4}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000680), &(0x7f00000006c0)=0x0) syz_io_uring_submit(0x0, r9, &(0x7f0000000700)=@IORING_OP_NOP={0x0, 0x7}, 0x9) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[r1], 0x1) r10 = memfd_secret(0x80000) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r10, 0xc0189373, &(0x7f00000004c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1e7d}}, './file0\x00'}) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r10, 0xe, &(0x7f0000000280)={0x5d, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)=""/105, 0x69}], &(0x7f0000000200)=[0x0, 0x6], 0x1}, 0x20) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000500)=@usbdevfs_connect={0xde}) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf09]}, 0x8) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r7, 0xc01864c6, &(0x7f0000000540)={&(0x7f0000000500), 0x0, 0x800, 0x0, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x1a, 0x7, 0x7, 0xffff7fff, 0x900, 0xffffffffffffffff, 0xaa7, '\x00', 0x0, r11, 0x3, 0x3, 0x2}, 0x48) 00:12:24 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x5, 0x5}}}, 0x90) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {}, 0x5, 0x5}}}, 0x90) 00:12:24 executing program 4: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x12000000) 00:12:24 executing program 5: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000800000/0x800000)=nil, &(0x7f0000e1f000/0x2000)=nil, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[r1], 0x1) io_uring_enter(r0, 0x80040b3, 0x0, 0x0, &(0x7f0000000000)={[0xf0d]}, 0x8) (fail_nth: 74) 00:12:24 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_U