) r4 = gettid() process_vm_readv(r4, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/4078, 0xfee}, {&(0x7f0000000000)=""/123, 0x7b}, {&(0x7f0000000100)=""/57, 0x39}], 0x3, &(0x7f0000000240)=[{&(0x7f0000012940)=""/102400, 0xffffff76}], 0x1, 0x0) perf_event_open(0x0, r4, 0x1, r3, 0x8) [ 2299.588448] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11910 comm=syz-executor.4 [ 2299.612173] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11912 comm=syz-executor.4 06:59:55 executing program 6: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) preadv(r0, &(0x7f00000011c0)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x7, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x0, 0x0, 0x87ffffc) mmap$perf(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000008, 0x1010, r2, 0x4) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000100), 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r3 = syz_open_procfs(0x0, 0x0) perf_event_open(&(0x7f0000001240)={0x1, 0x80, 0x9, 0xa1, 0xf9, 0x3, 0x0, 0x7, 0xa0400, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x3, @perf_config_ext={0x58d}, 0x21, 0x1, 0x0, 0x6, 0x0, 0x0, 0x8000, 0x0, 0x80, 0x0, 0x5}, 0xffffffffffffffff, 0x4, r3, 0x0) r4 = gettid() process_vm_readv(r4, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/4078, 0xfee}, {&(0x7f0000000000)=""/123, 0x7b}, {&(0x7f0000000100)=""/57, 0x39}], 0x3, &(0x7f0000000240)=[{&(0x7f0000012940)=""/102400, 0xffffff76}], 0x1, 0x0) perf_event_open(0x0, r4, 0x1, r3, 0x8) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/consoles\x00', 0x0, 0x0) 06:59:55 executing program 3: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) preadv(r0, &(0x7f00000011c0)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x7, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x0, 0x0, 0x87ffffc) mmap$perf(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000008, 0x1010, r2, 0x4) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000100), 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r3 = syz_open_procfs(0x0, 0x0) preadv(r3, &(0x7f0000000080)=[{&(0x7f0000000000)=""/40, 0x40}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000001240)={0x1, 0x80, 0x9, 0xa1, 0xf9, 0x3, 0x0, 0x7, 0xa0400, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x3, @perf_config_ext={0x58d}, 0x21, 0x1, 0x0, 0x6, 0x9, 0x0, 0x8000, 0x0, 0x80, 0x0, 0x5}, 0xffffffffffffffff, 0x4, r3, 0x0) r4 = gettid() perf_event_open(0x0, r4, 0x1, r3, 0x8) 06:59:55 executing program 2: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) preadv(r0, &(0x7f00000011c0)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x7, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x0, 0x0, 0x87ffffc) mmap$perf(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000008, 0x1010, r2, 0x4) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000100), 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r3 = syz_open_procfs(0x0, 0x0) preadv(r3, &(0x7f0000000080)=[{&(0x7f0000000000)=""/40, 0x40}], 0x1, 0x0, 0x0) r4 = gettid() process_vm_readv(r4, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/4078, 0xfee}, {&(0x7f0000000000)=""/123, 0x7b}, {&(0x7f0000000100)=""/57, 0x39}], 0x3, &(0x7f0000000240)=[{&(0x7f0000012940)=""/102400, 0xffffff76}], 0x1, 0x0) perf_event_open(0x0, r4, 0x1, r3, 0x8) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/consoles\x00', 0x0, 0x0) 07:00:07 executing program 2: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) preadv(r0, &(0x7f00000011c0)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x7, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x0, 0x0, 0x87ffffc) mmap$perf(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000008, 0x1010, r2, 0x4) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000100), 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r3 = syz_open_procfs(0x0, 0x0) preadv(r3, &(0x7f0000000080)=[{&(0x7f0000000000)=""/40, 0x40}], 0x1, 0x0, 0x0) r4 = gettid() process_vm_readv(r4, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/4078, 0xfee}, {&(0x7f0000000000)=""/123, 0x7b}, {&(0x7f0000000100)=""/57, 0x39}], 0x3, &(0x7f0000000240)=[{&(0x7f0000012940)=""/102400, 0xffffff76}], 0x1, 0x0) perf_event_open(0x0, r4, 0x1, r3, 0x8) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/consoles\x00', 0x0, 0x0) 07:00:07 executing program 3: syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000040)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x300000c, 0x13, 0xffffffffffffffff, 0x8000000) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xa) fork() 07:00:07 executing program 6: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) preadv(r0, &(0x7f00000011c0)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x7, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x0, 0x0, 0x87ffffc) mmap$perf(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000008, 0x1010, r2, 0x4) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000100), 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r3 = syz_open_procfs(0x0, 0x0) perf_event_open(&(0x7f0000001240)={0x1, 0x80, 0x9, 0xa1, 0xf9, 0x3, 0x0, 0x7, 0xa0400, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x3, @perf_config_ext={0x58d}, 0x21, 0x1, 0x0, 0x6, 0x0, 0x0, 0x8000, 0x0, 0x80, 0x0, 0x5}, 0xffffffffffffffff, 0x4, r3, 0x0) r4 = gettid() process_vm_readv(r4, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/4078, 0xfee}, {&(0x7f0000000000)=""/123, 0x7b}, {&(0x7f0000000100)=""/57, 0x39}], 0x3, &(0x7f0000000240)=[{&(0x7f0000012940)=""/102400, 0xffffff76}], 0x1, 0x0) perf_event_open(0x0, r4, 0x1, r3, 0x8) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/consoles\x00', 0x0, 0x0) 07:00:07 executing program 7: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) preadv(r0, &(0x7f00000011c0)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x7, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x0, 0x0, 0x87ffffc) mmap$perf(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000008, 0x1010, r2, 0x4) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000100), 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r3 = syz_open_procfs(0x0, 0x0) preadv(r3, &(0x7f0000000080)=[{&(0x7f0000000000)=""/40, 0x40}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000001240)={0x1, 0x80, 0x9, 0xa1, 0xf9, 0x3, 0x0, 0x7, 0xa0400, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x3, @perf_config_ext={0x58d}, 0x21, 0x1, 0x0, 0x6, 0x9, 0x0, 0x8000, 0x0, 0x80, 0x0, 0x5}, 0xffffffffffffffff, 0x4, r3, 0x0) r4 = gettid() process_vm_readv(r4, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/4078, 0xfee}, {&(0x7f0000000000)=""/123, 0x7b}, {&(0x7f0000000100)=""/57, 0x39}], 0x3, &(0x7f0000000240)=[{&(0x7f0000012940)=""/102400, 0xffffff76}], 0x1, 0x0) 07:00:07 executing program 5: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) preadv(r0, &(0x7f00000011c0)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x7, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x0, 0x0, 0x87ffffc) mmap$perf(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000008, 0x1010, r2, 0x4) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000100), 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r3 = syz_open_procfs(0x0, 0x0) perf_event_open(&(0x7f0000001240)={0x1, 0x80, 0x9, 0xa1, 0xf9, 0x3, 0x0, 0x7, 0xa0400, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x3, @perf_config_ext={0x58d}, 0x21, 0x1, 0x0, 0x6, 0x9, 0x0, 0x8000, 0x0, 0x80, 0x0, 0x5}, 0xffffffffffffffff, 0x4, r3, 0x0) r4 = gettid() perf_event_open(0x0, r4, 0x0, r3, 0x8) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/consoles\x00', 0x0, 0x0) 07:00:07 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f00000001c0)=0x8) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x14, 0x0, 0x1900}, 0x14}}, 0x0) 07:00:07 executing program 0: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) preadv(r0, &(0x7f00000011c0)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x7, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x0, 0x0, 0x87ffffc) mmap$perf(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000008, 0x1010, r2, 0x4) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000100), 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r3 = syz_open_procfs(0x0, 0x0) preadv(r3, &(0x7f0000000080)=[{&(0x7f0000000000)=""/40, 0x40}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000001240)={0x1, 0x80, 0x9, 0xa1, 0xf9, 0x3, 0x0, 0x7, 0xa0400, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x3, @perf_config_ext={0x58d}, 0x21, 0x1, 0x0, 0x6, 0x9, 0x0, 0x8000, 0x0, 0x80, 0x0, 0x5}, 0xffffffffffffffff, 0x4, r3, 0x0) r4 = gettid() process_vm_readv(r4, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/4078, 0xfee}, {&(0x7f0000000000)=""/123, 0x7b}, {&(0x7f0000000100)=""/57, 0x39}], 0x3, &(0x7f0000000240)=[{&(0x7f0000012940)=""/102400, 0xffffff76}], 0x1, 0x0) 07:00:07 executing program 1: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) preadv(r0, &(0x7f00000011c0)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x7, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x0, 0x0, 0x87ffffc) mmap$perf(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000008, 0x1010, r2, 0x4) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000100), 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r3 = syz_open_procfs(0x0, 0x0) preadv(r3, &(0x7f0000000080)=[{&(0x7f0000000000)=""/40, 0x40}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000001240)={0x1, 0x80, 0x9, 0xa1, 0xf9, 0x3, 0x0, 0x7, 0xa0400, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x3, @perf_config_ext={0x58d}, 0x21, 0x0, 0x0, 0x6, 0x9, 0x0, 0x8000, 0x0, 0x80, 0x0, 0x5}, 0xffffffffffffffff, 0x4, r3, 0x0) r4 = gettid() process_vm_readv(r4, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/4078, 0xfee}, {&(0x7f0000000000)=""/123, 0x7b}, {&(0x7f0000000100)=""/57, 0x39}], 0x3, &(0x7f0000000240)=[{&(0x7f0000012940)=""/102400, 0xffffff76}], 0x1, 0x0) perf_event_open(0x0, r4, 0x1, r3, 0x8) [ 2312.070222] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11933 comm=syz-executor.4 [ 2312.079080] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11940 comm=syz-executor.4 07:00:07 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f00000001c0)=0x8) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x14, 0x0, 0x1a00}, 0x14}}, 0x0) 07:00:07 executing program 2: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) preadv(r0, &(0x7f00000011c0)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x7, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x0, 0x0, 0x87ffffc) mmap$perf(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000008, 0x1010, r2, 0x4) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000100), 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r3 = syz_open_procfs(0x0, 0x0) preadv(r3, &(0x7f0000000080)=[{&(0x7f0000000000)=""/40, 0x40}], 0x1, 0x0, 0x0) r4 = gettid() process_vm_readv(r4, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/4078, 0xfee}, {&(0x7f0000000000)=""/123, 0x7b}, {&(0x7f0000000100)=""/57, 0x39}], 0x3, &(0x7f0000000240)=[{&(0x7f0000012940)=""/102400, 0xffffff76}], 0x1, 0x0) perf_event_open(0x0, r4, 0x1, r3, 0x8) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/consoles\x00', 0x0, 0x0) [ 2312.201488] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11947 comm=syz-executor.4 [ 2312.209888] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11948 comm=syz-executor.4 07:00:07 executing program 5: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) preadv(r0, &(0x7f00000011c0)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x7, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x0, 0x0, 0x87ffffc) mmap$perf(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000008, 0x1010, r2, 0x4) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000100), 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r3 = syz_open_procfs(0x0, 0x0) perf_event_open(&(0x7f0000001240)={0x1, 0x80, 0x9, 0xa1, 0xf9, 0x3, 0x0, 0x7, 0xa0400, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x3, @perf_config_ext={0x58d}, 0x21, 0x1, 0x0, 0x6, 0x9, 0x0, 0x8000, 0x0, 0x80, 0x0, 0x5}, 0xffffffffffffffff, 0x4, r3, 0x0) r4 = gettid() perf_event_open(0x0, r4, 0x0, r3, 0x8) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/consoles\x00', 0x0, 0x0) 07:00:08 executing program 3: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) preadv(r0, &(0x7f00000011c0)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x7, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x0, 0x0, 0x87ffffc) mmap$perf(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000008, 0x1010, r2, 0x4) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000100), 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r3 = syz_open_procfs(0x0, 0x0) preadv(r3, &(0x7f0000000080)=[{&(0x7f0000000000)=""/40, 0x40}], 0x1, 0x0, 0x0) r4 = gettid() process_vm_readv(r4, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/4078, 0xfee}, {&(0x7f0000000000)=""/123, 0x7b}, {&(0x7f0000000100)=""/57, 0x39}], 0x3, &(0x7f0000000240)=[{&(0x7f0000012940)=""/102400, 0xffffff76}], 0x1, 0x0) perf_event_open(0x0, r4, 0x1, r3, 0x8) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/consoles\x00', 0x0, 0x0) 07:00:08 executing program 0: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000001340)) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x204800, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x1) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002480)='fd/3\x00') r2 = dup(r1) fdatasync(r2) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x40}}, './file0\x00'}) preadv2(r3, &(0x7f0000001300)=[{&(0x7f0000000080)=""/193, 0xc1}, {&(0x7f0000000180)=""/250, 0xfa}, {&(0x7f0000000300)=""/4096, 0x1000}], 0x3, 0x80000000, 0x66, 0x18) r4 = openat(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000001380)=0x100000) ioctl$FITRIM(r4, 0xc0185879, &(0x7f00000002c0)={0x0, 0x700000000}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r5, 0x0, 0x0, 0x87ffffc) 07:00:08 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f00000001c0)=0x8) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x14, 0x0, 0x1c00}, 0x14}}, 0x0) 07:00:08 executing program 7: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) preadv(r0, &(0x7f00000011c0)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x7, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x0, 0x0, 0x87ffffc) mmap$perf(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000008, 0x1010, r2, 0x4) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000100), 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r3 = syz_open_procfs(0x0, 0x0) preadv(r3, &(0x7f0000000080)=[{&(0x7f0000000000)=""/40, 0x40}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000001240)={0x1, 0x80, 0x9, 0xa1, 0xf9, 0x3, 0x0, 0x7, 0xa0400, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x3, @perf_config_ext={0x58d}, 0x21, 0x1, 0x0, 0x6, 0x9, 0x0, 0x8000, 0x0, 0x80, 0x0, 0x5}, 0xffffffffffffffff, 0x4, r3, 0x0) r4 = gettid() process_vm_readv(r4, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/4078, 0xfee}, {&(0x7f0000000000)=""/123, 0x7b}, {&(0x7f0000000100)=""/57, 0x39}], 0x3, &(0x7f0000000240)=[{&(0x7f0000012940)=""/102400, 0xffffff76}], 0x1, 0x0) [ 2312.297479] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11955 comm=syz-executor.4 [ 2312.301643] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11956 comm=syz-executor.4 07:00:08 executing program 1: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) preadv(r0, &(0x7f00000011c0)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x7, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x0, 0x0, 0x87ffffc) mmap$perf(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000008, 0x1010, r2, 0x4) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000100), 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r3 = syz_open_procfs(0x0, 0x0) preadv(r3, &(0x7f0000000080)=[{&(0x7f0000000000)=""/40, 0x40}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000001240)={0x1, 0x80, 0x9, 0xa1, 0xf9, 0x3, 0x0, 0x7, 0xa0400, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x3, @perf_config_ext={0x58d}, 0x21, 0x1, 0x0, 0x0, 0x9, 0x0, 0x8000, 0x0, 0x80, 0x0, 0x5}, 0xffffffffffffffff, 0x4, r3, 0x0) r4 = gettid() process_vm_readv(r4, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/4078, 0xfee}, {&(0x7f0000000000)=""/123, 0x7b}, {&(0x7f0000000100)=""/57, 0x39}], 0x3, &(0x7f0000000240)=[{&(0x7f0000012940)=""/102400, 0xffffff76}], 0x1, 0x0) perf_event_open(0x0, r4, 0x1, r3, 0x8) 07:00:08 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f00000001c0)=0x8) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x14, 0x0, 0x1d00}, 0x14}}, 0x0) 07:00:08 executing program 6: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) preadv(r0, &(0x7f00000011c0)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x7, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x0, 0x0, 0x87ffffc) mmap$perf(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000008, 0x1010, r2, 0x4) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000100), 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r3 = syz_open_procfs(0x0, 0x0) perf_event_open(&(0x7f0000001240)={0x1, 0x80, 0x9, 0xa1, 0xf9, 0x3, 0x0, 0x7, 0xa0400, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x3, @perf_config_ext={0x58d}, 0x21, 0x1, 0x0, 0x6, 0x0, 0x0, 0x8000, 0x0, 0x80, 0x0, 0x5}, 0xffffffffffffffff, 0x4, r3, 0x0) r4 = gettid() process_vm_readv(r4, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/4078, 0xfee}, {&(0x7f0000000000)=""/123, 0x7b}, {&(0x7f0000000100)=""/57, 0x39}], 0x3, &(0x7f0000000240)=[{&(0x7f0000012940)=""/102400, 0xffffff76}], 0x1, 0x0) perf_event_open(0x0, r4, 0x1, r3, 0x8) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/consoles\x00', 0x0, 0x0) [ 2312.399827] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11967 comm=syz-executor.4 [ 2312.411968] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11969 comm=syz-executor.4 07:00:08 executing program 5: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) preadv(r0, &(0x7f00000011c0)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x7, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x0, 0x0, 0x87ffffc) mmap$perf(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000008, 0x1010, r2, 0x4) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000100), 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r3 = syz_open_procfs(0x0, 0x0) perf_event_open(&(0x7f0000001240)={0x1, 0x80, 0x9, 0xa1, 0xf9, 0x3, 0x0, 0x7, 0xa0400, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x3, @perf_config_ext={0x58d}, 0x21, 0x1, 0x0, 0x6, 0x9, 0x0, 0x8000, 0x0, 0x80, 0x0, 0x5}, 0xffffffffffffffff, 0x4, r3, 0x0) r4 = gettid() perf_event_open(0x0, r4, 0x0, r3, 0x8) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/consoles\x00', 0x0, 0x0) 07:00:08 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f00000001c0)=0x8) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x14, 0x0, 0x1e00}, 0x14}}, 0x0) [ 2312.505919] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11978 comm=syz-executor.4 [ 2312.523904] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11981 comm=syz-executor.4 07:00:08 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f00000001c0)=0x8) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x14, 0x0, 0x2000}, 0x14}}, 0x0) 07:00:21 executing program 2: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000001340)) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x204800, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x1) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002480)='fd/3\x00') r2 = dup(r1) fdatasync(r2) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x40}}, './file0\x00'}) preadv2(r3, &(0x7f0000001300)=[{&(0x7f0000000080)=""/193, 0xc1}, {&(0x7f0000000180)=""/250, 0xfa}, {&(0x7f0000000300)=""/4096, 0x1000}], 0x3, 0x80000000, 0x66, 0x18) r4 = openat(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000001380)=0x100000) ioctl$FITRIM(r4, 0xc0185879, &(0x7f00000002c0)={0x0, 0x700000000}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r5, 0x0, 0x0, 0x87ffffc) 07:00:21 executing program 3: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000001340)) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x204800, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x1) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002480)='fd/3\x00') r2 = dup(r1) fdatasync(r2) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x40}}, './file0\x00'}) preadv2(r3, &(0x7f0000001300)=[{&(0x7f0000000080)=""/193, 0xc1}, {&(0x7f0000000180)=""/250, 0xfa}, {&(0x7f0000000300)=""/4096, 0x1000}], 0x3, 0x80000000, 0x66, 0x18) r4 = openat(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000001380)=0x100000) ioctl$FITRIM(r4, 0xc0185879, &(0x7f00000002c0)={0x0, 0x700000000}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r5, 0x0, 0x0, 0x87ffffc) 07:00:21 executing program 6: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) preadv(r0, &(0x7f00000011c0)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x7, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x0, 0x0, 0x87ffffc) mmap$perf(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000008, 0x1010, r2, 0x4) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000100), 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r3 = syz_open_procfs(0x0, 0x0) perf_event_open(&(0x7f0000001240)={0x1, 0x80, 0x9, 0xa1, 0xf9, 0x3, 0x0, 0x7, 0xa0400, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x3, @perf_config_ext={0x58d}, 0x21, 0x1, 0x0, 0x6, 0x9, 0x0, 0x0, 0x0, 0x80, 0x0, 0x5}, 0xffffffffffffffff, 0x4, r3, 0x0) r4 = gettid() process_vm_readv(r4, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/4078, 0xfee}, {&(0x7f0000000000)=""/123, 0x7b}, {&(0x7f0000000100)=""/57, 0x39}], 0x3, &(0x7f0000000240)=[{&(0x7f0000012940)=""/102400, 0xffffff76}], 0x1, 0x0) perf_event_open(0x0, r4, 0x1, r3, 0x8) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/consoles\x00', 0x0, 0x0) 07:00:21 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f00000001c0)=0x8) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x14, 0x0, 0x2100}, 0x14}}, 0x0) 07:00:21 executing program 7: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000001340)) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x204800, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x1) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002480)='fd/3\x00') r2 = dup(r1) fdatasync(r2) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x40}}, './file0\x00'}) preadv2(r3, &(0x7f0000001300)=[{&(0x7f0000000080)=""/193, 0xc1}, {&(0x7f0000000180)=""/250, 0xfa}, {&(0x7f0000000300)=""/4096, 0x1000}], 0x3, 0x80000000, 0x66, 0x18) r4 = openat(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000001380)=0x100000) ioctl$FITRIM(r4, 0xc0185879, &(0x7f00000002c0)={0x0, 0x700000000}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r5, 0x0, 0x0, 0x87ffffc) 07:00:21 executing program 5: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) preadv(r0, &(0x7f00000011c0)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x7, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x0, 0x0, 0x87ffffc) mmap$perf(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000008, 0x1010, r2, 0x4) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000100), 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r3 = syz_open_procfs(0x0, 0x0) perf_event_open(&(0x7f0000001240)={0x1, 0x80, 0x9, 0xa1, 0xf9, 0x3, 0x0, 0x7, 0xa0400, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x3, @perf_config_ext={0x58d}, 0x21, 0x1, 0x0, 0x6, 0x9, 0x0, 0x8000, 0x0, 0x80, 0x0, 0x5}, 0xffffffffffffffff, 0x4, r3, 0x0) r4 = gettid() perf_event_open(0x0, r4, 0x1, 0xffffffffffffffff, 0x8) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/consoles\x00', 0x0, 0x0) 07:00:21 executing program 1: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) preadv(r0, &(0x7f00000011c0)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x7, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x0, 0x0, 0x87ffffc) mmap$perf(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000008, 0x1010, r2, 0x4) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000100), 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r3 = syz_open_procfs(0x0, 0x0) preadv(r3, &(0x7f0000000080)=[{&(0x7f0000000000)=""/40, 0x40}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000001240)={0x1, 0x80, 0x9, 0xa1, 0xf9, 0x3, 0x0, 0x7, 0xa0400, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x3, @perf_config_ext={0x58d}, 0x21, 0x1, 0x0, 0x0, 0x9, 0x0, 0x8000, 0x0, 0x80, 0x0, 0x5}, 0xffffffffffffffff, 0x4, r3, 0x0) r4 = gettid() process_vm_readv(r4, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/4078, 0xfee}, {&(0x7f0000000000)=""/123, 0x7b}, {&(0x7f0000000100)=""/57, 0x39}], 0x3, &(0x7f0000000240)=[{&(0x7f0000012940)=""/102400, 0xffffff76}], 0x1, 0x0) perf_event_open(0x0, r4, 0x1, r3, 0x8) 07:00:21 executing program 0: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000001340)) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x204800, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x1) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002480)='fd/3\x00') r2 = dup(r1) fdatasync(r2) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x40}}, './file0\x00'}) preadv2(r3, &(0x7f0000001300)=[{&(0x7f0000000080)=""/193, 0xc1}, {&(0x7f0000000180)=""/250, 0xfa}, {&(0x7f0000000300)=""/4096, 0x1000}], 0x3, 0x80000000, 0x66, 0x18) r4 = openat(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000001380)=0x100000) ioctl$FITRIM(r4, 0xc0185879, &(0x7f00000002c0)={0x0, 0x700000000}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r5, 0x0, 0x0, 0x87ffffc) [ 2325.463626] selinux_netlink_send: 2 callbacks suppressed [ 2325.463645] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12005 comm=syz-executor.4 07:00:21 executing program 6: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) preadv(r0, &(0x7f00000011c0)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x7, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x0, 0x0, 0x87ffffc) mmap$perf(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000008, 0x1010, r2, 0x4) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000100), 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r3 = syz_open_procfs(0x0, 0x0) perf_event_open(&(0x7f0000001240)={0x1, 0x80, 0x9, 0xa1, 0xf9, 0x3, 0x0, 0x7, 0xa0400, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x3, @perf_config_ext={0x58d}, 0x21, 0x1, 0x0, 0x6, 0x9, 0x0, 0x0, 0x0, 0x80, 0x0, 0x5}, 0xffffffffffffffff, 0x4, r3, 0x0) r4 = gettid() process_vm_readv(r4, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/4078, 0xfee}, {&(0x7f0000000000)=""/123, 0x7b}, {&(0x7f0000000100)=""/57, 0x39}], 0x3, &(0x7f0000000240)=[{&(0x7f0000012940)=""/102400, 0xffffff76}], 0x1, 0x0) perf_event_open(0x0, r4, 0x1, r3, 0x8) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/consoles\x00', 0x0, 0x0) [ 2325.487852] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12006 comm=syz-executor.4 07:00:21 executing program 2: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000001340)) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x204800, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x1) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002480)='fd/3\x00') r2 = dup(r1) fdatasync(r2) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x40}}, './file0\x00'}) preadv2(r3, &(0x7f0000001300)=[{&(0x7f0000000080)=""/193, 0xc1}, {&(0x7f0000000180)=""/250, 0xfa}, {&(0x7f0000000300)=""/4096, 0x1000}], 0x3, 0x80000000, 0x66, 0x18) r4 = openat(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000001380)=0x100000) ioctl$FITRIM(r4, 0xc0185879, &(0x7f00000002c0)={0x0, 0x700000000}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r5, 0x0, 0x0, 0x87ffffc) 07:00:21 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f00000001c0)=0x8) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x14, 0x0, 0x2200}, 0x14}}, 0x0) 07:00:21 executing program 1: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) preadv(r0, &(0x7f00000011c0)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x7, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x0, 0x0, 0x87ffffc) mmap$perf(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000008, 0x1010, r2, 0x4) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000100), 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r3 = syz_open_procfs(0x0, 0x0) preadv(r3, &(0x7f0000000080)=[{&(0x7f0000000000)=""/40, 0x40}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000001240)={0x1, 0x80, 0x9, 0xa1, 0xf9, 0x3, 0x0, 0x7, 0xa0400, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x3, @perf_config_ext={0x58d}, 0x21, 0x1, 0x0, 0x0, 0x9, 0x0, 0x8000, 0x0, 0x80, 0x0, 0x5}, 0xffffffffffffffff, 0x4, r3, 0x0) r4 = gettid() process_vm_readv(r4, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/4078, 0xfee}, {&(0x7f0000000000)=""/123, 0x7b}, {&(0x7f0000000100)=""/57, 0x39}], 0x3, &(0x7f0000000240)=[{&(0x7f0000012940)=""/102400, 0xffffff76}], 0x1, 0x0) perf_event_open(0x0, r4, 0x1, r3, 0x8) 07:00:21 executing program 0: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) preadv(r0, &(0x7f00000011c0)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x7, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x0, 0x0, 0x87ffffc) mmap$perf(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000008, 0x1010, r2, 0x4) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000100), 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r3 = syz_open_procfs(0x0, 0x0) preadv(r3, &(0x7f0000000080)=[{&(0x7f0000000000)=""/40, 0x40}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000001240)={0x1, 0x80, 0x9, 0xa1, 0xf9, 0x3, 0x0, 0x7, 0xa0400, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x3, @perf_config_ext={0x58d}, 0x21, 0x1, 0x0, 0x6, 0x9, 0x0, 0x8000, 0x0, 0x80, 0x0, 0x5}, 0xffffffffffffffff, 0x4, r3, 0x0) r4 = gettid() process_vm_readv(r4, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/4078, 0xfee}, {&(0x7f0000000000)=""/123, 0x7b}, {&(0x7f0000000100)=""/57, 0x39}], 0x3, &(0x7f0000000240)=[{&(0x7f0000012940)=""/102400, 0xffffff76}], 0x1, 0x0) [ 2325.636563] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12013 comm=syz-executor.4 [ 2325.645004] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12016 comm=syz-executor.4 07:00:36 executing program 3: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) preadv(r0, &(0x7f00000011c0)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x7, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x0, 0x0, 0x87ffffc) mmap$perf(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000008, 0x1010, r2, 0x4) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000100), 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r3 = syz_open_procfs(0x0, 0x0) preadv(r3, &(0x7f0000000080)=[{&(0x7f0000000000)=""/40, 0x40}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000001240)={0x1, 0x80, 0x9, 0xa1, 0xf9, 0x3, 0x0, 0x7, 0xa0400, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x3, @perf_config_ext={0x58d}, 0x21, 0x1, 0x0, 0x6, 0x9, 0x0, 0x8000, 0x0, 0x80, 0x0, 0x5}, 0xffffffffffffffff, 0x4, r3, 0x0) r4 = gettid() process_vm_readv(r4, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/4078, 0xfee}, {&(0x7f0000000000)=""/123, 0x7b}, {&(0x7f0000000100)=""/57, 0x39}], 0x3, &(0x7f0000000240)=[{&(0x7f0000012940)=""/102400, 0xffffff76}], 0x1, 0x0) [ 2340.864508] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12029 comm=syz-executor.4 07:00:36 executing program 7: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) preadv(r0, &(0x7f00000011c0)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x7, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x0, 0x0, 0x87ffffc) mmap$perf(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000008, 0x1010, r2, 0x4) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000100), 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r3 = syz_open_procfs(0x0, 0x0) preadv(r3, &(0x7f0000000080)=[{&(0x7f0000000000)=""/40, 0x40}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000001240)={0x1, 0x80, 0x9, 0xa1, 0xf9, 0x3, 0x0, 0x7, 0xa0400, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x3, @perf_config_ext={0x58d}, 0x21, 0x1, 0x0, 0x6, 0x9, 0x0, 0x8000, 0x0, 0x80, 0x0, 0x5}, 0xffffffffffffffff, 0x4, r3, 0x0) process_vm_readv(0x0, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/4078, 0xfee}, {&(0x7f0000000000)=""/123, 0x7b}, {&(0x7f0000000100)=""/57, 0x39}], 0x3, &(0x7f0000000240)=[{&(0x7f0000012940)=""/102400, 0xffffff76}], 0x1, 0x0) perf_event_open(0x0, 0x0, 0x1, r3, 0x8) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/consoles\x00', 0x0, 0x0) 07:00:36 executing program 0: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) preadv(r0, &(0x7f00000011c0)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x7, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x0, 0x0, 0x87ffffc) mmap$perf(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000008, 0x1010, r2, 0x4) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000100), 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r3 = syz_open_procfs(0x0, 0x0) preadv(r3, &(0x7f0000000080)=[{&(0x7f0000000000)=""/40, 0x40}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000001240)={0x1, 0x80, 0x9, 0xa1, 0xf9, 0x3, 0x0, 0x7, 0xa0400, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x3, @perf_config_ext={0x58d}, 0x21, 0x1, 0x0, 0x6, 0x9, 0x0, 0x8000, 0x0, 0x80, 0x0, 0x5}, 0xffffffffffffffff, 0x4, r3, 0x0) r4 = gettid() process_vm_readv(r4, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/4078, 0xfee}, {&(0x7f0000000000)=""/123, 0x7b}, {&(0x7f0000000100)=""/57, 0x39}], 0x3, &(0x7f0000000240)=[{&(0x7f0000012940)=""/102400, 0xffffff76}], 0x1, 0x0) 07:00:36 executing program 2: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) preadv(r0, &(0x7f00000011c0)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x7, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x0, 0x0, 0x87ffffc) mmap$perf(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000008, 0x1010, r2, 0x4) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000100), 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r3 = syz_open_procfs(0x0, 0x0) preadv(r3, &(0x7f0000000080)=[{&(0x7f0000000000)=""/40, 0x40}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000001240)={0x1, 0x80, 0x9, 0xa1, 0xf9, 0x3, 0x0, 0x7, 0xa0400, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x3, @perf_config_ext={0x58d}, 0x21, 0x1, 0x0, 0x0, 0x9, 0x0, 0x8000, 0x0, 0x80, 0x0, 0x5}, 0xffffffffffffffff, 0x4, r3, 0x0) r4 = gettid() process_vm_readv(r4, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/4078, 0xfee}, {&(0x7f0000000000)=""/123, 0x7b}, {&(0x7f0000000100)=""/57, 0x39}], 0x3, &(0x7f0000000240)=[{&(0x7f0000012940)=""/102400, 0xffffff76}], 0x1, 0x0) perf_event_open(0x0, r4, 0x1, r3, 0x8) 07:00:36 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f00000001c0)=0x8) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x14, 0x0, 0x2400}, 0x14}}, 0x0) 07:00:36 executing program 5: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) preadv(r0, &(0x7f00000011c0)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x7, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x0, 0x0, 0x87ffffc) mmap$perf(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000008, 0x1010, r2, 0x4) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000100), 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r3 = syz_open_procfs(0x0, 0x0) perf_event_open(&(0x7f0000001240)={0x1, 0x80, 0x9, 0xa1, 0xf9, 0x3, 0x0, 0x7, 0xa0400, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x3, @perf_config_ext={0x58d}, 0x21, 0x1, 0x0, 0x6, 0x9, 0x0, 0x8000, 0x0, 0x80, 0x0, 0x5}, 0xffffffffffffffff, 0x4, r3, 0x0) r4 = gettid() perf_event_open(0x0, r4, 0x1, 0xffffffffffffffff, 0x8) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/consoles\x00', 0x0, 0x0) 07:00:36 executing program 1: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) preadv(r0, &(0x7f00000011c0)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x7, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x0, 0x0, 0x87ffffc) mmap$perf(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000008, 0x1010, r2, 0x4) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000100), 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r3 = syz_open_procfs(0x0, 0x0) preadv(r3, &(0x7f0000000080)=[{&(0x7f0000000000)=""/40, 0x40}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000001240)={0x1, 0x80, 0x9, 0xa1, 0xf9, 0x3, 0x0, 0x7, 0xa0400, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x3, @perf_config_ext={0x58d}, 0x21, 0x1, 0x0, 0x6, 0x0, 0x0, 0x8000, 0x0, 0x80, 0x0, 0x5}, 0xffffffffffffffff, 0x4, r3, 0x0) r4 = gettid() process_vm_readv(r4, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/4078, 0xfee}, {&(0x7f0000000000)=""/123, 0x7b}, {&(0x7f0000000100)=""/57, 0x39}], 0x3, &(0x7f0000000240)=[{&(0x7f0000012940)=""/102400, 0xffffff76}], 0x1, 0x0) perf_event_open(0x0, r4, 0x1, r3, 0x8) 07:00:36 executing program 6: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) preadv(r0, &(0x7f00000011c0)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x7, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x0, 0x0, 0x87ffffc) mmap$perf(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000008, 0x1010, r2, 0x4) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000100), 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r3 = syz_open_procfs(0x0, 0x0) perf_event_open(&(0x7f0000001240)={0x1, 0x80, 0x9, 0xa1, 0xf9, 0x3, 0x0, 0x7, 0xa0400, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x3, @perf_config_ext={0x58d}, 0x21, 0x1, 0x0, 0x6, 0x9, 0x0, 0x0, 0x0, 0x80, 0x0, 0x5}, 0xffffffffffffffff, 0x4, r3, 0x0) r4 = gettid() process_vm_readv(r4, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/4078, 0xfee}, {&(0x7f0000000000)=""/123, 0x7b}, {&(0x7f0000000100)=""/57, 0x39}], 0x3, &(0x7f0000000240)=[{&(0x7f0000012940)=""/102400, 0xffffff76}], 0x1, 0x0) perf_event_open(0x0, r4, 0x1, r3, 0x8) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/consoles\x00', 0x0, 0x0) [ 2340.907715] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12038 comm=syz-executor.4 07:00:36 executing program 5: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) preadv(r0, &(0x7f00000011c0)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x7, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x0, 0x0, 0x87ffffc) mmap$perf(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000008, 0x1010, r2, 0x4) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000100), 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r3 = syz_open_procfs(0x0, 0x0) perf_event_open(&(0x7f0000001240)={0x1, 0x80, 0x9, 0xa1, 0xf9, 0x3, 0x0, 0x7, 0xa0400, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x3, @perf_config_ext={0x58d}, 0x21, 0x1, 0x0, 0x6, 0x9, 0x0, 0x8000, 0x0, 0x80, 0x0, 0x5}, 0xffffffffffffffff, 0x4, r3, 0x0) r4 = gettid() perf_event_open(0x0, r4, 0x1, 0xffffffffffffffff, 0x8) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/consoles\x00', 0x0, 0x0) 07:00:36 executing program 1: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) preadv(r0, &(0x7f00000011c0)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x7, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x0, 0x0, 0x87ffffc) mmap$perf(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000008, 0x1010, r2, 0x4) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000100), 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r3 = syz_open_procfs(0x0, 0x0) preadv(r3, &(0x7f0000000080)=[{&(0x7f0000000000)=""/40, 0x40}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000001240)={0x1, 0x80, 0x9, 0xa1, 0xf9, 0x3, 0x0, 0x7, 0xa0400, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x3, @perf_config_ext={0x58d}, 0x21, 0x1, 0x0, 0x6, 0x0, 0x0, 0x8000, 0x0, 0x80, 0x0, 0x5}, 0xffffffffffffffff, 0x4, r3, 0x0) r4 = gettid() process_vm_readv(r4, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/4078, 0xfee}, {&(0x7f0000000000)=""/123, 0x7b}, {&(0x7f0000000100)=""/57, 0x39}], 0x3, &(0x7f0000000240)=[{&(0x7f0000012940)=""/102400, 0xffffff76}], 0x1, 0x0) perf_event_open(0x0, r4, 0x1, r3, 0x8) 07:00:36 executing program 2: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) preadv(r0, &(0x7f00000011c0)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x7, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x0, 0x0, 0x87ffffc) mmap$perf(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000008, 0x1010, r2, 0x4) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000100), 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r3 = syz_open_procfs(0x0, 0x0) preadv(r3, &(0x7f0000000080)=[{&(0x7f0000000000)=""/40, 0x40}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000001240)={0x1, 0x80, 0x9, 0xa1, 0xf9, 0x3, 0x0, 0x7, 0xa0400, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x3, @perf_config_ext={0x58d}, 0x21, 0x1, 0x0, 0x6, 0x9, 0x0, 0x8000, 0x0, 0x80, 0x0, 0x5}, 0xffffffffffffffff, 0x4, r3, 0x0) process_vm_readv(0x0, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/4078, 0xfee}, {&(0x7f0000000000)=""/123, 0x7b}, {&(0x7f0000000100)=""/57, 0x39}], 0x3, &(0x7f0000000240)=[{&(0x7f0000012940)=""/102400, 0xffffff76}], 0x1, 0x0) perf_event_open(0x0, 0x0, 0x1, r3, 0x8) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/consoles\x00', 0x0, 0x0) 07:00:36 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f00000001c0)=0x8) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x14, 0x0, 0x2500}, 0x14}}, 0x0) 07:00:36 executing program 0: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) preadv(r0, &(0x7f00000011c0)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x7, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x0, 0x0, 0x87ffffc) mmap$perf(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000008, 0x1010, r2, 0x4) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000100), 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r3 = syz_open_procfs(0x0, 0x0) preadv(r3, &(0x7f0000000080)=[{&(0x7f0000000000)=""/40, 0x40}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000001240)={0x1, 0x80, 0x9, 0xa1, 0xf9, 0x3, 0x0, 0x7, 0xa0400, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x3, @perf_config_ext={0x58d}, 0x21, 0x1, 0x0, 0x6, 0x9, 0x0, 0x8000, 0x0, 0x80, 0x0, 0x5}, 0xffffffffffffffff, 0x4, r3, 0x0) process_vm_readv(0x0, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/4078, 0xfee}, {&(0x7f0000000000)=""/123, 0x7b}, {&(0x7f0000000100)=""/57, 0x39}], 0x3, &(0x7f0000000240)=[{&(0x7f0000012940)=""/102400, 0xffffff76}], 0x1, 0x0) perf_event_open(0x0, 0x0, 0x1, r3, 0x8) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/consoles\x00', 0x0, 0x0) [ 2341.089782] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12049 comm=syz-executor.4 [ 2341.105533] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12053 comm=syz-executor.4 07:00:36 executing program 5: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) preadv(r0, &(0x7f00000011c0)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x7, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x0, 0x0, 0x87ffffc) mmap$perf(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000008, 0x1010, r2, 0x4) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000100), 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r3 = syz_open_procfs(0x0, 0x0) perf_event_open(&(0x7f0000001240)={0x1, 0x80, 0x9, 0xa1, 0xf9, 0x3, 0x0, 0x7, 0xa0400, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x3, @perf_config_ext={0x58d}, 0x21, 0x1, 0x0, 0x6, 0x9, 0x0, 0x8000, 0x0, 0x80, 0x0, 0x5}, 0xffffffffffffffff, 0x4, r3, 0x0) r4 = gettid() perf_event_open(0x0, r4, 0x1, r3, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/consoles\x00', 0x0, 0x0) 07:00:50 executing program 5: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) preadv(r0, &(0x7f00000011c0)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x7, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x0, 0x0, 0x87ffffc) mmap$perf(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000008, 0x1010, r2, 0x4) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000100), 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r3 = syz_open_procfs(0x0, 0x0) perf_event_open(&(0x7f0000001240)={0x1, 0x80, 0x9, 0xa1, 0xf9, 0x3, 0x0, 0x7, 0xa0400, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x3, @perf_config_ext={0x58d}, 0x21, 0x1, 0x0, 0x6, 0x9, 0x0, 0x8000, 0x0, 0x80, 0x0, 0x5}, 0xffffffffffffffff, 0x4, r3, 0x0) r4 = gettid() perf_event_open(0x0, r4, 0x1, r3, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/consoles\x00', 0x0, 0x0) 07:00:50 executing program 6: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) preadv(r0, &(0x7f00000011c0)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x7, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x0, 0x0, 0x87ffffc) mmap$perf(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000008, 0x1010, r2, 0x4) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000100), 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r3 = syz_open_procfs(0x0, 0x0) perf_event_open(&(0x7f0000001240)={0x1, 0x80, 0x9, 0xa1, 0xf9, 0x3, 0x0, 0x7, 0xa0400, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x3, @perf_config_ext={0x58d}, 0x21, 0x1, 0x0, 0x6, 0x9, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x5}, 0xffffffffffffffff, 0x4, r3, 0x0) r4 = gettid() process_vm_readv(r4, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/4078, 0xfee}, {&(0x7f0000000000)=""/123, 0x7b}, {&(0x7f0000000100)=""/57, 0x39}], 0x3, &(0x7f0000000240)=[{&(0x7f0000012940)=""/102400, 0xffffff76}], 0x1, 0x0) perf_event_open(0x0, r4, 0x1, r3, 0x8) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/consoles\x00', 0x0, 0x0) 07:00:50 executing program 0: openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r0, 0x0, 0x0, 0x87ffffc) mmap$perf(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000008, 0x10, 0xffffffffffffffff, 0x4) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x12, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = syz_open_procfs(0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001240)={0x1, 0x80, 0x0, 0xa1, 0x0, 0x0, 0x0, 0x7, 0xa0400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x3, @perf_config_ext, 0x21, 0x1, 0x0, 0x0, 0x9, 0x0, 0x8000, 0x0, 0x80, 0x0, 0x5}, 0xffffffffffffffff, 0x4, r1, 0x0) r2 = gettid() process_vm_readv(r2, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/4078, 0xfee}, {&(0x7f0000000000)=""/123, 0x7b}, {&(0x7f0000000100)=""/57, 0x39}], 0x3, &(0x7f0000000240)=[{&(0x7f0000012940)=""/102400, 0xffffff76}], 0x1, 0x0) (fail_nth: 1) perf_event_open(0x0, r2, 0x1, r1, 0x8) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/consoles\x00', 0x0, 0x0) 07:00:50 executing program 3: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000001340)) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x204800, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x1) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002480)='fd/3\x00') r2 = dup(r1) fdatasync(r2) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x40}}, './file0\x00'}) preadv2(r3, &(0x7f0000001300)=[{&(0x7f0000000080)=""/193, 0xc1}, {&(0x7f0000000180)=""/250, 0xfa}, {&(0x7f0000000300)=""/4096, 0x1000}], 0x3, 0x80000000, 0x66, 0x18) r4 = openat(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000001380)=0x100000) ioctl$FITRIM(r4, 0xc0185879, &(0x7f00000002c0)={0x0, 0x700000000}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r5, 0x0, 0x0, 0x87ffffc) 07:00:50 executing program 7: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) preadv(r0, &(0x7f00000011c0)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x7, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x0, 0x0, 0x87ffffc) mmap$perf(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000008, 0x1010, r2, 0x4) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000100), 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r3 = syz_open_procfs(0x0, 0x0) preadv(r3, &(0x7f0000000080)=[{&(0x7f0000000000)=""/40, 0x40}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000001240)={0x1, 0x80, 0x9, 0xa1, 0xf9, 0x3, 0x0, 0x7, 0xa0400, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x3, @perf_config_ext={0x58d}, 0x21, 0x1, 0x0, 0x6, 0x9, 0x0, 0x8000, 0x0, 0x80, 0x0, 0x5}, 0xffffffffffffffff, 0x4, r3, 0x0) process_vm_readv(0x0, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/4078, 0xfee}, {&(0x7f0000000000)=""/123, 0x7b}, {&(0x7f0000000100)=""/57, 0x39}], 0x3, &(0x7f0000000240)=[{&(0x7f0000012940)=""/102400, 0xffffff76}], 0x1, 0x0) perf_event_open(0x0, 0x0, 0x1, r3, 0x8) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/consoles\x00', 0x0, 0x0) 07:00:50 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f00000001c0)=0x8) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x14, 0x0, 0x2600}, 0x14}}, 0x0) 07:00:50 executing program 2: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000001340)) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x204800, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x1) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002480)='fd/3\x00') r2 = dup(r1) fdatasync(r2) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x40}}, './file0\x00'}) preadv2(r3, &(0x7f0000001300)=[{&(0x7f0000000080)=""/193, 0xc1}, {&(0x7f0000000180)=""/250, 0xfa}, {&(0x7f0000000300)=""/4096, 0x1000}], 0x3, 0x80000000, 0x66, 0x18) r4 = openat(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000001380)=0x100000) ioctl$FITRIM(r4, 0xc0185879, &(0x7f00000002c0)={0x0, 0x700000000}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r5, 0x0, 0x0, 0x87ffffc) 07:00:50 executing program 1: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) preadv(r0, &(0x7f00000011c0)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x7, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x0, 0x0, 0x87ffffc) mmap$perf(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000008, 0x1010, r2, 0x4) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000100), 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r3 = syz_open_procfs(0x0, 0x0) preadv(r3, &(0x7f0000000080)=[{&(0x7f0000000000)=""/40, 0x40}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000001240)={0x1, 0x80, 0x9, 0xa1, 0xf9, 0x3, 0x0, 0x7, 0xa0400, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x3, @perf_config_ext={0x58d}, 0x21, 0x1, 0x0, 0x6, 0x0, 0x0, 0x8000, 0x0, 0x80, 0x0, 0x5}, 0xffffffffffffffff, 0x4, r3, 0x0) r4 = gettid() process_vm_readv(r4, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/4078, 0xfee}, {&(0x7f0000000000)=""/123, 0x7b}, {&(0x7f0000000100)=""/57, 0x39}], 0x3, &(0x7f0000000240)=[{&(0x7f0000012940)=""/102400, 0xffffff76}], 0x1, 0x0) perf_event_open(0x0, r4, 0x1, r3, 0x8) [ 2354.939210] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12081 comm=syz-executor.4 [ 2354.953106] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12083 comm=syz-executor.4 07:00:50 executing program 6: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) preadv(r0, &(0x7f00000011c0)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x7, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x0, 0x0, 0x87ffffc) mmap$perf(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000008, 0x1010, r2, 0x4) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000100), 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r3 = syz_open_procfs(0x0, 0x0) perf_event_open(&(0x7f0000001240)={0x1, 0x80, 0x9, 0xa1, 0xf9, 0x3, 0x0, 0x7, 0xa0400, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x3, @perf_config_ext={0x58d}, 0x21, 0x1, 0x0, 0x6, 0x9, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x5}, 0xffffffffffffffff, 0x4, r3, 0x0) r4 = gettid() process_vm_readv(r4, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/4078, 0xfee}, {&(0x7f0000000000)=""/123, 0x7b}, {&(0x7f0000000100)=""/57, 0x39}], 0x3, &(0x7f0000000240)=[{&(0x7f0000012940)=""/102400, 0xffffff76}], 0x1, 0x0) perf_event_open(0x0, r4, 0x1, r3, 0x8) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/consoles\x00', 0x0, 0x0) [ 2354.979273] FAULT_INJECTION: forcing a failure. [ 2354.979273] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2354.981775] CPU: 0 PID: 12080 Comm: syz-executor.0 Not tainted 5.18.0-rc1-next-20220406 #1 [ 2354.983476] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2354.985755] Call Trace: [ 2354.986280] [ 2354.986730] dump_stack_lvl+0x8b/0xb3 [ 2354.987520] should_fail.cold+0x5/0xa [ 2354.988298] _copy_from_user+0x2a/0x170 [ 2354.989120] iovec_from_user+0x236/0x3c0 [ 2354.989967] __import_iovec+0x64/0x5c0 [ 2354.990786] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 2354.991945] import_iovec+0x83/0xb0 [ 2354.992702] process_vm_rw+0xe5/0x260 [ 2354.993504] ? process_vm_rw_core.constprop.0+0x9a0/0x9a0 [ 2354.994649] ? ksys_write+0x20c/0x250 [ 2354.995443] ? lock_downgrade+0x6d0/0x6d0 [ 2354.996295] ? lock_is_held_type+0xd7/0x130 [ 2354.997200] ? find_held_lock+0x2c/0x110 [ 2354.998039] ? __mutex_unlock_slowpath+0x15c/0x5e0 [ 2354.999073] ? bit_wait_io_timeout+0x160/0x160 [ 2354.999996] ? lock_is_held_type+0xd7/0x130 [ 2355.000878] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2355.002002] ? vfs_write+0x422/0xac0 [ 2355.002771] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 2355.003880] ? fput+0x2a/0x50 [ 2355.004531] __x64_sys_process_vm_readv+0xdf/0x1b0 [ 2355.005530] ? lockdep_hardirqs_on+0x79/0x100 [ 2355.006448] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2355.007504] do_syscall_64+0x3b/0x90 [ 2355.008263] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2355.009313] RIP: 0033:0x7f1173378b19 [ 2355.010059] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2355.013785] RSP: 002b:00007f11708ee188 EFLAGS: 00000246 ORIG_RAX: 0000000000000136 [ 2355.015332] RAX: ffffffffffffffda RBX: 00007f117348bf60 RCX: 00007f1173378b19 [ 2355.016775] RDX: 0000000000000003 RSI: 00000000200000c0 RDI: 00000000000002ff [ 2355.018217] RBP: 00007f11708ee1d0 R08: 0000000000000001 R09: 0000000000000000 [ 2355.019658] R10: 0000000020000240 R11: 0000000000000246 R12: 0000000000000001 [ 2355.021096] R13: 00007ffeef59581f R14: 00007f11708ee300 R15: 0000000000022000 [ 2355.022572] 07:00:50 executing program 3: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) preadv(r0, &(0x7f00000011c0)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x7, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x0, 0x0, 0x87ffffc) mmap$perf(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000008, 0x1010, r2, 0x4) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000100), 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r3 = syz_open_procfs(0x0, 0x0) perf_event_open(&(0x7f0000001240)={0x1, 0x80, 0x9, 0xa1, 0xf9, 0x3, 0x0, 0x7, 0xa0400, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x3, @perf_config_ext={0x58d}, 0x21, 0x1, 0x0, 0x6, 0x9, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x5}, 0xffffffffffffffff, 0x4, r3, 0x0) r4 = gettid() process_vm_readv(r4, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/4078, 0xfee}, {&(0x7f0000000000)=""/123, 0x7b}, {&(0x7f0000000100)=""/57, 0x39}], 0x3, &(0x7f0000000240)=[{&(0x7f0000012940)=""/102400, 0xffffff76}], 0x1, 0x0) perf_event_open(0x0, r4, 0x1, r3, 0x8) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/consoles\x00', 0x0, 0x0) 07:00:50 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f00000001c0)=0x8) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x14, 0x0, 0x2800}, 0x14}}, 0x0) 07:00:50 executing program 7: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000001340)) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x204800, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x1) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002480)='fd/3\x00') r2 = dup(r1) fdatasync(r2) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x40}}, './file0\x00'}) preadv2(r3, &(0x7f0000001300)=[{&(0x7f0000000080)=""/193, 0xc1}, {&(0x7f0000000180)=""/250, 0xfa}, {&(0x7f0000000300)=""/4096, 0x1000}], 0x3, 0x80000000, 0x66, 0x18) r4 = openat(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000001380)=0x100000) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r5, 0x0, 0x0, 0x87ffffc) (fail_nth: 1) sendfile(r5, r4, 0x0, 0x80000000) 07:00:50 executing program 5: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) preadv(r0, &(0x7f00000011c0)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x7, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x0, 0x0, 0x87ffffc) mmap$perf(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000008, 0x1010, r2, 0x4) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000100), 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r3 = syz_open_procfs(0x0, 0x0) perf_event_open(&(0x7f0000001240)={0x1, 0x80, 0x9, 0xa1, 0xf9, 0x3, 0x0, 0x7, 0xa0400, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x3, @perf_config_ext={0x58d}, 0x21, 0x1, 0x0, 0x6, 0x9, 0x0, 0x8000, 0x0, 0x80, 0x0, 0x5}, 0xffffffffffffffff, 0x4, r3, 0x0) r4 = gettid() perf_event_open(0x0, r4, 0x1, r3, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/consoles\x00', 0x0, 0x0) [ 2355.140667] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12091 comm=syz-executor.4 [ 2355.147596] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12092 comm=syz-executor.4 07:00:50 executing program 1: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) preadv(r0, &(0x7f00000011c0)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x7, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x0, 0x0, 0x87ffffc) mmap$perf(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000008, 0x1010, r2, 0x4) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000100), 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r3 = syz_open_procfs(0x0, 0x0) preadv(r3, &(0x7f0000000080)=[{&(0x7f0000000000)=""/40, 0x40}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000001240)={0x1, 0x80, 0x9, 0xa1, 0xf9, 0x3, 0x0, 0x7, 0xa0400, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x3, @perf_config_ext={0x58d}, 0x21, 0x1, 0x0, 0x6, 0x9, 0x0, 0x0, 0x0, 0x80, 0x0, 0x5}, 0xffffffffffffffff, 0x4, r3, 0x0) r4 = gettid() process_vm_readv(r4, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/4078, 0xfee}, {&(0x7f0000000000)=""/123, 0x7b}, {&(0x7f0000000100)=""/57, 0x39}], 0x3, &(0x7f0000000240)=[{&(0x7f0000012940)=""/102400, 0xffffff76}], 0x1, 0x0) perf_event_open(0x0, r4, 0x1, r3, 0x8) 07:00:50 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f00000001c0)=0x8) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x14, 0x0, 0x2900}, 0x14}}, 0x0) [ 2355.269082] FAULT_INJECTION: forcing a failure. [ 2355.269082] name failslab, interval 1, probability 0, space 0, times 0 [ 2355.271891] CPU: 0 PID: 12096 Comm: syz-executor.7 Not tainted 5.18.0-rc1-next-20220406 #1 [ 2355.273590] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2355.275903] Call Trace: [ 2355.276428] [ 2355.276881] dump_stack_lvl+0x8b/0xb3 [ 2355.277676] should_fail.cold+0x5/0xa [ 2355.278467] ? jbd2__journal_start+0x18c/0x8d0 [ 2355.279405] should_failslab+0x5/0x10 [ 2355.280194] kmem_cache_alloc+0x5b/0x480 [ 2355.281055] jbd2__journal_start+0x18c/0x8d0 [ 2355.281969] __ext4_journal_start_sb+0x392/0x470 [ 2355.282971] ? ext4_setattr+0x2070/0x2070 [ 2355.283832] ext4_dirty_inode+0x9d/0x110 [ 2355.284668] __mark_inode_dirty+0x425/0xeb0 [ 2355.285556] ? file_remove_privs+0x5b0/0x5b0 [ 2355.286480] ? security_inode_need_killpriv+0x79/0xa0 [ 2355.287548] generic_update_time+0x21d/0x350 [ 2355.288462] file_update_time+0x436/0x520 [ 2355.289318] ? discard_new_inode+0x190/0x190 [ 2355.290251] ? down_write_killable+0x170/0x170 [ 2355.291200] file_modified+0x77/0x90 [ 2355.291972] ext4_fallocate+0x3bc/0x3c90 [ 2355.292815] ? lock_acquire+0x1b2/0x530 [ 2355.293644] ? lock_release+0x750/0x750 [ 2355.294474] ? ext4_ext_truncate+0x3e0/0x3e0 [ 2355.295387] ? lock_is_held_type+0xd7/0x130 [ 2355.296288] ? ext4_ext_truncate+0x3e0/0x3e0 [ 2355.297203] vfs_fallocate+0x489/0xe00 [ 2355.298017] __x64_sys_fallocate+0xcf/0x140 [ 2355.298933] do_syscall_64+0x3b/0x90 [ 2355.299708] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2355.300783] RIP: 0033:0x7fdba5ddfb19 [ 2355.301538] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2355.305319] RSP: 002b:00007fdba3355188 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 2355.306888] RAX: ffffffffffffffda RBX: 00007fdba5ef2f60 RCX: 00007fdba5ddfb19 [ 2355.308344] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 2355.309815] RBP: 00007fdba33551d0 R08: 0000000000000000 R09: 0000000000000000 [ 2355.311277] R10: 00000000087ffffc R11: 0000000000000246 R12: 0000000000000001 [ 2355.312742] R13: 00007ffe895a664f R14: 00007fdba3355300 R15: 0000000000022000 [ 2355.314239] [ 2355.363239] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12105 comm=syz-executor.4 [ 2355.371007] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12106 comm=syz-executor.4 07:00:51 executing program 2: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x204800, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x1) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002480)='fd/3\x00') fdatasync(0xffffffffffffffff) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x40}}, './file0\x00'}) preadv2(r2, &(0x7f0000001300)=[{&(0x7f0000000080)=""/193, 0xc1}, {&(0x7f0000000180)=""/250, 0xfa}, {&(0x7f0000000300)=""/4096, 0x1000}], 0x3, 0x80000000, 0x66, 0x18) openat(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r3, 0x0, 0x0, 0x87ffffc) (fail_nth: 1) 07:00:51 executing program 0: openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r0, 0x0, 0x0, 0x87ffffc) mmap$perf(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000008, 0x10, 0xffffffffffffffff, 0x4) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x12, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = syz_open_procfs(0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001240)={0x1, 0x80, 0x0, 0xa1, 0x0, 0x0, 0x0, 0x7, 0xa0400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x3, @perf_config_ext, 0x21, 0x1, 0x0, 0x0, 0x9, 0x0, 0x8000, 0x0, 0x80, 0x0, 0x5}, 0xffffffffffffffff, 0x4, r1, 0x0) r2 = gettid() process_vm_readv(r2, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/4078, 0xfee}, {&(0x7f0000000000)=""/123, 0x7b}, {&(0x7f0000000100)=""/57, 0x39}], 0x3, &(0x7f0000000240)=[{&(0x7f0000012940)=""/102400, 0xffffff76}], 0x1, 0x0) (fail_nth: 2) perf_event_open(0x0, r2, 0x1, r1, 0x8) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/consoles\x00', 0x0, 0x0) [ 2355.496127] FAULT_INJECTION: forcing a failure. [ 2355.496127] name failslab, interval 1, probability 0, space 0, times 0 [ 2355.498652] CPU: 0 PID: 12110 Comm: syz-executor.2 Not tainted 5.18.0-rc1-next-20220406 #1 [ 2355.500375] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2355.502709] Call Trace: [ 2355.503232] [ 2355.503695] dump_stack_lvl+0x8b/0xb3 [ 2355.504492] should_fail.cold+0x5/0xa [ 2355.505282] ? jbd2__journal_start+0x18c/0x8d0 [ 2355.506237] should_failslab+0x5/0x10 [ 2355.507027] kmem_cache_alloc+0x5b/0x480 [ 2355.507884] jbd2__journal_start+0x18c/0x8d0 [ 2355.508784] __ext4_journal_start_sb+0x392/0x470 [ 2355.509753] ? ext4_setattr+0x2070/0x2070 [ 2355.510611] ext4_dirty_inode+0x9d/0x110 [ 2355.511442] __mark_inode_dirty+0x425/0xeb0 [ 2355.512325] ? file_remove_privs+0x5b0/0x5b0 [ 2355.513237] ? security_inode_need_killpriv+0x79/0xa0 [ 2355.514307] generic_update_time+0x21d/0x350 [ 2355.515210] file_update_time+0x436/0x520 [ 2355.516062] ? discard_new_inode+0x190/0x190 [ 2355.516966] ? down_write_killable+0x170/0x170 [ 2355.517912] file_modified+0x77/0x90 [ 2355.518690] ext4_fallocate+0x3bc/0x3c90 [ 2355.519519] ? lock_acquire+0x1b2/0x530 [ 2355.520338] ? lock_release+0x750/0x750 [ 2355.521157] ? ext4_ext_truncate+0x3e0/0x3e0 [ 2355.522081] ? lock_is_held_type+0xd7/0x130 [ 2355.522982] ? ext4_ext_truncate+0x3e0/0x3e0 [ 2355.523892] vfs_fallocate+0x489/0xe00 [ 2355.524720] __x64_sys_fallocate+0xcf/0x140 [ 2355.525622] do_syscall_64+0x3b/0x90 [ 2355.526405] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2355.527433] RIP: 0033:0x7fd845bccb19 [ 2355.528169] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2355.531821] RSP: 002b:00007fd843142188 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 2355.533323] RAX: ffffffffffffffda RBX: 00007fd845cdff60 RCX: 00007fd845bccb19 [ 2355.534755] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 2355.536161] RBP: 00007fd8431421d0 R08: 0000000000000000 R09: 0000000000000000 [ 2355.537560] R10: 00000000087ffffc R11: 0000000000000246 R12: 0000000000000001 [ 2355.538969] R13: 00007ffde12fa01f R14: 00007fd843142300 R15: 0000000000022000 [ 2355.540402] 07:00:51 executing program 7: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000001340)) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x204800, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x1) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002480)='fd/3\x00') r2 = dup(r1) fdatasync(r2) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x40}}, './file0\x00'}) preadv2(r3, &(0x7f0000001300)=[{&(0x7f0000000080)=""/193, 0xc1}, {&(0x7f0000000180)=""/250, 0xfa}, {&(0x7f0000000300)=""/4096, 0x1000}], 0x3, 0x80000000, 0x66, 0x18) r4 = openat(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000001380)=0x100000) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r5, 0x0, 0x0, 0x87ffffc) (fail_nth: 2) sendfile(r5, r4, 0x0, 0x80000000) [ 2355.560651] FAULT_INJECTION: forcing a failure. [ 2355.560651] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2355.563191] CPU: 1 PID: 12113 Comm: syz-executor.0 Not tainted 5.18.0-rc1-next-20220406 #1 [ 2355.564924] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2355.567283] Call Trace: [ 2355.567816] [ 2355.568281] dump_stack_lvl+0x8b/0xb3 [ 2355.569104] should_fail.cold+0x5/0xa [ 2355.569925] _copy_from_user+0x2a/0x170 [ 2355.570784] iovec_from_user+0x236/0x3c0 [ 2355.571649] ? import_iovec+0x83/0xb0 07:00:51 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f00000001c0)=0x8) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x14, 0x0, 0x2a00}, 0x14}}, 0x0) [ 2355.572458] process_vm_rw+0x176/0x260 [ 2355.573399] ? process_vm_rw_core.constprop.0+0x9a0/0x9a0 [ 2355.574573] ? ksys_write+0x20c/0x250 [ 2355.575365] ? lock_downgrade+0x6d0/0x6d0 [ 2355.576365] ? find_held_lock+0x2c/0x110 [ 2355.577301] ? __mutex_unlock_slowpath+0x15c/0x5e0 [ 2355.578356] ? bit_wait_io_timeout+0x160/0x160 [ 2355.579299] ? lock_is_held_type+0xd7/0x130 [ 2355.580202] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2355.581348] ? vfs_write+0x422/0xac0 [ 2355.582152] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 2355.583305] ? fput+0x2a/0x50 [ 2355.583965] __x64_sys_process_vm_readv+0xdf/0x1b0 [ 2355.584986] ? lockdep_hardirqs_on+0x79/0x100 [ 2355.585914] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2355.587026] do_syscall_64+0x3b/0x90 [ 2355.587786] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2355.588874] RIP: 0033:0x7f1173378b19 [ 2355.589623] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2355.593453] RSP: 002b:00007f11708ee188 EFLAGS: 00000246 ORIG_RAX: 0000000000000136 [ 2355.595057] RAX: ffffffffffffffda RBX: 00007f117348bf60 RCX: 00007f1173378b19 [ 2355.596502] RDX: 0000000000000003 RSI: 00000000200000c0 RDI: 0000000000000302 [ 2355.597980] RBP: 00007f11708ee1d0 R08: 0000000000000001 R09: 0000000000000000 [ 2355.599487] R10: 0000000020000240 R11: 0000000000000246 R12: 0000000000000001 [ 2355.600959] R13: 00007ffeef59581f R14: 00007f11708ee300 R15: 0000000000022000 [ 2355.602480] 07:00:51 executing program 5: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) preadv(r0, &(0x7f00000011c0)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x7, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x0, 0x0, 0x87ffffc) mmap$perf(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000008, 0x1010, r2, 0x4) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000100), 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r3 = syz_open_procfs(0x0, 0x0) perf_event_open(&(0x7f0000001240)={0x1, 0x80, 0x9, 0xa1, 0xf9, 0x3, 0x0, 0x7, 0xa0400, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x3, @perf_config_ext={0x58d}, 0x21, 0x1, 0x0, 0x6, 0x9, 0x0, 0x8000, 0x0, 0x80, 0x0, 0x5}, 0xffffffffffffffff, 0x4, r3, 0x0) r4 = gettid() perf_event_open(0x0, r4, 0x1, r3, 0x8) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) [ 2355.643989] FAULT_INJECTION: forcing a failure. [ 2355.643989] name failslab, interval 1, probability 0, space 0, times 0 [ 2355.646574] CPU: 1 PID: 12115 Comm: syz-executor.7 Not tainted 5.18.0-rc1-next-20220406 #1 [ 2355.648292] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2355.648279] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12117 comm=syz-executor.4 [ 2355.650595] Call Trace: [ 2355.653554] [ 2355.654000] dump_stack_lvl+0x8b/0xb3 [ 2355.654799] should_fail.cold+0x5/0xa [ 2355.655583] ? create_object.isra.0+0x3a/0xa20 [ 2355.656520] should_failslab+0x5/0x10 [ 2355.657306] kmem_cache_alloc+0x5b/0x480 [ 2355.658155] create_object.isra.0+0x3a/0xa20 [ 2355.659060] ? kasan_unpoison+0x23/0x50 [ 2355.659889] kmem_cache_alloc+0x239/0x480 [ 2355.660754] jbd2__journal_start+0x18c/0x8d0 [ 2355.661665] __ext4_journal_start_sb+0x392/0x470 [ 2355.662659] ? ext4_setattr+0x2070/0x2070 [ 2355.663540] ext4_dirty_inode+0x9d/0x110 [ 2355.664401] __mark_inode_dirty+0x425/0xeb0 [ 2355.665324] ? file_remove_privs+0x5b0/0x5b0 [ 2355.666263] ? security_inode_need_killpriv+0x79/0xa0 [ 2355.667332] generic_update_time+0x21d/0x350 [ 2355.668221] file_update_time+0x436/0x520 [ 2355.669076] ? discard_new_inode+0x190/0x190 [ 2355.669982] ? down_write_killable+0x170/0x170 [ 2355.670751] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12118 comm=syz-executor.4 [ 2355.670958] file_modified+0x77/0x90 [ 2355.674114] ext4_fallocate+0x3bc/0x3c90 [ 2355.674937] ? lock_acquire+0x1b2/0x530 [ 2355.675747] ? lock_release+0x750/0x750 [ 2355.676552] ? ext4_ext_truncate+0x3e0/0x3e0 [ 2355.677441] ? lock_is_held_type+0xd7/0x130 [ 2355.678402] ? ext4_ext_truncate+0x3e0/0x3e0 [ 2355.679415] vfs_fallocate+0x489/0xe00 [ 2355.680233] __x64_sys_fallocate+0xcf/0x140 [ 2355.681131] do_syscall_64+0x3b/0x90 [ 2355.681888] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2355.682963] RIP: 0033:0x7fdba5ddfb19 [ 2355.683691] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2355.687534] RSP: 002b:00007fdba3355188 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 2355.689369] RAX: ffffffffffffffda RBX: 00007fdba5ef2f60 RCX: 00007fdba5ddfb19 [ 2355.691099] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 2355.692821] RBP: 00007fdba33551d0 R08: 0000000000000000 R09: 0000000000000000 [ 2355.694553] R10: 00000000087ffffc R11: 0000000000000246 R12: 0000000000000001 [ 2355.696279] R13: 00007ffe895a664f R14: 00007fdba3355300 R15: 0000000000022000 [ 2355.698052] 07:00:51 executing program 6: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) preadv(r0, &(0x7f00000011c0)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x7, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x0, 0x0, 0x87ffffc) mmap$perf(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000008, 0x1010, r2, 0x4) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000100), 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r3 = syz_open_procfs(0x0, 0x0) perf_event_open(&(0x7f0000001240)={0x1, 0x80, 0x9, 0xa1, 0xf9, 0x3, 0x0, 0x7, 0xa0400, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x3, @perf_config_ext={0x58d}, 0x21, 0x1, 0x0, 0x6, 0x9, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x5}, 0xffffffffffffffff, 0x4, r3, 0x0) r4 = gettid() process_vm_readv(r4, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/4078, 0xfee}, {&(0x7f0000000000)=""/123, 0x7b}, {&(0x7f0000000100)=""/57, 0x39}], 0x3, &(0x7f0000000240)=[{&(0x7f0000012940)=""/102400, 0xffffff76}], 0x1, 0x0) perf_event_open(0x0, r4, 0x1, r3, 0x8) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/consoles\x00', 0x0, 0x0) 07:01:05 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f00000001c0)=0x8) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x14, 0x0, 0x2c00}, 0x14}}, 0x0) 07:01:05 executing program 3: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000040)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x300000c, 0x13, r0, 0x8000000) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xa) fork() (fail_nth: 1) 07:01:05 executing program 7: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000001340)) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x204800, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x1) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002480)='fd/3\x00') r2 = dup(r1) fdatasync(r2) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x40}}, './file0\x00'}) preadv2(r3, &(0x7f0000001300)=[{&(0x7f0000000080)=""/193, 0xc1}, {&(0x7f0000000180)=""/250, 0xfa}, {&(0x7f0000000300)=""/4096, 0x1000}], 0x3, 0x80000000, 0x66, 0x18) r4 = openat(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000001380)=0x100000) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r5, 0x0, 0x0, 0x87ffffc) (fail_nth: 3) sendfile(r5, r4, 0x0, 0x80000000) 07:01:05 executing program 6: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) preadv(r0, &(0x7f00000011c0)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x7, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x0, 0x0, 0x87ffffc) mmap$perf(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000008, 0x1010, r2, 0x4) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000100), 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r3 = syz_open_procfs(0x0, 0x0) perf_event_open(&(0x7f0000001240)={0x1, 0x80, 0x9, 0xa1, 0xf9, 0x3, 0x0, 0x7, 0xa0400, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x3, @perf_config_ext={0x58d}, 0x21, 0x1, 0x0, 0x6, 0x9, 0x0, 0x8000, 0x0, 0x80}, 0xffffffffffffffff, 0x4, r3, 0x0) r4 = gettid() process_vm_readv(r4, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/4078, 0xfee}, {&(0x7f0000000000)=""/123, 0x7b}, {&(0x7f0000000100)=""/57, 0x39}], 0x3, &(0x7f0000000240)=[{&(0x7f0000012940)=""/102400, 0xffffff76}], 0x1, 0x0) perf_event_open(0x0, r4, 0x1, r3, 0x8) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/consoles\x00', 0x0, 0x0) 07:01:05 executing program 0: openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r0, 0x0, 0x0, 0x87ffffc) mmap$perf(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000008, 0x10, 0xffffffffffffffff, 0x4) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x12, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = syz_open_procfs(0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001240)={0x1, 0x80, 0x0, 0xa1, 0x0, 0x0, 0x0, 0x7, 0xa0400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x3, @perf_config_ext, 0x21, 0x1, 0x0, 0x0, 0x9, 0x0, 0x8000, 0x0, 0x80, 0x0, 0x5}, 0xffffffffffffffff, 0x4, r1, 0x0) r2 = gettid() process_vm_readv(r2, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/4078, 0xfee}, {&(0x7f0000000000)=""/123, 0x7b}, {&(0x7f0000000100)=""/57, 0x39}], 0x3, &(0x7f0000000240)=[{&(0x7f0000012940)=""/102400, 0xffffff76}], 0x1, 0x0) (fail_nth: 3) perf_event_open(0x0, r2, 0x1, r1, 0x8) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/consoles\x00', 0x0, 0x0) 07:01:05 executing program 5: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) preadv(r0, &(0x7f00000011c0)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x7, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x0, 0x0, 0x87ffffc) mmap$perf(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000008, 0x1010, r2, 0x4) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000100), 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r3 = syz_open_procfs(0x0, 0x0) perf_event_open(&(0x7f0000001240)={0x1, 0x80, 0x9, 0xa1, 0xf9, 0x3, 0x0, 0x7, 0xa0400, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x3, @perf_config_ext={0x58d}, 0x21, 0x1, 0x0, 0x6, 0x9, 0x0, 0x8000, 0x0, 0x80, 0x0, 0x5}, 0xffffffffffffffff, 0x4, r3, 0x0) r4 = gettid() perf_event_open(0x0, r4, 0x1, r3, 0x8) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) 07:01:05 executing program 2: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x204800, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x1) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002480)='fd/3\x00') fdatasync(0xffffffffffffffff) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x40}}, './file0\x00'}) preadv2(r2, &(0x7f0000001300)=[{&(0x7f0000000080)=""/193, 0xc1}, {&(0x7f0000000180)=""/250, 0xfa}, {&(0x7f0000000300)=""/4096, 0x1000}], 0x3, 0x80000000, 0x66, 0x18) openat(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r3, 0x0, 0x0, 0x87ffffc) (fail_nth: 2) 07:01:05 executing program 1: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) preadv(r0, &(0x7f00000011c0)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x7, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x0, 0x0, 0x87ffffc) mmap$perf(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000008, 0x1010, r2, 0x4) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000100), 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r3 = syz_open_procfs(0x0, 0x0) preadv(r3, &(0x7f0000000080)=[{&(0x7f0000000000)=""/40, 0x40}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000001240)={0x1, 0x80, 0x9, 0xa1, 0xf9, 0x3, 0x0, 0x7, 0xa0400, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x3, @perf_config_ext={0x58d}, 0x21, 0x1, 0x0, 0x6, 0x9, 0x0, 0x0, 0x0, 0x80, 0x0, 0x5}, 0xffffffffffffffff, 0x4, r3, 0x0) r4 = gettid() process_vm_readv(r4, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/4078, 0xfee}, {&(0x7f0000000000)=""/123, 0x7b}, {&(0x7f0000000100)=""/57, 0x39}], 0x3, &(0x7f0000000240)=[{&(0x7f0000012940)=""/102400, 0xffffff76}], 0x1, 0x0) perf_event_open(0x0, r4, 0x1, r3, 0x8) [ 2369.797847] FAULT_INJECTION: forcing a failure. [ 2369.797847] name failslab, interval 1, probability 0, space 0, times 0 [ 2369.800236] CPU: 1 PID: 12139 Comm: syz-executor.3 Not tainted 5.18.0-rc1-next-20220406 #1 [ 2369.801933] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2369.804214] Call Trace: [ 2369.804727] [ 2369.805198] dump_stack_lvl+0x8b/0xb3 [ 2369.805978] should_fail.cold+0x5/0xa [ 2369.806751] ? copy_process+0x5c8/0x6db0 [ 2369.807593] should_failslab+0x5/0x10 [ 2369.808377] kmem_cache_alloc_node+0x55/0x490 [ 2369.809336] copy_process+0x5c8/0x6db0 [ 2369.810198] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12146 comm=syz-executor.4 [ 2369.810378] ? lock_release+0x3b2/0x750 [ 2369.812970] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 2369.814223] ? lock_downgrade+0x6d0/0x6d0 [ 2369.815247] ? __cleanup_sighand+0xb0/0xb0 [ 2369.816301] ? lock_is_held_type+0xd7/0x130 [ 2369.817383] ? lock_release+0x3b2/0x750 [ 2369.818356] ? ksys_write+0x20c/0x250 [ 2369.819276] ? kernel_clone+0x2f8/0xa60 [ 2369.819622] FAULT_INJECTION: forcing a failure. [ 2369.819622] name failslab, interval 1, probability 0, space 0, times 0 [ 2369.820261] kernel_clone+0xe7/0xa60 [ 2369.822736] ? find_held_lock+0x2c/0x110 [ 2369.823713] ? create_io_thread+0xf0/0xf0 [ 2369.824743] ? __mutex_unlock_slowpath+0x15c/0x5e0 [ 2369.825937] ? bit_wait_io_timeout+0x160/0x160 [ 2369.827050] ? lock_is_held_type+0xd7/0x130 [ 2369.828102] __do_sys_fork+0x8a/0xc0 [ 2369.829002] ? kernel_clone+0xa60/0xa60 [ 2369.829958] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 2369.831304] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2369.832577] ? lockdep_hardirqs_on+0x79/0x100 [ 2369.833657] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2369.834899] do_syscall_64+0x3b/0x90 [ 2369.835771] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2369.837033] RIP: 0033:0x7fc1c2a89b19 [ 2369.837905] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2369.842290] RSP: 002b:00007fc1bffff188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 2369.844069] RAX: ffffffffffffffda RBX: 00007fc1c2b9cf60 RCX: 00007fc1c2a89b19 [ 2369.845711] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2369.847382] RBP: 00007fc1bffff1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2369.849085] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2369.850735] R13: 00007fff0449096f R14: 00007fc1bffff300 R15: 0000000000022000 [ 2369.852423] [ 2369.852966] CPU: 0 PID: 12145 Comm: syz-executor.2 Not tainted 5.18.0-rc1-next-20220406 #1 [ 2369.854175] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2369.856017] Call Trace: [ 2369.856394] [ 2369.856833] dump_stack_lvl+0x8b/0xb3 [ 2369.857435] should_fail.cold+0x5/0xa [ 2369.857980] ? create_object.isra.0+0x3a/0xa20 [ 2369.858657] should_failslab+0x5/0x10 [ 2369.859220] kmem_cache_alloc+0x5b/0x480 [ 2369.859823] create_object.isra.0+0x3a/0xa20 [ 2369.860442] ? kasan_unpoison+0x23/0x50 [ 2369.861005] kmem_cache_alloc+0x239/0x480 [ 2369.861604] jbd2__journal_start+0x18c/0x8d0 [ 2369.862221] __ext4_journal_start_sb+0x392/0x470 [ 2369.862897] ? ext4_setattr+0x2070/0x2070 [ 2369.863474] ext4_dirty_inode+0x9d/0x110 [ 2369.864043] __mark_inode_dirty+0x425/0xeb0 [ 2369.864658] ? file_remove_privs+0x5b0/0x5b0 [ 2369.865279] ? security_inode_need_killpriv+0x79/0xa0 [ 2369.866013] generic_update_time+0x21d/0x350 [ 2369.866647] file_update_time+0x436/0x520 [ 2369.867245] ? discard_new_inode+0x190/0x190 [ 2369.867872] ? down_write_killable+0x170/0x170 [ 2369.868542] file_modified+0x77/0x90 [ 2369.869069] ext4_fallocate+0x3bc/0x3c90 [ 2369.869657] ? lock_acquire+0x1b2/0x530 [ 2369.870235] ? lock_release+0x750/0x750 [ 2369.870810] ? ext4_ext_truncate+0x3e0/0x3e0 [ 2369.871439] ? lock_is_held_type+0xd7/0x130 [ 2369.872064] ? ext4_ext_truncate+0x3e0/0x3e0 [ 2369.872683] vfs_fallocate+0x489/0xe00 [ 2369.873248] __x64_sys_fallocate+0xcf/0x140 [ 2369.873872] do_syscall_64+0x3b/0x90 [ 2369.874400] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2369.875115] RIP: 0033:0x7fd845bccb19 [ 2369.875640] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2369.878284] RSP: 002b:00007fd843142188 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 2369.879392] RAX: ffffffffffffffda RBX: 00007fd845cdff60 RCX: 00007fd845bccb19 [ 2369.880389] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 2369.881416] RBP: 00007fd8431421d0 R08: 0000000000000000 R09: 0000000000000000 [ 2369.882443] R10: 00000000087ffffc R11: 0000000000000246 R12: 0000000000000001 [ 2369.883463] R13: 00007ffde12fa01f R14: 00007fd843142300 R15: 0000000000022000 [ 2369.884471] [ 2369.886648] FAULT_INJECTION: forcing a failure. [ 2369.886648] name failslab, interval 1, probability 0, space 0, times 0 [ 2369.888390] CPU: 0 PID: 12143 Comm: syz-executor.7 Not tainted 5.18.0-rc1-next-20220406 #1 [ 2369.889522] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2369.891059] Call Trace: [ 2369.891406] [ 2369.891713] dump_stack_lvl+0x8b/0xb3 [ 2369.892231] should_fail.cold+0x5/0xa [ 2369.892758] ? jbd2__journal_start+0x18c/0x8d0 [ 2369.893393] should_failslab+0x5/0x10 [ 2369.893909] kmem_cache_alloc+0x5b/0x480 [ 2369.894499] jbd2__journal_start+0x18c/0x8d0 [ 2369.895116] __ext4_journal_start_sb+0x392/0x470 [ 2369.895784] ext4_alloc_file_blocks.isra.0+0x286/0xb20 [ 2369.896511] ? generic_update_time+0x21d/0x350 [ 2369.897140] ? ext4_ext_correct_indexes+0x440/0x440 [ 2369.897836] ? down_write_killable+0x170/0x170 [ 2369.898478] ext4_fallocate+0x1a2b/0x3c90 [ 2369.899076] ? lock_acquire+0x1b2/0x530 [ 2369.899632] ? lock_release+0x750/0x750 [ 2369.900191] ? ext4_ext_truncate+0x3e0/0x3e0 [ 2369.900806] ? lock_is_held_type+0xd7/0x130 [ 2369.901404] ? ext4_ext_truncate+0x3e0/0x3e0 [ 2369.902023] vfs_fallocate+0x489/0xe00 [ 2369.902573] __x64_sys_fallocate+0xcf/0x140 [ 2369.903194] do_syscall_64+0x3b/0x90 [ 2369.903704] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2369.904433] RIP: 0033:0x7fdba5ddfb19 [ 2369.904948] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2369.907529] RSP: 002b:00007fdba3355188 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 2369.908599] RAX: ffffffffffffffda RBX: 00007fdba5ef2f60 RCX: 00007fdba5ddfb19 [ 2369.909594] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 2369.910590] RBP: 00007fdba33551d0 R08: 0000000000000000 R09: 0000000000000000 [ 2369.911560] R10: 00000000087ffffc R11: 0000000000000246 R12: 0000000000000001 [ 2369.912554] R13: 00007ffe895a664f R14: 00007fdba3355300 R15: 0000000000022000 [ 2369.913553] [ 2369.919602] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12150 comm=syz-executor.4 [ 2369.930759] FAULT_INJECTION: forcing a failure. [ 2369.930759] name failslab, interval 1, probability 0, space 0, times 0 [ 2369.933340] CPU: 1 PID: 12135 Comm: syz-executor.0 Not tainted 5.18.0-rc1-next-20220406 #1 [ 2369.935260] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2369.937828] Call Trace: [ 2369.938447] [ 2369.938971] dump_stack_lvl+0x8b/0xb3 [ 2369.939850] should_fail.cold+0x5/0xa [ 2369.940677] ? process_vm_rw_core.constprop.0+0x1d8/0x9a0 [ 2369.941863] should_failslab+0x5/0x10 [ 2369.942691] __kmalloc+0x72/0x440 [ 2369.943472] process_vm_rw_core.constprop.0+0x1d8/0x9a0 [ 2369.944602] ? lock_is_held_type+0xd7/0x130 07:01:05 executing program 5: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) preadv(r0, &(0x7f00000011c0)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x7, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x0, 0x0, 0x87ffffc) mmap$perf(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000008, 0x1010, r2, 0x4) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000100), 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r3 = syz_open_procfs(0x0, 0x0) perf_event_open(&(0x7f0000001240)={0x1, 0x80, 0x9, 0xa1, 0xf9, 0x3, 0x0, 0x7, 0xa0400, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x3, @perf_config_ext={0x58d}, 0x21, 0x1, 0x0, 0x6, 0x9, 0x0, 0x8000, 0x0, 0x80, 0x0, 0x5}, 0xffffffffffffffff, 0x4, r3, 0x0) r4 = gettid() perf_event_open(0x0, r4, 0x1, r3, 0x8) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) [ 2369.945533] ? find_held_lock+0x2c/0x110 [ 2369.946597] ? lock_downgrade+0x6d0/0x6d0 [ 2369.947491] ? vmalloc_dump_obj+0x1a0/0x1a0 [ 2369.948432] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2369.949584] ? _copy_from_user+0xf2/0x170 [ 2369.950498] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 2369.951556] ? iovec_from_user+0x1fd/0x3c0 [ 2369.952443] ? import_iovec+0x83/0xb0 [ 2369.953250] process_vm_rw+0x1b6/0x260 [ 2369.954067] ? process_vm_rw_core.constprop.0+0x9a0/0x9a0 [ 2369.955236] ? ksys_write+0x20c/0x250 [ 2369.956025] ? lock_downgrade+0x6d0/0x6d0 [ 2369.956895] ? find_held_lock+0x2c/0x110 [ 2369.957734] ? __mutex_unlock_slowpath+0x15c/0x5e0 [ 2369.958759] ? bit_wait_io_timeout+0x160/0x160 [ 2369.959737] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2369.960928] ? vfs_write+0x422/0xac0 [ 2369.961690] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 2369.962869] ? fput+0x2a/0x50 [ 2369.963568] __x64_sys_process_vm_readv+0xdf/0x1b0 [ 2369.964574] ? lockdep_hardirqs_on+0x79/0x100 [ 2369.965488] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2369.966576] do_syscall_64+0x3b/0x90 [ 2369.967352] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2369.968410] RIP: 0033:0x7f1173378b19 [ 2369.969159] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2369.972928] RSP: 002b:00007f11708ee188 EFLAGS: 00000246 ORIG_RAX: 0000000000000136 [ 2369.974481] RAX: ffffffffffffffda RBX: 00007f117348bf60 RCX: 00007f1173378b19 07:01:05 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f00000001c0)=0x8) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x14, 0x0, 0x2d00}, 0x14}}, 0x0) [ 2369.975935] RDX: 0000000000000003 RSI: 00000000200000c0 RDI: 0000000000000304 [ 2369.977455] RBP: 00007f11708ee1d0 R08: 0000000000000001 R09: 0000000000000000 [ 2369.978905] R10: 0000000020000240 R11: 0000000000000246 R12: 0000000000000001 [ 2369.980352] R13: 00007ffeef59581f R14: 00007f11708ee300 R15: 0000000000022000 [ 2369.981810] [ 2370.016749] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12156 comm=syz-executor.4 [ 2370.025686] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12157 comm=syz-executor.4 07:01:05 executing program 7: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000001340)) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x204800, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x1) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002480)='fd/3\x00') r2 = dup(r1) fdatasync(r2) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x40}}, './file0\x00'}) preadv2(r3, &(0x7f0000001300)=[{&(0x7f0000000080)=""/193, 0xc1}, {&(0x7f0000000180)=""/250, 0xfa}, {&(0x7f0000000300)=""/4096, 0x1000}], 0x3, 0x80000000, 0x66, 0x18) r4 = openat(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000001380)=0x100000) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r5, 0x0, 0x0, 0x87ffffc) (fail_nth: 4) sendfile(r5, r4, 0x0, 0x80000000) 07:01:05 executing program 2: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x204800, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x1) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002480)='fd/3\x00') fdatasync(0xffffffffffffffff) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x40}}, './file0\x00'}) preadv2(r2, &(0x7f0000001300)=[{&(0x7f0000000080)=""/193, 0xc1}, {&(0x7f0000000180)=""/250, 0xfa}, {&(0x7f0000000300)=""/4096, 0x1000}], 0x3, 0x80000000, 0x66, 0x18) openat(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r3, 0x0, 0x0, 0x87ffffc) (fail_nth: 3) 07:01:05 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f00000001c0)=0x8) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x14, 0x0, 0x2e00}, 0x14}}, 0x0) 07:01:05 executing program 6: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) preadv(r0, &(0x7f00000011c0)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x7, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x0, 0x0, 0x87ffffc) mmap$perf(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000008, 0x1010, r2, 0x4) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000100), 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r3 = syz_open_procfs(0x0, 0x0) perf_event_open(&(0x7f0000001240)={0x1, 0x80, 0x9, 0xa1, 0xf9, 0x3, 0x0, 0x7, 0xa0400, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x3, @perf_config_ext={0x58d}, 0x21, 0x1, 0x0, 0x6, 0x9, 0x0, 0x8000, 0x0, 0x80}, 0xffffffffffffffff, 0x4, r3, 0x0) r4 = gettid() process_vm_readv(r4, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/4078, 0xfee}, {&(0x7f0000000000)=""/123, 0x7b}, {&(0x7f0000000100)=""/57, 0x39}], 0x3, &(0x7f0000000240)=[{&(0x7f0000012940)=""/102400, 0xffffff76}], 0x1, 0x0) perf_event_open(0x0, r4, 0x1, r3, 0x8) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/consoles\x00', 0x0, 0x0) 07:01:05 executing program 1: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) preadv(r0, &(0x7f00000011c0)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x7, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x0, 0x0, 0x87ffffc) mmap$perf(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000008, 0x1010, r2, 0x4) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000100), 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r3 = syz_open_procfs(0x0, 0x0) preadv(r3, &(0x7f0000000080)=[{&(0x7f0000000000)=""/40, 0x40}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000001240)={0x1, 0x80, 0x9, 0xa1, 0xf9, 0x3, 0x0, 0x7, 0xa0400, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x3, @perf_config_ext={0x58d}, 0x21, 0x1, 0x0, 0x6, 0x9, 0x0, 0x0, 0x0, 0x80, 0x0, 0x5}, 0xffffffffffffffff, 0x4, r3, 0x0) r4 = gettid() process_vm_readv(r4, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/4078, 0xfee}, {&(0x7f0000000000)=""/123, 0x7b}, {&(0x7f0000000100)=""/57, 0x39}], 0x3, &(0x7f0000000240)=[{&(0x7f0000012940)=""/102400, 0xffffff76}], 0x1, 0x0) perf_event_open(0x0, r4, 0x1, r3, 0x8) [ 2370.131138] FAULT_INJECTION: forcing a failure. [ 2370.131138] name failslab, interval 1, probability 0, space 0, times 0 [ 2370.134004] CPU: 1 PID: 12159 Comm: syz-executor.2 Not tainted 5.18.0-rc1-next-20220406 #1 [ 2370.135808] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2370.138129] Call Trace: [ 2370.138660] [ 2370.139130] dump_stack_lvl+0x8b/0xb3 [ 2370.139931] should_fail.cold+0x5/0xa [ 2370.140703] ? jbd2__journal_start+0x18c/0x8d0 [ 2370.141633] should_failslab+0x5/0x10 [ 2370.142448] kmem_cache_alloc+0x5b/0x480 [ 2370.142661] FAULT_INJECTION: forcing a failure. [ 2370.142661] name failslab, interval 1, probability 0, space 0, times 0 [ 2370.143294] jbd2__journal_start+0x18c/0x8d0 [ 2370.143332] __ext4_journal_start_sb+0x392/0x470 [ 2370.143369] ext4_alloc_file_blocks.isra.0+0x286/0xb20 [ 2370.147512] ? generic_update_time+0x21d/0x350 [ 2370.148475] ? ext4_ext_correct_indexes+0x440/0x440 [ 2370.149511] ? down_write_killable+0x170/0x170 [ 2370.150473] ext4_fallocate+0x1a2b/0x3c90 [ 2370.151326] ? lock_acquire+0x1b2/0x530 [ 2370.152173] ? lock_release+0x750/0x750 [ 2370.153016] ? ext4_ext_truncate+0x3e0/0x3e0 [ 2370.153929] ? lock_is_held_type+0xd7/0x130 [ 2370.154877] ? ext4_ext_truncate+0x3e0/0x3e0 [ 2370.155765] vfs_fallocate+0x489/0xe00 [ 2370.156614] __x64_sys_fallocate+0xcf/0x140 [ 2370.157511] do_syscall_64+0x3b/0x90 [ 2370.158274] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2370.159341] RIP: 0033:0x7fd845bccb19 [ 2370.160086] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2370.163815] RSP: 002b:00007fd843142188 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 2370.165361] RAX: ffffffffffffffda RBX: 00007fd845cdff60 RCX: 00007fd845bccb19 [ 2370.166829] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 2370.168273] RBP: 00007fd8431421d0 R08: 0000000000000000 R09: 0000000000000000 [ 2370.169707] R10: 00000000087ffffc R11: 0000000000000246 R12: 0000000000000001 [ 2370.171173] R13: 00007ffde12fa01f R14: 00007fd843142300 R15: 0000000000022000 [ 2370.172633] [ 2370.173111] CPU: 0 PID: 12163 Comm: syz-executor.7 Not tainted 5.18.0-rc1-next-20220406 #1 [ 2370.174110] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2370.175425] Call Trace: [ 2370.175731] [ 2370.175994] dump_stack_lvl+0x8b/0xb3 [ 2370.176459] should_fail.cold+0x5/0xa [ 2370.176900] ? create_object.isra.0+0x3a/0xa20 [ 2370.177442] should_failslab+0x5/0x10 [ 2370.177893] kmem_cache_alloc+0x5b/0x480 [ 2370.178389] create_object.isra.0+0x3a/0xa20 [ 2370.178902] ? kasan_unpoison+0x23/0x50 [ 2370.179378] kmem_cache_alloc+0x239/0x480 [ 2370.179874] jbd2__journal_start+0x18c/0x8d0 [ 2370.180545] __ext4_journal_start_sb+0x392/0x470 [ 2370.181085] ext4_alloc_file_blocks.isra.0+0x286/0xb20 [ 2370.181691] ? generic_update_time+0x21d/0x350 [ 2370.182237] ? ext4_ext_correct_indexes+0x440/0x440 [ 2370.182823] ? down_write_killable+0x170/0x170 [ 2370.183370] ext4_fallocate+0x1a2b/0x3c90 [ 2370.183854] ? lock_acquire+0x1b2/0x530 [ 2370.184316] ? lock_release+0x750/0x750 [ 2370.184787] ? ext4_ext_truncate+0x3e0/0x3e0 [ 2370.185303] ? lock_is_held_type+0xd7/0x130 [ 2370.185806] ? ext4_ext_truncate+0x3e0/0x3e0 [ 2370.186329] vfs_fallocate+0x489/0xe00 [ 2370.186773] __x64_sys_fallocate+0xcf/0x140 [ 2370.187259] do_syscall_64+0x3b/0x90 [ 2370.187685] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2370.188270] RIP: 0033:0x7fdba5ddfb19 [ 2370.188698] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2370.190862] RSP: 002b:00007fdba3355188 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 2370.191746] RAX: ffffffffffffffda RBX: 00007fdba5ef2f60 RCX: 00007fdba5ddfb19 [ 2370.192591] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 2370.193417] RBP: 00007fdba33551d0 R08: 0000000000000000 R09: 0000000000000000 [ 2370.194257] R10: 00000000087ffffc R11: 0000000000000246 R12: 0000000000000001 [ 2370.195085] R13: 00007ffe895a664f R14: 00007fdba3355300 R15: 0000000000022000 [ 2370.195938] 07:01:05 executing program 3: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000040)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x300000c, 0x13, r0, 0x8000000) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xa) fork() (fail_nth: 2) [ 2370.201790] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12167 comm=syz-executor.4 [ 2370.207084] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12170 comm=syz-executor.4 [ 2370.245951] FAULT_INJECTION: forcing a failure. [ 2370.245951] name failslab, interval 1, probability 0, space 0, times 0 [ 2370.247275] CPU: 0 PID: 12172 Comm: syz-executor.3 Not tainted 5.18.0-rc1-next-20220406 #1 [ 2370.248167] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2370.249359] Call Trace: [ 2370.249634] [ 2370.249871] dump_stack_lvl+0x8b/0xb3 [ 2370.250305] should_fail.cold+0x5/0xa [ 2370.250718] ? create_object.isra.0+0x3a/0xa20 [ 2370.251208] should_failslab+0x5/0x10 [ 2370.251624] kmem_cache_alloc+0x5b/0x480 [ 2370.252067] create_object.isra.0+0x3a/0xa20 [ 2370.252547] ? kasan_unpoison+0x23/0x50 [ 2370.252978] kmem_cache_alloc_node+0x248/0x490 [ 2370.253481] copy_process+0x5c8/0x6db0 [ 2370.253903] ? lock_release+0x3b2/0x750 [ 2370.254358] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 2370.254915] ? lock_downgrade+0x6d0/0x6d0 [ 2370.255377] ? __cleanup_sighand+0xb0/0xb0 [ 2370.255830] ? lock_is_held_type+0xd7/0x130 [ 2370.256315] ? lock_release+0x3b2/0x750 [ 2370.256855] ? ksys_write+0x20c/0x250 [ 2370.257314] ? kernel_clone+0x2f8/0xa60 [ 2370.257759] kernel_clone+0xe7/0xa60 [ 2370.258173] ? find_held_lock+0x2c/0x110 [ 2370.258624] ? create_io_thread+0xf0/0xf0 [ 2370.259082] ? __mutex_unlock_slowpath+0x15c/0x5e0 [ 2370.259625] ? bit_wait_io_timeout+0x160/0x160 [ 2370.260127] __do_sys_fork+0x8a/0xc0 [ 2370.260531] ? kernel_clone+0xa60/0xa60 [ 2370.260970] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2370.261537] ? lockdep_hardirqs_on+0x79/0x100 [ 2370.262038] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2370.262617] do_syscall_64+0x3b/0x90 [ 2370.263016] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2370.263579] RIP: 0033:0x7fc1c2a89b19 [ 2370.263977] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2370.265957] RSP: 002b:00007fc1bffff188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 2370.266775] RAX: ffffffffffffffda RBX: 00007fc1c2b9cf60 RCX: 00007fc1c2a89b19 [ 2370.267548] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2370.268318] RBP: 00007fc1bffff1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2370.269096] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2370.269859] R13: 00007fff0449096f R14: 00007fc1bffff300 R15: 0000000000022000 [ 2370.270645] 07:01:06 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f00000001c0)=0x8) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x14, 0x0, 0x3000}, 0x14}}, 0x0) 07:01:06 executing program 5: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) preadv(r0, &(0x7f00000011c0)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x7, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x0, 0x0, 0x87ffffc) mmap$perf(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000008, 0x1010, r2, 0x4) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000100), 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r3 = syz_open_procfs(0x0, 0x0) preadv(r3, &(0x7f0000000080)=[{&(0x7f0000000000)=""/40, 0x40}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000001240)={0x1, 0x80, 0x9, 0xa1, 0xf9, 0x3, 0x0, 0x7, 0xa0400, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x3, @perf_config_ext={0x58d}, 0x21, 0x1, 0x0, 0x6, 0x9, 0x0, 0x0, 0x0, 0x80, 0x0, 0x5}, 0xffffffffffffffff, 0x4, r3, 0x0) r4 = gettid() process_vm_readv(r4, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/4078, 0xfee}, {&(0x7f0000000000)=""/123, 0x7b}, {&(0x7f0000000100)=""/57, 0x39}], 0x3, &(0x7f0000000240)=[{&(0x7f0000012940)=""/102400, 0xffffff76}], 0x1, 0x0) perf_event_open(0x0, r4, 0x1, r3, 0x8) [ 2370.320419] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12177 comm=syz-executor.4 [ 2370.330694] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12178 comm=syz-executor.4 07:01:19 executing program 1: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) preadv(r0, &(0x7f00000011c0)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x7, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x0, 0x0, 0x87ffffc) mmap$perf(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000008, 0x1010, r2, 0x4) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000100), 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r3 = syz_open_procfs(0x0, 0x0) preadv(r3, &(0x7f0000000080)=[{&(0x7f0000000000)=""/40, 0x40}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000001240)={0x1, 0x80, 0x9, 0xa1, 0xf9, 0x3, 0x0, 0x7, 0xa0400, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x3, @perf_config_ext={0x58d}, 0x21, 0x1, 0x0, 0x6, 0x9, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x5}, 0xffffffffffffffff, 0x4, r3, 0x0) r4 = gettid() process_vm_readv(r4, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/4078, 0xfee}, {&(0x7f0000000000)=""/123, 0x7b}, {&(0x7f0000000100)=""/57, 0x39}], 0x3, &(0x7f0000000240)=[{&(0x7f0000012940)=""/102400, 0xffffff76}], 0x1, 0x0) perf_event_open(0x0, r4, 0x1, r3, 0x8) 07:01:19 executing program 0: openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r0, 0x0, 0x0, 0x87ffffc) mmap$perf(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000008, 0x10, 0xffffffffffffffff, 0x4) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x12, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = syz_open_procfs(0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001240)={0x1, 0x80, 0x0, 0xa1, 0x0, 0x0, 0x0, 0x7, 0xa0400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x3, @perf_config_ext, 0x21, 0x1, 0x0, 0x0, 0x9, 0x0, 0x8000, 0x0, 0x80, 0x0, 0x5}, 0xffffffffffffffff, 0x4, r1, 0x0) r2 = gettid() process_vm_readv(r2, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/4078, 0xfee}, {&(0x7f0000000000)=""/123, 0x7b}, {&(0x7f0000000100)=""/57, 0x39}], 0x3, &(0x7f0000000240)=[{&(0x7f0000012940)=""/102400, 0xffffff76}], 0x1, 0x0) (fail_nth: 4) perf_event_open(0x0, r2, 0x1, r1, 0x8) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/consoles\x00', 0x0, 0x0) 07:01:19 executing program 5: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) preadv(r0, &(0x7f00000011c0)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x7, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x0, 0x0, 0x87ffffc) (fail_nth: 1) mmap$perf(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000008, 0x1010, r2, 0x4) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000100), 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r3 = syz_open_procfs(0x0, 0x0) perf_event_open(&(0x7f0000001240)={0x1, 0x80, 0x9, 0xa1, 0xf9, 0x3, 0x0, 0x7, 0xa0400, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x3, @perf_config_ext={0x58d}, 0x21, 0x1, 0x0, 0x6, 0x9, 0x0, 0x8000, 0x0, 0x80, 0x0, 0x5}, 0xffffffffffffffff, 0x4, r3, 0x0) r4 = gettid() perf_event_open(0x0, r4, 0x1, r3, 0x8) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/consoles\x00', 0x0, 0x0) 07:01:19 executing program 7: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000001340)) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x204800, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x1) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002480)='fd/3\x00') r2 = dup(r1) fdatasync(r2) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x40}}, './file0\x00'}) preadv2(r3, &(0x7f0000001300)=[{&(0x7f0000000080)=""/193, 0xc1}, {&(0x7f0000000180)=""/250, 0xfa}, {&(0x7f0000000300)=""/4096, 0x1000}], 0x3, 0x80000000, 0x66, 0x18) r4 = openat(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000001380)=0x100000) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r5, 0x0, 0x0, 0x87ffffc) (fail_nth: 5) sendfile(r5, r4, 0x0, 0x80000000) 07:01:19 executing program 2: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x204800, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x1) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002480)='fd/3\x00') fdatasync(0xffffffffffffffff) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x40}}, './file0\x00'}) preadv2(r2, &(0x7f0000001300)=[{&(0x7f0000000080)=""/193, 0xc1}, {&(0x7f0000000180)=""/250, 0xfa}, {&(0x7f0000000300)=""/4096, 0x1000}], 0x3, 0x80000000, 0x66, 0x18) openat(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r3, 0x0, 0x0, 0x87ffffc) (fail_nth: 4) 07:01:19 executing program 3: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000040)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x300000c, 0x13, r0, 0x8000000) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xa) fork() (fail_nth: 3) 07:01:19 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f00000001c0)=0x8) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x14, 0x0, 0x3100}, 0x14}}, 0x0) 07:01:19 executing program 6: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) preadv(r0, &(0x7f00000011c0)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x7, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x0, 0x0, 0x87ffffc) mmap$perf(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000008, 0x1010, r2, 0x4) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000100), 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r3 = syz_open_procfs(0x0, 0x0) perf_event_open(&(0x7f0000001240)={0x1, 0x80, 0x9, 0xa1, 0xf9, 0x3, 0x0, 0x7, 0xa0400, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x3, @perf_config_ext={0x58d}, 0x21, 0x1, 0x0, 0x6, 0x9, 0x0, 0x8000, 0x0, 0x80}, 0xffffffffffffffff, 0x4, r3, 0x0) r4 = gettid() process_vm_readv(r4, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/4078, 0xfee}, {&(0x7f0000000000)=""/123, 0x7b}, {&(0x7f0000000100)=""/57, 0x39}], 0x3, &(0x7f0000000240)=[{&(0x7f0000012940)=""/102400, 0xffffff76}], 0x1, 0x0) perf_event_open(0x0, r4, 0x1, r3, 0x8) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/consoles\x00', 0x0, 0x0) [ 2384.214102] FAULT_INJECTION: forcing a failure. [ 2384.214102] name failslab, interval 1, probability 0, space 0, times 0 [ 2384.215408] CPU: 1 PID: 12191 Comm: syz-executor.0 Not tainted 5.18.0-rc1-next-20220406 #1 [ 2384.216310] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2384.217555] Call Trace: [ 2384.217834] [ 2384.218073] dump_stack_lvl+0x8b/0xb3 [ 2384.218508] should_fail.cold+0x5/0xa [ 2384.218932] ? create_object.isra.0+0x3a/0xa20 [ 2384.219444] should_failslab+0x5/0x10 [ 2384.219867] kmem_cache_alloc+0x5b/0x480 [ 2384.220321] create_object.isra.0+0x3a/0xa20 [ 2384.220804] ? kasan_unpoison+0x23/0x50 [ 2384.221245] __kmalloc+0x25b/0x440 [ 2384.221650] process_vm_rw_core.constprop.0+0x1d8/0x9a0 [ 2384.222253] ? lock_is_held_type+0xd7/0x130 [ 2384.222752] ? find_held_lock+0x2c/0x110 [ 2384.223220] ? lock_downgrade+0x6d0/0x6d0 [ 2384.223681] ? vmalloc_dump_obj+0x1a0/0x1a0 [ 2384.224170] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2384.224841] ? _copy_from_user+0xf2/0x170 [ 2384.225320] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 2384.225877] ? iovec_from_user+0x1fd/0x3c0 [ 2384.226361] ? import_iovec+0x83/0xb0 [ 2384.226802] process_vm_rw+0x1b6/0x260 [ 2384.227244] ? process_vm_rw_core.constprop.0+0x9a0/0x9a0 [ 2384.227857] ? ksys_write+0x20c/0x250 [ 2384.228282] ? lock_downgrade+0x6d0/0x6d0 [ 2384.228746] ? find_held_lock+0x2c/0x110 [ 2384.229203] ? __mutex_unlock_slowpath+0x15c/0x5e0 [ 2384.229748] ? bit_wait_io_timeout+0x160/0x160 [ 2384.230264] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2384.230882] ? vfs_write+0x422/0xac0 [ 2384.231297] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 2384.231906] ? fput+0x2a/0x50 [ 2384.232260] __x64_sys_process_vm_readv+0xdf/0x1b0 [ 2384.232815] ? lockdep_hardirqs_on+0x79/0x100 [ 2384.233321] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2384.233891] do_syscall_64+0x3b/0x90 [ 2384.234313] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2384.234899] RIP: 0033:0x7f1173378b19 [ 2384.235311] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2384.237360] RSP: 002b:00007f11708ee188 EFLAGS: 00000246 ORIG_RAX: 0000000000000136 [ 2384.238201] RAX: ffffffffffffffda RBX: 00007f117348bf60 RCX: 00007f1173378b19 [ 2384.239021] RDX: 0000000000000003 RSI: 00000000200000c0 RDI: 0000000000000307 [ 2384.239798] RBP: 00007f11708ee1d0 R08: 0000000000000001 R09: 0000000000000000 [ 2384.240579] R10: 0000000020000240 R11: 0000000000000246 R12: 0000000000000001 [ 2384.241372] R13: 00007ffeef59581f R14: 00007f11708ee300 R15: 0000000000022000 [ 2384.242175] [ 2384.254953] FAULT_INJECTION: forcing a failure. [ 2384.254953] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 2384.256266] CPU: 1 PID: 12198 Comm: syz-executor.3 Not tainted 5.18.0-rc1-next-20220406 #1 [ 2384.257200] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2384.258465] Call Trace: [ 2384.258775] [ 2384.259024] dump_stack_lvl+0x8b/0xb3 [ 2384.259457] should_fail.cold+0x5/0xa [ 2384.259887] prepare_alloc_pages+0x17b/0x500 [ 2384.260379] ? find_held_lock+0x2c/0x110 [ 2384.260824] __alloc_pages+0x131/0x4e0 [ 2384.261255] ? __alloc_pages_slowpath.constprop.0+0x1f10/0x1f10 [ 2384.261936] ? rcu_read_lock_sched_held+0x3a/0x70 [ 2384.262477] copy_process+0x65c/0x6db0 [ 2384.262914] ? lock_release+0x3b2/0x750 [ 2384.263358] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 2384.263947] ? lock_downgrade+0x6d0/0x6d0 [ 2384.264385] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12202 comm=syz-executor.4 [ 2384.265434] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12203 comm=syz-executor.4 [ 2384.265712] ? __cleanup_sighand+0xb0/0xb0 [ 2384.265733] ? lock_is_held_type+0xd7/0x130 [ 2384.269093] ? lock_release+0x3b2/0x750 [ 2384.269544] ? ksys_write+0x20c/0x250 [ 2384.269975] ? kernel_clone+0x2f8/0xa60 [ 2384.270429] kernel_clone+0xe7/0xa60 [ 2384.270866] ? find_held_lock+0x2c/0x110 [ 2384.271325] ? create_io_thread+0xf0/0xf0 [ 2384.271801] ? __mutex_unlock_slowpath+0x15c/0x5e0 [ 2384.272354] ? bit_wait_io_timeout+0x160/0x160 [ 2384.272866] ? lock_is_held_type+0xd7/0x130 [ 2384.273357] __do_sys_fork+0x8a/0xc0 [ 2384.273782] ? kernel_clone+0xa60/0xa60 [ 2384.274226] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 2384.274857] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2384.275440] ? lockdep_hardirqs_on+0x79/0x100 [ 2384.275943] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2384.276534] do_syscall_64+0x3b/0x90 [ 2384.276945] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2384.277530] RIP: 0033:0x7fc1c2a89b19 [ 2384.277937] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2384.279989] RSP: 002b:00007fc1bffff188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 2384.280830] RAX: ffffffffffffffda RBX: 00007fc1c2b9cf60 RCX: 00007fc1c2a89b19 [ 2384.281615] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2384.282399] RBP: 00007fc1bffff1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2384.283193] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2384.283990] R13: 00007fff0449096f R14: 00007fc1bffff300 R15: 0000000000022000 [ 2384.284804] [ 2384.293542] FAULT_INJECTION: forcing a failure. [ 2384.293542] name failslab, interval 1, probability 0, space 0, times 0 [ 2384.295272] CPU: 1 PID: 12192 Comm: syz-executor.7 Not tainted 5.18.0-rc1-next-20220406 #1 [ 2384.296194] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2384.297111] FAULT_INJECTION: forcing a failure. [ 2384.297111] name failslab, interval 1, probability 0, space 0, times 0 [ 2384.297463] Call Trace: [ 2384.297492] [ 2384.297497] dump_stack_lvl+0x8b/0xb3 [ 2384.297516] should_fail.cold+0x5/0xa [ 2384.297531] ? ext4_find_extent+0xa39/0xd20 [ 2384.297547] should_failslab+0x5/0x10 [ 2384.297563] __kmalloc+0x72/0x440 [ 2384.297585] ext4_find_extent+0xa39/0xd20 [ 2384.302913] ext4_ext_map_blocks+0x1c8/0x5cd0 [ 2384.303422] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 2384.304011] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 2384.304610] ? ext4_ext_release+0x10/0x10 [ 2384.305082] ? lock_acquire+0x1b2/0x530 [ 2384.305525] ? lock_release+0x750/0x750 [ 2384.305971] ? lock_is_held_type+0xd7/0x130 [ 2384.306462] ? down_read+0x198/0x440 [ 2384.306875] ? rwsem_down_read_slowpath+0xac0/0xac0 [ 2384.307428] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 2384.308040] ? ext4_es_lookup_extent+0xc4/0xc60 [ 2384.308570] ext4_map_blocks+0x9c8/0x1970 [ 2384.309030] ? lock_is_held_type+0xd7/0x130 [ 2384.309522] ? ext4_issue_zeroout+0x1c0/0x1c0 [ 2384.310024] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 2384.310650] ? jbd2__journal_start+0xf3/0x8d0 [ 2384.311158] ? __ext4_journal_start_sb+0x392/0x470 [ 2384.311695] ? __ext4_journal_start_sb+0x1d5/0x470 [ 2384.312241] ext4_alloc_file_blocks.isra.0+0x2c1/0xb20 [ 2384.312822] ? generic_update_time+0x21d/0x350 [ 2384.313334] ? ext4_ext_correct_indexes+0x440/0x440 [ 2384.313891] ? down_write_killable+0x170/0x170 [ 2384.314411] ext4_fallocate+0x1a2b/0x3c90 [ 2384.314859] ? lock_acquire+0x1b2/0x530 [ 2384.315301] ? lock_release+0x750/0x750 [ 2384.315750] ? ext4_ext_truncate+0x3e0/0x3e0 [ 2384.316244] ? lock_is_held_type+0xd7/0x130 [ 2384.316729] ? ext4_ext_truncate+0x3e0/0x3e0 [ 2384.317224] vfs_fallocate+0x489/0xe00 [ 2384.317666] __x64_sys_fallocate+0xcf/0x140 [ 2384.318150] do_syscall_64+0x3b/0x90 [ 2384.318587] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2384.319169] RIP: 0033:0x7fdba5ddfb19 [ 2384.319579] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2384.321621] RSP: 002b:00007fdba3355188 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 2384.322465] RAX: ffffffffffffffda RBX: 00007fdba5ef2f60 RCX: 00007fdba5ddfb19 [ 2384.323253] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 2384.324044] RBP: 00007fdba33551d0 R08: 0000000000000000 R09: 0000000000000000 [ 2384.324830] R10: 00000000087ffffc R11: 0000000000000246 R12: 0000000000000001 [ 2384.325612] R13: 00007ffe895a664f R14: 00007fdba3355300 R15: 0000000000022000 [ 2384.326416] [ 2384.326673] CPU: 0 PID: 12204 Comm: syz-executor.5 Not tainted 5.18.0-rc1-next-20220406 #1 [ 2384.328373] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2384.330677] Call Trace: [ 2384.331202] [ 2384.331661] dump_stack_lvl+0x8b/0xb3 [ 2384.332062] FAULT_INJECTION: forcing a failure. [ 2384.332062] name failslab, interval 1, probability 0, space 0, times 0 [ 2384.332451] should_fail.cold+0x5/0xa [ 2384.332483] ? jbd2__journal_start+0x18c/0x8d0 [ 2384.332515] should_failslab+0x5/0x10 [ 2384.336086] kmem_cache_alloc+0x5b/0x480 [ 2384.336951] jbd2__journal_start+0x18c/0x8d0 [ 2384.337862] __ext4_journal_start_sb+0x392/0x470 [ 2384.338850] ? ext4_setattr+0x2070/0x2070 [ 2384.339690] ext4_dirty_inode+0x9d/0x110 [ 2384.340534] __mark_inode_dirty+0x425/0xeb0 [ 2384.341419] ? file_remove_privs+0x5b0/0x5b0 [ 2384.342310] ? security_inode_need_killpriv+0x79/0xa0 [ 2384.343370] generic_update_time+0x21d/0x350 [ 2384.344269] file_update_time+0x436/0x520 [ 2384.345132] ? discard_new_inode+0x190/0x190 [ 2384.346057] ? down_write_killable+0x170/0x170 [ 2384.347051] file_modified+0x77/0x90 [ 2384.347947] ext4_fallocate+0x3bc/0x3c90 [ 2384.348916] ? lock_acquire+0x1b2/0x530 [ 2384.349888] ? lock_release+0x750/0x750 [ 2384.350896] ? ext4_ext_truncate+0x3e0/0x3e0 [ 2384.351958] ? lock_is_held_type+0xd7/0x130 [ 2384.353002] ? ext4_ext_truncate+0x3e0/0x3e0 [ 2384.354061] vfs_fallocate+0x489/0xe00 [ 2384.355016] __x64_sys_fallocate+0xcf/0x140 [ 2384.356058] do_syscall_64+0x3b/0x90 [ 2384.356955] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2384.358192] RIP: 0033:0x7f35817a9b19 [ 2384.359089] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2384.363456] RSP: 002b:00007f357ed1f188 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 2384.365257] RAX: ffffffffffffffda RBX: 00007f35818bcf60 RCX: 00007f35817a9b19 [ 2384.366948] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 2384.368627] RBP: 00007f357ed1f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2384.370305] R10: 00000000087ffffc R11: 0000000000000246 R12: 0000000000000001 [ 2384.371991] R13: 00007ffdd683fcbf R14: 00007f357ed1f300 R15: 0000000000022000 [ 2384.373705] [ 2384.374250] CPU: 1 PID: 12199 Comm: syz-executor.2 Not tainted 5.18.0-rc1-next-20220406 #1 [ 2384.375176] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2384.376405] Call Trace: [ 2384.376682] [ 2384.376932] dump_stack_lvl+0x8b/0xb3 [ 2384.377350] should_fail.cold+0x5/0xa [ 2384.377760] ? create_object.isra.0+0x3a/0xa20 [ 2384.378269] should_failslab+0x5/0x10 [ 2384.378698] kmem_cache_alloc+0x5b/0x480 [ 2384.379148] create_object.isra.0+0x3a/0xa20 [ 2384.379630] ? kasan_unpoison+0x23/0x50 [ 2384.380057] __kmalloc+0x25b/0x440 [ 2384.380465] ext4_find_extent+0xa39/0xd20 [ 2384.380923] ext4_ext_map_blocks+0x1c8/0x5cd0 [ 2384.381431] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 2384.381997] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 2384.382589] ? ext4_ext_release+0x10/0x10 [ 2384.383049] ? lock_acquire+0x1b2/0x530 [ 2384.383493] ? lock_release+0x750/0x750 [ 2384.383933] ? lock_is_held_type+0xd7/0x130 [ 2384.384420] ? down_read+0x198/0x440 [ 2384.384832] ? rwsem_down_read_slowpath+0xac0/0xac0 [ 2384.385375] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 2384.385974] ? ext4_es_lookup_extent+0xc4/0xc60 [ 2384.386515] ext4_map_blocks+0x9c8/0x1970 [ 2384.386977] ? lock_is_held_type+0xd7/0x130 [ 2384.387452] ? ext4_issue_zeroout+0x1c0/0x1c0 [ 2384.387940] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 2384.388543] ? jbd2__journal_start+0xf3/0x8d0 [ 2384.389028] ? __ext4_journal_start_sb+0x392/0x470 [ 2384.389569] ? __ext4_journal_start_sb+0x1d5/0x470 [ 2384.390089] ext4_alloc_file_blocks.isra.0+0x2c1/0xb20 [ 2384.390677] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2384.391282] ? ext4_ext_correct_indexes+0x440/0x440 [ 2384.391818] ? down_write_killable+0x170/0x170 [ 2384.392340] ext4_fallocate+0x1a2b/0x3c90 [ 2384.392791] ? lock_acquire+0x1b2/0x530 [ 2384.393223] ? lock_release+0x750/0x750 [ 2384.393661] ? ext4_ext_truncate+0x3e0/0x3e0 [ 2384.394144] ? lock_is_held_type+0xd7/0x130 [ 2384.394635] ? ext4_ext_truncate+0x3e0/0x3e0 [ 2384.395116] vfs_fallocate+0x489/0xe00 [ 2384.395549] __x64_sys_fallocate+0xcf/0x140 [ 2384.396031] do_syscall_64+0x3b/0x90 [ 2384.396446] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2384.397014] RIP: 0033:0x7fd845bccb19 [ 2384.397413] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2384.399387] RSP: 002b:00007fd843142188 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 2384.400230] RAX: ffffffffffffffda RBX: 00007fd845cdff60 RCX: 00007fd845bccb19 [ 2384.401006] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 2384.401783] RBP: 00007fd8431421d0 R08: 0000000000000000 R09: 0000000000000000 [ 2384.402564] R10: 00000000087ffffc R11: 0000000000000246 R12: 0000000000000001 [ 2384.403334] R13: 00007ffde12fa01f R14: 00007fd843142300 R15: 0000000000022000 [ 2384.404121] 07:01:20 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f00000001c0)=0x8) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x14, 0x0, 0x3200}, 0x14}}, 0x0) 07:01:20 executing program 3: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000040)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x300000c, 0x13, r0, 0x8000000) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xa) fork() (fail_nth: 4) 07:01:20 executing program 0: openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r0, 0x0, 0x0, 0x87ffffc) mmap$perf(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000008, 0x10, 0xffffffffffffffff, 0x4) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x12, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = syz_open_procfs(0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001240)={0x1, 0x80, 0x0, 0xa1, 0x0, 0x0, 0x0, 0x7, 0xa0400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x3, @perf_config_ext, 0x21, 0x1, 0x0, 0x0, 0x9, 0x0, 0x8000, 0x0, 0x80, 0x0, 0x5}, 0xffffffffffffffff, 0x4, r1, 0x0) r2 = gettid() process_vm_readv(r2, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/4078, 0xfee}, {&(0x7f0000000000)=""/123, 0x7b}, {&(0x7f0000000100)=""/57, 0x39}], 0x3, &(0x7f0000000240)=[{&(0x7f0000012940)=""/102400, 0xffffff76}], 0x1, 0x0) (fail_nth: 5) perf_event_open(0x0, r2, 0x1, r1, 0x8) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/consoles\x00', 0x0, 0x0) [ 2384.503408] FAULT_INJECTION: forcing a failure. [ 2384.503408] name failslab, interval 1, probability 0, space 0, times 0 [ 2384.504736] CPU: 1 PID: 12210 Comm: syz-executor.3 Not tainted 5.18.0-rc1-next-20220406 #1 [ 2384.505601] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2384.506794] Call Trace: [ 2384.507072] [ 2384.507311] dump_stack_lvl+0x8b/0xb3 [ 2384.507716] should_fail.cold+0x5/0xa [ 2384.508127] ? prepare_creds+0x2b/0x6f0 [ 2384.508554] should_failslab+0x5/0x10 [ 2384.508957] kmem_cache_alloc+0x5b/0x480 [ 2384.509387] prepare_creds+0x2b/0x6f0 [ 2384.509795] copy_creds+0x76/0xb20 [ 2384.510202] copy_process+0xea0/0x6db0 [ 2384.510636] ? lock_release+0x3b2/0x750 [ 2384.511056] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 2384.511622] ? __cleanup_sighand+0xb0/0xb0 [ 2384.512077] ? lock_is_held_type+0xd7/0x130 [ 2384.512560] ? lock_release+0x3b2/0x750 [ 2384.512988] ? ksys_write+0x20c/0x250 [ 2384.513405] ? kernel_clone+0x2f8/0xa60 [ 2384.513849] kernel_clone+0xe7/0xa60 [ 2384.514251] ? find_held_lock+0x2c/0x110 [ 2384.514715] ? create_io_thread+0xf0/0xf0 [ 2384.515173] ? __mutex_unlock_slowpath+0x15c/0x5e0 [ 2384.515714] ? bit_wait_io_timeout+0x160/0x160 [ 2384.516213] ? lock_is_held_type+0xd7/0x130 [ 2384.516690] __do_sys_fork+0x8a/0xc0 [ 2384.517099] ? kernel_clone+0xa60/0xa60 [ 2384.517533] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 2384.518140] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2384.518725] ? lockdep_hardirqs_on+0x79/0x100 [ 2384.519229] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2384.519799] do_syscall_64+0x3b/0x90 [ 2384.520210] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2384.520776] RIP: 0033:0x7fc1c2a89b19 [ 2384.521172] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2384.523144] RSP: 002b:00007fc1bffff188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 2384.523966] RAX: ffffffffffffffda RBX: 00007fc1c2b9cf60 RCX: 00007fc1c2a89b19 [ 2384.524742] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2384.525508] RBP: 00007fc1bffff1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2384.526276] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2384.527065] R13: 00007fff0449096f R14: 00007fc1bffff300 R15: 0000000000022000 [ 2384.527845] [ 2384.543527] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12214 comm=syz-executor.4 [ 2384.551141] FAULT_INJECTION: forcing a failure. [ 2384.551141] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2384.552659] CPU: 1 PID: 12215 Comm: syz-executor.0 Not tainted 5.18.0-rc1-next-20220406 #1 [ 2384.553522] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2384.554719] Call Trace: [ 2384.554991] [ 2384.555238] dump_stack_lvl+0x8b/0xb3 [ 2384.555659] should_fail.cold+0x5/0xa [ 2384.556075] prepare_alloc_pages+0x17b/0x500 [ 2384.556572] __alloc_pages+0x131/0x4e0 [ 2384.556997] ? __alloc_pages_slowpath.constprop.0+0x1f10/0x1f10 [ 2384.557645] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 2384.558225] ? __lock_acquire+0x164e/0x6120 [ 2384.558721] alloc_pages+0x1a0/0x2f0 [ 2384.559129] pte_alloc_one+0x16/0x1f0 [ 2384.559546] __pte_alloc+0x69/0x200 [ 2384.559941] ? pmd_install+0x250/0x250 [ 2384.560361] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 2384.560935] ? lock_chain_count+0x20/0x20 [ 2384.561383] __handle_mm_fault+0x2550/0x35e0 [ 2384.561860] ? lock_is_held_type+0xd7/0x130 [ 2384.562332] ? __pmd_alloc+0x680/0x680 [ 2384.562778] handle_mm_fault+0x2e6/0xa20 [ 2384.563216] __get_user_pages+0x50d/0x1100 [ 2384.563670] ? follow_page_mask+0x1a30/0x1a30 [ 2384.564161] ? lock_release+0x750/0x750 [ 2384.564588] ? lock_is_held_type+0xd7/0x130 [ 2384.564658] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12216 comm=syz-executor.4 [ 2384.565070] ? lock_is_held_type+0xd7/0x130 [ 2384.568157] __get_user_pages_remote+0x18f/0x870 [ 2384.568673] ? down_read+0x170/0x440 [ 2384.569086] pin_user_pages_remote+0x63/0x90 [ 2384.569578] process_vm_rw_core.constprop.0+0x44a/0x9a0 [ 2384.570168] ? find_held_lock+0x2c/0x110 [ 2384.570627] ? vmalloc_dump_obj+0x1a0/0x1a0 [ 2384.571113] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2384.571705] ? _copy_from_user+0xf2/0x170 [ 2384.572166] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 2384.572708] ? iovec_from_user+0x1fd/0x3c0 [ 2384.573161] ? import_iovec+0x83/0xb0 [ 2384.573574] process_vm_rw+0x1b6/0x260 [ 2384.573998] ? process_vm_rw_core.constprop.0+0x9a0/0x9a0 [ 2384.574597] ? ksys_write+0x20c/0x250 [ 2384.575001] ? lock_downgrade+0x6d0/0x6d0 [ 2384.575462] ? find_held_lock+0x2c/0x110 [ 2384.575901] ? __mutex_unlock_slowpath+0x15c/0x5e0 [ 2384.576434] ? bit_wait_io_timeout+0x160/0x160 [ 2384.576928] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2384.577529] ? vfs_write+0x422/0xac0 [ 2384.577928] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 2384.578540] ? fput+0x2a/0x50 [ 2384.578890] __x64_sys_process_vm_readv+0xdf/0x1b0 [ 2384.579422] ? lockdep_hardirqs_on+0x79/0x100 [ 2384.579900] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2384.580459] do_syscall_64+0x3b/0x90 [ 2384.580853] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2384.581416] RIP: 0033:0x7f1173378b19 [ 2384.581811] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2384.583786] RSP: 002b:00007f11708ee188 EFLAGS: 00000246 ORIG_RAX: 0000000000000136 [ 2384.584602] RAX: ffffffffffffffda RBX: 00007f117348bf60 RCX: 00007f1173378b19 [ 2384.585371] RDX: 0000000000000003 RSI: 00000000200000c0 RDI: 000000000000030a [ 2384.586130] RBP: 00007f11708ee1d0 R08: 0000000000000001 R09: 0000000000000000 [ 2384.586913] R10: 0000000020000240 R11: 0000000000000246 R12: 0000000000000001 [ 2384.587678] R13: 00007ffeef59581f R14: 00007f11708ee300 R15: 0000000000022000 [ 2384.588462] 07:01:20 executing program 6: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) preadv(r0, &(0x7f00000011c0)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x7, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x0, 0x0, 0x87ffffc) mmap$perf(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000008, 0x1010, r2, 0x4) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000100), 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r3 = syz_open_procfs(0x0, 0x0) perf_event_open(&(0x7f0000001240)={0x1, 0x80, 0x9, 0xa1, 0xf9, 0x3, 0x0, 0x7, 0xa0400, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x3, @perf_config_ext={0x58d}, 0x21, 0x1, 0x0, 0x6, 0x9, 0x0, 0x8000, 0x0, 0x80, 0x0, 0x5}, 0xffffffffffffffff, 0x0, r3, 0x0) r4 = gettid() process_vm_readv(r4, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/4078, 0xfee}, {&(0x7f0000000000)=""/123, 0x7b}, {&(0x7f0000000100)=""/57, 0x39}], 0x3, &(0x7f0000000240)=[{&(0x7f0000012940)=""/102400, 0xffffff76}], 0x1, 0x0) perf_event_open(0x0, r4, 0x1, r3, 0x8) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/consoles\x00', 0x0, 0x0) 07:01:20 executing program 7: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000001340)) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x204800, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x1) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002480)='fd/3\x00') r2 = dup(r1) fdatasync(r2) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x40}}, './file0\x00'}) preadv2(r3, &(0x7f0000001300)=[{&(0x7f0000000080)=""/193, 0xc1}, {&(0x7f0000000180)=""/250, 0xfa}, {&(0x7f0000000300)=""/4096, 0x1000}], 0x3, 0x80000000, 0x66, 0x18) r4 = openat(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000001380)=0x100000) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r5, 0x0, 0x0, 0x87ffffc) (fail_nth: 6) sendfile(r5, r4, 0x0, 0x80000000) 07:01:20 executing program 3: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000040)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x300000c, 0x13, r0, 0x8000000) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xa) fork() (fail_nth: 5) 07:01:20 executing program 1: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) preadv(r0, &(0x7f00000011c0)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x7, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x0, 0x0, 0x87ffffc) mmap$perf(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000008, 0x1010, r2, 0x4) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000100), 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r3 = syz_open_procfs(0x0, 0x0) preadv(r3, &(0x7f0000000080)=[{&(0x7f0000000000)=""/40, 0x40}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000001240)={0x1, 0x80, 0x9, 0xa1, 0xf9, 0x3, 0x0, 0x7, 0xa0400, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x3, @perf_config_ext={0x58d}, 0x21, 0x1, 0x0, 0x6, 0x9, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x5}, 0xffffffffffffffff, 0x4, r3, 0x0) r4 = gettid() process_vm_readv(r4, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/4078, 0xfee}, {&(0x7f0000000000)=""/123, 0x7b}, {&(0x7f0000000100)=""/57, 0x39}], 0x3, &(0x7f0000000240)=[{&(0x7f0000012940)=""/102400, 0xffffff76}], 0x1, 0x0) perf_event_open(0x0, r4, 0x1, r3, 0x8) [ 2384.673559] FAULT_INJECTION: forcing a failure. [ 2384.673559] name failslab, interval 1, probability 0, space 0, times 0 [ 2384.674890] CPU: 1 PID: 12220 Comm: syz-executor.3 Not tainted 5.18.0-rc1-next-20220406 #1 [ 2384.675758] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2384.676937] Call Trace: [ 2384.677208] [ 2384.677451] dump_stack_lvl+0x8b/0xb3 [ 2384.677867] should_fail.cold+0x5/0xa [ 2384.678280] ? create_object.isra.0+0x3a/0xa20 [ 2384.678779] should_failslab+0x5/0x10 [ 2384.679188] kmem_cache_alloc+0x5b/0x480 [ 2384.679631] create_object.isra.0+0x3a/0xa20 [ 2384.680109] ? kasan_unpoison+0x23/0x50 [ 2384.680541] kmem_cache_alloc+0x239/0x480 [ 2384.680987] prepare_creds+0x2b/0x6f0 [ 2384.681401] copy_creds+0x76/0xb20 [ 2384.681809] copy_process+0xea0/0x6db0 [ 2384.682241] ? lock_release+0x3b2/0x750 [ 2384.682685] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 2384.683255] ? __cleanup_sighand+0xb0/0xb0 [ 2384.683717] ? lock_is_held_type+0xd7/0x130 [ 2384.684191] ? lock_release+0x3b2/0x750 [ 2384.684630] ? ksys_write+0x20c/0x250 [ 2384.685046] ? kernel_clone+0x2f8/0xa60 [ 2384.685472] kernel_clone+0xe7/0xa60 [ 2384.685873] ? find_held_lock+0x2c/0x110 [ 2384.686311] ? create_io_thread+0xf0/0xf0 [ 2384.686793] ? __mutex_unlock_slowpath+0x15c/0x5e0 [ 2384.687332] ? bit_wait_io_timeout+0x160/0x160 [ 2384.687829] ? lock_is_held_type+0xd7/0x130 [ 2384.688301] __do_sys_fork+0x8a/0xc0 [ 2384.688698] ? kernel_clone+0xa60/0xa60 [ 2384.689133] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 2384.689739] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2384.690284] ? lockdep_hardirqs_on+0x79/0x100 [ 2384.690784] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2384.691335] do_syscall_64+0x3b/0x90 [ 2384.691748] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2384.692301] RIP: 0033:0x7fc1c2a89b19 [ 2384.692693] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2384.694640] RSP: 002b:00007fc1bffff188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 2384.695453] RAX: ffffffffffffffda RBX: 00007fc1c2b9cf60 RCX: 00007fc1c2a89b19 [ 2384.696203] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2384.696958] RBP: 00007fc1bffff1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2384.697709] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2384.698460] R13: 00007fff0449096f R14: 00007fc1bffff300 R15: 0000000000022000 [ 2384.699225] [ 2384.706964] FAULT_INJECTION: forcing a failure. [ 2384.706964] name failslab, interval 1, probability 0, space 0, times 0 [ 2384.708408] CPU: 1 PID: 12224 Comm: syz-executor.7 Not tainted 5.18.0-rc1-next-20220406 #1 [ 2384.709294] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2384.710513] Call Trace: [ 2384.710785] [ 2384.711021] dump_stack_lvl+0x8b/0xb3 [ 2384.711426] should_fail.cold+0x5/0xa [ 2384.711839] ? create_object.isra.0+0x3a/0xa20 [ 2384.712325] should_failslab+0x5/0x10 [ 2384.712734] kmem_cache_alloc+0x5b/0x480 [ 2384.713183] create_object.isra.0+0x3a/0xa20 [ 2384.713651] ? kasan_unpoison+0x23/0x50 [ 2384.714067] __kmalloc+0x25b/0x440 [ 2384.714450] ext4_find_extent+0xa39/0xd20 [ 2384.714905] ext4_ext_map_blocks+0x1c8/0x5cd0 [ 2384.715388] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 2384.715933] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 2384.716506] ? ext4_ext_release+0x10/0x10 [ 2384.716937] ? lock_acquire+0x1b2/0x530 [ 2384.717369] ? lock_release+0x750/0x750 [ 2384.717788] ? lock_is_held_type+0xd7/0x130 [ 2384.718259] ? down_read+0x198/0x440 [ 2384.718676] ? rwsem_down_read_slowpath+0xac0/0xac0 [ 2384.719199] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 2384.719782] ? ext4_es_lookup_extent+0xc4/0xc60 [ 2384.720273] ext4_map_blocks+0x9c8/0x1970 [ 2384.720720] ? lock_is_held_type+0xd7/0x130 [ 2384.721189] ? ext4_issue_zeroout+0x1c0/0x1c0 [ 2384.721670] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 2384.722259] ? jbd2__journal_start+0xf3/0x8d0 [ 2384.722751] ? __ext4_journal_start_sb+0x392/0x470 [ 2384.723271] ? __ext4_journal_start_sb+0x1d5/0x470 [ 2384.723783] ext4_alloc_file_blocks.isra.0+0x2c1/0xb20 [ 2384.724355] ? generic_update_time+0x21d/0x350 [ 2384.724847] ? ext4_ext_correct_indexes+0x440/0x440 [ 2384.725388] ? down_write_killable+0x170/0x170 [ 2384.725893] ext4_fallocate+0x1a2b/0x3c90 [ 2384.726348] ? lock_acquire+0x1b2/0x530 [ 2384.726808] ? lock_release+0x750/0x750 [ 2384.727252] ? ext4_ext_truncate+0x3e0/0x3e0 [ 2384.727734] ? lock_is_held_type+0xd7/0x130 [ 2384.728206] ? ext4_ext_truncate+0x3e0/0x3e0 [ 2384.728703] vfs_fallocate+0x489/0xe00 [ 2384.729136] __x64_sys_fallocate+0xcf/0x140 [ 2384.729615] do_syscall_64+0x3b/0x90 [ 2384.730026] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2384.730591] RIP: 0033:0x7fdba5ddfb19 [ 2384.730995] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2384.733010] RSP: 002b:00007fdba3355188 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 2384.733832] RAX: ffffffffffffffda RBX: 00007fdba5ef2f60 RCX: 00007fdba5ddfb19 [ 2384.734601] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 2384.735372] RBP: 00007fdba33551d0 R08: 0000000000000000 R09: 0000000000000000 [ 2384.736156] R10: 00000000087ffffc R11: 0000000000000246 R12: 0000000000000001 [ 2384.736946] R13: 00007ffe895a664f R14: 00007fdba3355300 R15: 0000000000022000 [ 2384.737740] [ 2398.333414] FAULT_INJECTION: forcing a failure. [ 2398.333414] name failslab, interval 1, probability 0, space 0, times 0 [ 2398.334666] CPU: 1 PID: 12241 Comm: syz-executor.3 Not tainted 5.18.0-rc1-next-20220406 #1 [ 2398.335598] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2398.336810] Call Trace: [ 2398.337089] [ 2398.337332] dump_stack_lvl+0x8b/0xb3 [ 2398.337752] should_fail.cold+0x5/0xa [ 2398.338167] ? security_prepare_creds+0x10a/0x180 [ 2398.338681] should_failslab+0x5/0x10 [ 2398.339106] __kmalloc+0x72/0x440 [ 2398.339492] security_prepare_creds+0x10a/0x180 [ 2398.339995] prepare_creds+0x505/0x6f0 [ 2398.340418] copy_creds+0x76/0xb20 [ 2398.340798] copy_process+0xea0/0x6db0 [ 2398.341221] ? lock_release+0x3b2/0x750 [ 2398.341650] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 2398.342212] ? __cleanup_sighand+0xb0/0xb0 [ 2398.342661] ? lock_is_held_type+0xd7/0x130 [ 2398.343144] ? lock_release+0x3b2/0x750 [ 2398.343573] ? ksys_write+0x20c/0x250 [ 2398.343988] ? kernel_clone+0x2f8/0xa60 [ 2398.344416] kernel_clone+0xe7/0xa60 [ 2398.344807] ? find_held_lock+0x2c/0x110 [ 2398.345231] ? create_io_thread+0xf0/0xf0 [ 2398.345674] ? __mutex_unlock_slowpath+0x15c/0x5e0 [ 2398.346198] ? bit_wait_io_timeout+0x160/0x160 [ 2398.346678] ? lock_is_held_type+0xd7/0x130 [ 2398.347160] __do_sys_fork+0x8a/0xc0 [ 2398.347565] ? kernel_clone+0xa60/0xa60 [ 2398.347996] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 2398.348588] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2398.349132] ? lockdep_hardirqs_on+0x79/0x100 [ 2398.349613] ? syscall_enter_from_user_mode+0x1d/0x50 07:01:34 executing program 5: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) preadv(r0, &(0x7f00000011c0)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x7, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x0, 0x0, 0x87ffffc) (fail_nth: 2) mmap$perf(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000008, 0x1010, r2, 0x4) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000100), 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r3 = syz_open_procfs(0x0, 0x0) perf_event_open(&(0x7f0000001240)={0x1, 0x80, 0x9, 0xa1, 0xf9, 0x3, 0x0, 0x7, 0xa0400, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x3, @perf_config_ext={0x58d}, 0x21, 0x1, 0x0, 0x6, 0x9, 0x0, 0x8000, 0x0, 0x80, 0x0, 0x5}, 0xffffffffffffffff, 0x4, r3, 0x0) r4 = gettid() perf_event_open(0x0, r4, 0x1, r3, 0x8) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/consoles\x00', 0x0, 0x0) 07:01:34 executing program 7: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000001340)) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x204800, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x1) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002480)='fd/3\x00') r2 = dup(r1) fdatasync(r2) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x40}}, './file0\x00'}) preadv2(r3, &(0x7f0000001300)=[{&(0x7f0000000080)=""/193, 0xc1}, {&(0x7f0000000180)=""/250, 0xfa}, {&(0x7f0000000300)=""/4096, 0x1000}], 0x3, 0x80000000, 0x66, 0x18) r4 = openat(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000001380)=0x100000) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r5, 0x0, 0x0, 0x87ffffc) (fail_nth: 7) sendfile(r5, r4, 0x0, 0x80000000) 07:01:34 executing program 6: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) preadv(r0, &(0x7f00000011c0)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x7, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x0, 0x0, 0x87ffffc) mmap$perf(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000008, 0x1010, r2, 0x4) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000100), 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r3 = syz_open_procfs(0x0, 0x0) perf_event_open(&(0x7f0000001240)={0x1, 0x80, 0x9, 0xa1, 0xf9, 0x3, 0x0, 0x7, 0xa0400, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x3, @perf_config_ext={0x58d}, 0x21, 0x1, 0x0, 0x6, 0x9, 0x0, 0x8000, 0x0, 0x80, 0x0, 0x5}, 0xffffffffffffffff, 0x0, r3, 0x0) r4 = gettid() process_vm_readv(r4, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/4078, 0xfee}, {&(0x7f0000000000)=""/123, 0x7b}, {&(0x7f0000000100)=""/57, 0x39}], 0x3, &(0x7f0000000240)=[{&(0x7f0000012940)=""/102400, 0xffffff76}], 0x1, 0x0) perf_event_open(0x0, r4, 0x1, r3, 0x8) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/consoles\x00', 0x0, 0x0) 07:01:34 executing program 1: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) preadv(r0, &(0x7f00000011c0)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x7, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x0, 0x0, 0x87ffffc) mmap$perf(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000008, 0x1010, r2, 0x4) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000100), 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r3 = syz_open_procfs(0x0, 0x0) preadv(r3, &(0x7f0000000080)=[{&(0x7f0000000000)=""/40, 0x40}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000001240)={0x1, 0x80, 0x9, 0xa1, 0xf9, 0x3, 0x0, 0x7, 0xa0400, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x3, @perf_config_ext={0x58d}, 0x21, 0x1, 0x0, 0x6, 0x9, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x5}, 0xffffffffffffffff, 0x4, r3, 0x0) r4 = gettid() process_vm_readv(r4, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/4078, 0xfee}, {&(0x7f0000000000)=""/123, 0x7b}, {&(0x7f0000000100)=""/57, 0x39}], 0x3, &(0x7f0000000240)=[{&(0x7f0000012940)=""/102400, 0xffffff76}], 0x1, 0x0) perf_event_open(0x0, r4, 0x1, r3, 0x8) 07:01:34 executing program 0: openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r0, 0x0, 0x0, 0x87ffffc) mmap$perf(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000008, 0x10, 0xffffffffffffffff, 0x4) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x12, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = syz_open_procfs(0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001240)={0x1, 0x80, 0x0, 0xa1, 0x0, 0x0, 0x0, 0x7, 0xa0400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x3, @perf_config_ext, 0x21, 0x1, 0x0, 0x0, 0x9, 0x0, 0x8000, 0x0, 0x80, 0x0, 0x5}, 0xffffffffffffffff, 0x4, r1, 0x0) r2 = gettid() process_vm_readv(r2, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/4078, 0xfee}, {&(0x7f0000000000)=""/123, 0x7b}, {&(0x7f0000000100)=""/57, 0x39}], 0x3, &(0x7f0000000240)=[{&(0x7f0000012940)=""/102400, 0xffffff76}], 0x1, 0x0) (fail_nth: 6) perf_event_open(0x0, r2, 0x1, r1, 0x8) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/consoles\x00', 0x0, 0x0) 07:01:34 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f00000001c0)=0x8) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x14, 0x0, 0x3400}, 0x14}}, 0x0) 07:01:34 executing program 3: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000040)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x300000c, 0x13, r0, 0x8000000) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xa) fork() (fail_nth: 6) 07:01:34 executing program 2: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x204800, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x1) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002480)='fd/3\x00') fdatasync(0xffffffffffffffff) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x40}}, './file0\x00'}) preadv2(r2, &(0x7f0000001300)=[{&(0x7f0000000080)=""/193, 0xc1}, {&(0x7f0000000180)=""/250, 0xfa}, {&(0x7f0000000300)=""/4096, 0x1000}], 0x3, 0x80000000, 0x66, 0x18) openat(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r3, 0x0, 0x0, 0x87ffffc) (fail_nth: 5) [ 2398.350418] do_syscall_64+0x3b/0x90 [ 2398.350953] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2398.351542] RIP: 0033:0x7fc1c2a89b19 [ 2398.351928] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2398.353818] RSP: 002b:00007fc1bffff188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 2398.354604] RAX: ffffffffffffffda RBX: 00007fc1c2b9cf60 RCX: 00007fc1c2a89b19 [ 2398.355379] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2398.356113] RBP: 00007fc1bffff1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2398.356867] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2398.357611] R13: 00007fff0449096f R14: 00007fc1bffff300 R15: 0000000000022000 [ 2398.358364] [ 2398.394437] FAULT_INJECTION: forcing a failure. [ 2398.394437] name failslab, interval 1, probability 0, space 0, times 0 [ 2398.394955] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12250 comm=syz-executor.4 [ 2398.396089] CPU: 1 PID: 12242 Comm: syz-executor.7 Not tainted 5.18.0-rc1-next-20220406 #1 [ 2398.399316] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2398.400522] Call Trace: [ 2398.400799] [ 2398.401030] dump_stack_lvl+0x8b/0xb3 [ 2398.401455] should_fail.cold+0x5/0xa [ 2398.401856] ? __es_insert_extent+0x3a9/0x12f0 [ 2398.402340] should_failslab+0x5/0x10 [ 2398.402755] kmem_cache_alloc+0x5b/0x480 [ 2398.403201] __es_insert_extent+0x3a9/0x12f0 [ 2398.403662] ? do_raw_write_lock+0x11a/0x280 [ 2398.404136] ? do_raw_read_unlock+0x70/0x70 [ 2398.404601] ext4_es_insert_extent+0x2dc/0xbf0 [ 2398.405100] ? ext4_es_scan_clu+0x2e0/0x2e0 [ 2398.405557] ? lock_downgrade+0x6d0/0x6d0 [ 2398.406014] ? lock_is_held_type+0xd7/0x130 [ 2398.406485] ? __ext4_handle_dirty_metadata+0x720/0x720 [ 2398.407059] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 2398.407646] ext4_ext_map_blocks+0x1a36/0x5cd0 [ 2398.408151] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 2398.408711] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 2398.409281] ? ext4_ext_release+0x10/0x10 [ 2398.409717] ? lock_acquire+0x1b2/0x530 [ 2398.410011] FAULT_INJECTION: forcing a failure. [ 2398.410011] name failslab, interval 1, probability 0, space 0, times 0 [ 2398.410140] ? lock_release+0x750/0x750 [ 2398.412818] ? lock_is_held_type+0xd7/0x130 [ 2398.413277] ? down_read+0x198/0x440 [ 2398.413677] ? rwsem_down_read_slowpath+0xac0/0xac0 [ 2398.414199] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 2398.414791] ? ext4_es_lookup_extent+0xc4/0xc60 [ 2398.415304] ext4_map_blocks+0x9c8/0x1970 [ 2398.415757] ? lock_is_held_type+0xd7/0x130 [ 2398.416238] ? ext4_issue_zeroout+0x1c0/0x1c0 [ 2398.416720] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 2398.417292] ? jbd2__journal_start+0xf3/0x8d0 [ 2398.417776] ? __ext4_journal_start_sb+0x392/0x470 [ 2398.418289] ? __ext4_journal_start_sb+0x1d5/0x470 [ 2398.418827] ext4_alloc_file_blocks.isra.0+0x2c1/0xb20 [ 2398.419379] ? generic_update_time+0x21d/0x350 [ 2398.419860] ? ext4_ext_correct_indexes+0x440/0x440 [ 2398.420399] ? down_write_killable+0x170/0x170 [ 2398.420912] ext4_fallocate+0x1a2b/0x3c90 [ 2398.421377] ? lock_acquire+0x1b2/0x530 [ 2398.421821] ? lock_release+0x750/0x750 [ 2398.422262] ? ext4_ext_truncate+0x3e0/0x3e0 [ 2398.422759] ? lock_is_held_type+0xd7/0x130 [ 2398.423234] ? ext4_ext_truncate+0x3e0/0x3e0 [ 2398.423719] vfs_fallocate+0x489/0xe00 [ 2398.424159] __x64_sys_fallocate+0xcf/0x140 [ 2398.424641] do_syscall_64+0x3b/0x90 [ 2398.425050] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2398.425625] RIP: 0033:0x7fdba5ddfb19 [ 2398.426029] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2398.428050] RSP: 002b:00007fdba3355188 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 2398.428904] RAX: ffffffffffffffda RBX: 00007fdba5ef2f60 RCX: 00007fdba5ddfb19 [ 2398.429676] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 2398.430477] RBP: 00007fdba33551d0 R08: 0000000000000000 R09: 0000000000000000 [ 2398.431246] R10: 00000000087ffffc R11: 0000000000000246 R12: 0000000000000001 [ 2398.432040] R13: 00007ffe895a664f R14: 00007fdba3355300 R15: 0000000000022000 [ 2398.432821] [ 2398.433083] CPU: 0 PID: 12251 Comm: syz-executor.5 Not tainted 5.18.0-rc1-next-20220406 #1 [ 2398.434797] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2398.437099] Call Trace: [ 2398.437619] [ 2398.438075] dump_stack_lvl+0x8b/0xb3 [ 2398.438895] should_fail.cold+0x5/0xa [ 2398.439683] ? create_object.isra.0+0x3a/0xa20 [ 2398.440620] should_failslab+0x5/0x10 [ 2398.441404] kmem_cache_alloc+0x5b/0x480 [ 2398.442252] create_object.isra.0+0x3a/0xa20 [ 2398.443155] ? kasan_unpoison+0x23/0x50 [ 2398.443973] kmem_cache_alloc+0x239/0x480 [ 2398.444833] jbd2__journal_start+0x18c/0x8d0 [ 2398.445737] __ext4_journal_start_sb+0x392/0x470 [ 2398.446708] ? ext4_setattr+0x2070/0x2070 [ 2398.447549] ext4_dirty_inode+0x9d/0x110 [ 2398.448373] __mark_inode_dirty+0x425/0xeb0 [ 2398.449252] ? file_remove_privs+0x5b0/0x5b0 [ 2398.450147] ? security_inode_need_killpriv+0x79/0xa0 [ 2398.451225] generic_update_time+0x21d/0x350 [ 2398.452135] file_update_time+0x436/0x520 [ 2398.452986] ? discard_new_inode+0x190/0x190 [ 2398.453881] ? down_write_killable+0x170/0x170 [ 2398.454829] file_modified+0x77/0x90 [ 2398.455596] ext4_fallocate+0x3bc/0x3c90 [ 2398.456426] ? lock_acquire+0x1b2/0x530 [ 2398.457239] ? lock_release+0x750/0x750 [ 2398.458056] ? ext4_ext_truncate+0x3e0/0x3e0 [ 2398.458999] ? lock_is_held_type+0xd7/0x130 [ 2398.459882] ? ext4_ext_truncate+0x3e0/0x3e0 [ 2398.460772] vfs_fallocate+0x489/0xe00 [ 2398.461585] __x64_sys_fallocate+0xcf/0x140 [ 2398.462474] do_syscall_64+0x3b/0x90 [ 2398.463246] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2398.464297] RIP: 0033:0x7f35817a9b19 [ 2398.465045] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2398.468752] RSP: 002b:00007f357ed1f188 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 2398.470315] RAX: ffffffffffffffda RBX: 00007f35818bcf60 RCX: 00007f35817a9b19 [ 2398.471771] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 2398.473218] RBP: 00007f357ed1f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2398.474663] R10: 00000000087ffffc R11: 0000000000000246 R12: 0000000000000001 [ 2398.476132] R13: 00007ffdd683fcbf R14: 00007f357ed1f300 R15: 0000000000022000 [ 2398.477601] 07:01:34 executing program 3: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000040)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x300000c, 0x13, r0, 0x8000000) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xa) fork() (fail_nth: 7) [ 2398.488984] FAULT_INJECTION: forcing a failure. [ 2398.488984] name failslab, interval 1, probability 0, space 0, times 0 [ 2398.489039] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12257 comm=syz-executor.4 [ 2398.490312] CPU: 1 PID: 12255 Comm: syz-executor.0 Not tainted 5.18.0-rc1-next-20220406 #1 [ 2398.490328] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2398.490338] Call Trace: [ 2398.490342] [ 2398.490347] dump_stack_lvl+0x8b/0xb3 [ 2398.490372] should_fail.cold+0x5/0xa [ 2398.490387] ? ptlock_alloc+0x1d/0x70 [ 2398.496547] should_failslab+0x5/0x10 [ 2398.496954] kmem_cache_alloc+0x5b/0x480 [ 2398.497400] ptlock_alloc+0x1d/0x70 [ 2398.497786] pte_alloc_one+0x68/0x1f0 [ 2398.498191] __pte_alloc+0x69/0x200 [ 2398.498579] ? pmd_install+0x250/0x250 [ 2398.498997] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 2398.499570] ? lock_chain_count+0x20/0x20 [ 2398.500007] __handle_mm_fault+0x2550/0x35e0 [ 2398.500476] ? lock_is_held_type+0xd7/0x130 [ 2398.500980] ? __pmd_alloc+0x680/0x680 [ 2398.501443] handle_mm_fault+0x2e6/0xa20 [ 2398.501908] __get_user_pages+0x50d/0x1100 [ 2398.502396] ? follow_page_mask+0x1a30/0x1a30 [ 2398.502909] ? lock_release+0x750/0x750 [ 2398.503362] ? lock_is_held_type+0xd7/0x130 [ 2398.503862] ? lock_is_held_type+0xd7/0x130 [ 2398.504363] __get_user_pages_remote+0x18f/0x870 [ 2398.504898] ? down_read+0x170/0x440 [ 2398.505326] pin_user_pages_remote+0x63/0x90 [ 2398.505818] process_vm_rw_core.constprop.0+0x44a/0x9a0 [ 2398.506430] ? find_held_lock+0x2c/0x110 [ 2398.506919] ? vmalloc_dump_obj+0x1a0/0x1a0 [ 2398.507421] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2398.508047] ? _copy_from_user+0xf2/0x170 [ 2398.508522] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 2398.509065] ? iovec_from_user+0x1fd/0x3c0 [ 2398.509527] ? import_iovec+0x83/0xb0 [ 2398.509947] process_vm_rw+0x1b6/0x260 [ 2398.510375] ? process_vm_rw_core.constprop.0+0x9a0/0x9a0 [ 2398.510984] ? ksys_write+0x20c/0x250 [ 2398.511399] ? lock_downgrade+0x6d0/0x6d0 [ 2398.511856] ? find_held_lock+0x2c/0x110 [ 2398.512303] ? __mutex_unlock_slowpath+0x15c/0x5e0 [ 2398.512838] ? bit_wait_io_timeout+0x160/0x160 [ 2398.513341] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2398.513948] ? vfs_write+0x422/0xac0 [ 2398.514354] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 2398.514970] ? fput+0x2a/0x50 [ 2398.515318] __x64_sys_process_vm_readv+0xdf/0x1b0 [ 2398.515849] ? lockdep_hardirqs_on+0x79/0x100 [ 2398.516341] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2398.516922] do_syscall_64+0x3b/0x90 [ 2398.517341] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2398.517920] RIP: 0033:0x7f1173378b19 [ 2398.518343] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2398.520430] RSP: 002b:00007f11708cd188 EFLAGS: 00000246 ORIG_RAX: 0000000000000136 [ 2398.521287] RAX: ffffffffffffffda RBX: 00007f117348c020 RCX: 00007f1173378b19 [ 2398.522095] RDX: 0000000000000003 RSI: 00000000200000c0 RDI: 000000000000030e [ 2398.522910] RBP: 00007f11708cd1d0 R08: 0000000000000001 R09: 0000000000000000 [ 2398.523714] R10: 0000000020000240 R11: 0000000000000246 R12: 0000000000000001 [ 2398.524513] R13: 00007ffeef59581f R14: 00007f11708cd300 R15: 0000000000022000 [ 2398.525292] [ 2398.536980] FAULT_INJECTION: forcing a failure. [ 2398.536980] name failslab, interval 1, probability 0, space 0, times 0 [ 2398.538375] CPU: 1 PID: 12249 Comm: syz-executor.2 Not tainted 5.18.0-rc1-next-20220406 #1 [ 2398.539319] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2398.540535] Call Trace: [ 2398.540806] [ 2398.541045] dump_stack_lvl+0x8b/0xb3 [ 2398.541462] should_fail.cold+0x5/0xa [ 2398.541865] ? ext4_find_extent+0xa39/0xd20 [ 2398.542330] should_failslab+0x5/0x10 [ 2398.542758] __kmalloc+0x72/0x440 [ 2398.543139] ext4_find_extent+0xa39/0xd20 [ 2398.543587] ext4_ext_map_blocks+0x1c8/0x5cd0 [ 2398.544076] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 2398.544641] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 2398.545206] ? ext4_ext_release+0x10/0x10 [ 2398.545662] ? lock_acquire+0x1b2/0x530 [ 2398.546087] ? lock_release+0x750/0x750 [ 2398.546532] ? lock_is_held_type+0xd7/0x130 [ 2398.547027] ? down_read+0x198/0x440 [ 2398.547446] ? rwsem_down_read_slowpath+0xac0/0xac0 [ 2398.547987] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 2398.548578] ? ext4_es_lookup_extent+0xc4/0xc60 [ 2398.549105] ext4_map_blocks+0x9c8/0x1970 [ 2398.549564] ? lock_is_held_type+0xd7/0x130 [ 2398.550040] ? ext4_issue_zeroout+0x1c0/0x1c0 [ 2398.550528] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 2398.551140] ? jbd2__journal_start+0xf3/0x8d0 [ 2398.551630] ? __ext4_journal_start_sb+0x392/0x470 [ 2398.552160] ? __ext4_journal_start_sb+0x1d5/0x470 [ 2398.552697] ext4_alloc_file_blocks.isra.0+0x2c1/0xb20 [ 2398.553275] ? generic_update_time+0x21d/0x350 [ 2398.553795] ? ext4_ext_correct_indexes+0x440/0x440 07:01:34 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f00000001c0)=0x8) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x14, 0x0, 0x3a00}, 0x14}}, 0x0) [ 2398.554338] ? down_write_killable+0x170/0x170 [ 2398.555085] ext4_fallocate+0x1a2b/0x3c90 [ 2398.555545] ? lock_acquire+0x1b2/0x530 [ 2398.555983] ? lock_release+0x750/0x750 [ 2398.556419] ? ext4_ext_truncate+0x3e0/0x3e0 [ 2398.556909] ? lock_is_held_type+0xd7/0x130 [ 2398.557388] ? ext4_ext_truncate+0x3e0/0x3e0 [ 2398.557874] vfs_fallocate+0x489/0xe00 [ 2398.558311] __x64_sys_fallocate+0xcf/0x140 [ 2398.558806] do_syscall_64+0x3b/0x90 [ 2398.559214] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2398.559788] RIP: 0033:0x7fd845bccb19 [ 2398.560185] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2398.562165] RSP: 002b:00007fd843142188 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 2398.563005] RAX: ffffffffffffffda RBX: 00007fd845cdff60 RCX: 00007fd845bccb19 [ 2398.563776] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 2398.564566] RBP: 00007fd8431421d0 R08: 0000000000000000 R09: 0000000000000000 [ 2398.565328] R10: 00000000087ffffc R11: 0000000000000246 R12: 0000000000000001 [ 2398.566101] R13: 00007ffde12fa01f R14: 00007fd843142300 R15: 0000000000022000 [ 2398.566913] [ 2398.586012] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12260 comm=syz-executor.4 [ 2398.594874] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12262 comm=syz-executor.4 07:01:34 executing program 6: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) preadv(r0, &(0x7f00000011c0)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x7, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x0, 0x0, 0x87ffffc) mmap$perf(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000008, 0x1010, r2, 0x4) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000100), 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r3 = syz_open_procfs(0x0, 0x0) perf_event_open(&(0x7f0000001240)={0x1, 0x80, 0x9, 0xa1, 0xf9, 0x3, 0x0, 0x7, 0xa0400, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x3, @perf_config_ext={0x58d}, 0x21, 0x1, 0x0, 0x6, 0x9, 0x0, 0x8000, 0x0, 0x80, 0x0, 0x5}, 0xffffffffffffffff, 0x0, r3, 0x0) r4 = gettid() process_vm_readv(r4, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/4078, 0xfee}, {&(0x7f0000000000)=""/123, 0x7b}, {&(0x7f0000000100)=""/57, 0x39}], 0x3, &(0x7f0000000240)=[{&(0x7f0000012940)=""/102400, 0xffffff76}], 0x1, 0x0) perf_event_open(0x0, r4, 0x1, r3, 0x8) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/consoles\x00', 0x0, 0x0) [ 2398.614825] FAULT_INJECTION: forcing a failure. [ 2398.614825] name failslab, interval 1, probability 0, space 0, times 0 [ 2398.617256] CPU: 0 PID: 12261 Comm: syz-executor.3 Not tainted 5.18.0-rc1-next-20220406 #1 [ 2398.618944] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2398.621194] Call Trace: [ 2398.621706] [ 2398.622153] dump_stack_lvl+0x8b/0xb3 [ 2398.622955] should_fail.cold+0x5/0xa [ 2398.623726] ? create_object.isra.0+0x3a/0xa20 [ 2398.624658] should_failslab+0x5/0x10 [ 2398.625424] kmem_cache_alloc+0x5b/0x480 [ 2398.626253] create_object.isra.0+0x3a/0xa20 [ 2398.627140] ? kasan_unpoison+0x23/0x50 [ 2398.627945] __kmalloc+0x25b/0x440 [ 2398.628672] security_prepare_creds+0x10a/0x180 [ 2398.629615] prepare_creds+0x505/0x6f0 [ 2398.630401] copy_creds+0x76/0xb20 [ 2398.631152] copy_process+0xea0/0x6db0 [ 2398.631951] ? lock_release+0x3b2/0x750 [ 2398.632756] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 2398.633816] ? __cleanup_sighand+0xb0/0xb0 [ 2398.634671] ? lock_is_held_type+0xd7/0x130 [ 2398.635577] ? lock_release+0x3b2/0x750 [ 2398.636366] ? ksys_write+0x20c/0x250 [ 2398.637122] ? kernel_clone+0x2f8/0xa60 [ 2398.637923] kernel_clone+0xe7/0xa60 [ 2398.638667] ? find_held_lock+0x2c/0x110 [ 2398.639518] ? create_io_thread+0xf0/0xf0 [ 2398.640367] ? __mutex_unlock_slowpath+0x15c/0x5e0 [ 2398.641348] ? bit_wait_io_timeout+0x160/0x160 [ 2398.642257] ? lock_is_held_type+0xd7/0x130 [ 2398.643140] __do_sys_fork+0x8a/0xc0 [ 2398.643878] ? kernel_clone+0xa60/0xa60 [ 2398.644682] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 2398.645776] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2398.646805] ? lockdep_hardirqs_on+0x79/0x100 [ 2398.647697] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2398.648706] do_syscall_64+0x3b/0x90 [ 2398.649436] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2398.650457] RIP: 0033:0x7fc1c2a89b19 [ 2398.651199] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2398.654840] RSP: 002b:00007fc1bffff188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 2398.656325] RAX: ffffffffffffffda RBX: 00007fc1c2b9cf60 RCX: 00007fc1c2a89b19 [ 2398.657719] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2398.658977] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12267 comm=syz-executor.4 [ 2398.659119] RBP: 00007fc1bffff1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2398.661828] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2398.663208] R13: 00007fff0449096f R14: 00007fc1bffff300 R15: 0000000000022000 [ 2398.664619] 07:01:34 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f00000001c0)=0x8) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x14, 0x0, 0x3e00}, 0x14}}, 0x0) 07:01:34 executing program 5: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) preadv(r0, &(0x7f00000011c0)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x7, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x0, 0x0, 0x87ffffc) (fail_nth: 3) mmap$perf(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000008, 0x1010, r2, 0x4) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000100), 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r3 = syz_open_procfs(0x0, 0x0) perf_event_open(&(0x7f0000001240)={0x1, 0x80, 0x9, 0xa1, 0xf9, 0x3, 0x0, 0x7, 0xa0400, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x3, @perf_config_ext={0x58d}, 0x21, 0x1, 0x0, 0x6, 0x9, 0x0, 0x8000, 0x0, 0x80, 0x0, 0x5}, 0xffffffffffffffff, 0x4, r3, 0x0) r4 = gettid() perf_event_open(0x0, r4, 0x1, r3, 0x8) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/consoles\x00', 0x0, 0x0) [ 2398.665434] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12268 comm=syz-executor.4 07:01:34 executing program 0: openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r0, 0x0, 0x0, 0x87ffffc) mmap$perf(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000008, 0x10, 0xffffffffffffffff, 0x4) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x12, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = syz_open_procfs(0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001240)={0x1, 0x80, 0x0, 0xa1, 0x0, 0x0, 0x0, 0x7, 0xa0400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x3, @perf_config_ext, 0x21, 0x1, 0x0, 0x0, 0x9, 0x0, 0x8000, 0x0, 0x80, 0x0, 0x5}, 0xffffffffffffffff, 0x4, r1, 0x0) r2 = gettid() process_vm_readv(r2, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/4078, 0xfee}, {&(0x7f0000000000)=""/123, 0x7b}, {&(0x7f0000000100)=""/57, 0x39}], 0x3, &(0x7f0000000240)=[{&(0x7f0000012940)=""/102400, 0xffffff76}], 0x1, 0x0) (fail_nth: 7) perf_event_open(0x0, r2, 0x1, r1, 0x8) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/consoles\x00', 0x0, 0x0) [ 2398.708989] FAULT_INJECTION: forcing a failure. [ 2398.708989] name failslab, interval 1, probability 0, space 0, times 0 [ 2398.710415] CPU: 1 PID: 12270 Comm: syz-executor.5 Not tainted 5.18.0-rc1-next-20220406 #1 [ 2398.711284] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2398.712460] Call Trace: [ 2398.712730] [ 2398.712962] dump_stack_lvl+0x8b/0xb3 [ 2398.713378] should_fail.cold+0x5/0xa [ 2398.713784] ? jbd2__journal_start+0x18c/0x8d0 [ 2398.714263] should_failslab+0x5/0x10 [ 2398.714716] kmem_cache_alloc+0x5b/0x480 [ 2398.715181] jbd2__journal_start+0x18c/0x8d0 [ 2398.715674] __ext4_journal_start_sb+0x392/0x470 [ 2398.716200] ext4_alloc_file_blocks.isra.0+0x286/0xb20 [ 2398.716775] ? generic_update_time+0x21d/0x350 [ 2398.717264] ? ext4_ext_correct_indexes+0x440/0x440 [ 2398.717801] ? down_write_killable+0x170/0x170 [ 2398.718296] ext4_fallocate+0x1a2b/0x3c90 [ 2398.718738] ? lock_acquire+0x1b2/0x530 [ 2398.719161] ? lock_release+0x750/0x750 [ 2398.719601] ? ext4_ext_truncate+0x3e0/0x3e0 [ 2398.720065] ? lock_is_held_type+0xd7/0x130 [ 2398.720541] ? ext4_ext_truncate+0x3e0/0x3e0 [ 2398.721010] vfs_fallocate+0x489/0xe00 [ 2398.721429] __x64_sys_fallocate+0xcf/0x140 [ 2398.721893] do_syscall_64+0x3b/0x90 [ 2398.722290] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2398.722861] RIP: 0033:0x7f35817a9b19 [ 2398.723257] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2398.725182] RSP: 002b:00007f357ed1f188 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 2398.725971] RAX: ffffffffffffffda RBX: 00007f35818bcf60 RCX: 00007f35817a9b19 [ 2398.726716] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 2398.727464] RBP: 00007f357ed1f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2398.728207] R10: 00000000087ffffc R11: 0000000000000246 R12: 0000000000000001 [ 2398.728946] R13: 00007ffdd683fcbf R14: 00007f357ed1f300 R15: 0000000000022000 [ 2398.729697] 07:01:34 executing program 7: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000001340)) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x204800, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x1) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002480)='fd/3\x00') r2 = dup(r1) fdatasync(r2) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x40}}, './file0\x00'}) preadv2(r3, &(0x7f0000001300)=[{&(0x7f0000000080)=""/193, 0xc1}, {&(0x7f0000000180)=""/250, 0xfa}, {&(0x7f0000000300)=""/4096, 0x1000}], 0x3, 0x80000000, 0x66, 0x18) r4 = openat(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000001380)=0x100000) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r5, 0x0, 0x0, 0x87ffffc) (fail_nth: 8) sendfile(r5, r4, 0x0, 0x80000000) 07:01:34 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f00000001c0)=0x8) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x14, 0x0, 0x4200}, 0x14}}, 0x0) [ 2398.776007] FAULT_INJECTION: forcing a failure. [ 2398.776007] name failslab, interval 1, probability 0, space 0, times 0 [ 2398.777398] CPU: 1 PID: 12274 Comm: syz-executor.7 Not tainted 5.18.0-rc1-next-20220406 #1 [ 2398.778284] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2398.779491] Call Trace: [ 2398.779768] [ 2398.780004] dump_stack_lvl+0x8b/0xb3 [ 2398.780410] should_fail.cold+0x5/0xa [ 2398.780808] ? __es_tree_search.isra.0+0x1af/0x210 [ 2398.781332] ? create_object.isra.0+0x3a/0xa20 [ 2398.781823] should_failslab+0x5/0x10 [ 2398.782222] kmem_cache_alloc+0x5b/0x480 [ 2398.782676] create_object.isra.0+0x3a/0xa20 [ 2398.783160] ? kasan_unpoison+0x23/0x50 [ 2398.783591] kmem_cache_alloc+0x239/0x480 [ 2398.784035] __es_insert_extent+0x3a9/0x12f0 [ 2398.784512] ? do_raw_write_lock+0x11a/0x280 [ 2398.784986] ? do_raw_read_unlock+0x70/0x70 [ 2398.785467] ext4_es_insert_extent+0x2dc/0xbf0 [ 2398.785948] ? ext4_es_scan_clu+0x2e0/0x2e0 [ 2398.786404] ? lock_downgrade+0x6d0/0x6d0 [ 2398.786861] ? lock_is_held_type+0xd7/0x130 [ 2398.787322] ? __ext4_handle_dirty_metadata+0x720/0x720 [ 2398.787889] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 2398.788483] ext4_ext_map_blocks+0x1a36/0x5cd0 [ 2398.788976] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 2398.789530] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 2398.790095] ? ext4_ext_release+0x10/0x10 [ 2398.790541] ? lock_acquire+0x1b2/0x530 [ 2398.790965] ? lock_release+0x750/0x750 [ 2398.791403] ? lock_is_held_type+0xd7/0x130 [ 2398.791872] ? down_read+0x198/0x440 [ 2398.792268] ? rwsem_down_read_slowpath+0xac0/0xac0 [ 2398.792798] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 2398.793378] ? ext4_es_lookup_extent+0xc4/0xc60 [ 2398.793872] ext4_map_blocks+0x9c8/0x1970 [ 2398.794344] ? lock_is_held_type+0xd7/0x130 [ 2398.794820] ? ext4_issue_zeroout+0x1c0/0x1c0 [ 2398.795295] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 2398.795877] ? jbd2__journal_start+0xf3/0x8d0 [ 2398.796362] ? __ext4_journal_start_sb+0x392/0x470 [ 2398.796871] ? __ext4_journal_start_sb+0x1d5/0x470 [ 2398.797392] ext4_alloc_file_blocks.isra.0+0x2c1/0xb20 [ 2398.797943] ? generic_update_time+0x21d/0x350 [ 2398.798432] ? ext4_ext_correct_indexes+0x440/0x440 [ 2398.798960] ? down_write_killable+0x170/0x170 [ 2398.799453] ext4_fallocate+0x1a2b/0x3c90 [ 2398.799890] ? lock_acquire+0x1b2/0x530 [ 2398.800321] ? lock_release+0x750/0x750 [ 2398.800745] ? ext4_ext_truncate+0x3e0/0x3e0 [ 2398.801212] ? lock_is_held_type+0xd7/0x130 [ 2398.801678] ? ext4_ext_truncate+0x3e0/0x3e0 [ 2398.802137] vfs_fallocate+0x489/0xe00 [ 2398.802562] __x64_sys_fallocate+0xcf/0x140 [ 2398.803068] do_syscall_64+0x3b/0x90 [ 2398.803468] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2398.804015] RIP: 0033:0x7fdba5ddfb19 [ 2398.804403] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2398.806349] RSP: 002b:00007fdba3355188 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 2398.807161] RAX: ffffffffffffffda RBX: 00007fdba5ef2f60 RCX: 00007fdba5ddfb19 [ 2398.807917] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 2398.808653] RBP: 00007fdba33551d0 R08: 0000000000000000 R09: 0000000000000000 [ 2398.809410] R10: 00000000087ffffc R11: 0000000000000246 R12: 0000000000000001 [ 2398.810152] R13: 00007ffe895a664f R14: 00007fdba3355300 R15: 0000000000022000 [ 2398.810915] [ 2398.814855] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12278 comm=syz-executor.4 [ 2398.816751] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12279 comm=syz-executor.4 [ 2398.847370] FAULT_INJECTION: forcing a failure. [ 2398.847370] name failslab, interval 1, probability 0, space 0, times 0 [ 2398.849511] CPU: 0 PID: 12276 Comm: syz-executor.0 Not tainted 5.18.0-rc1-next-20220406 #1 [ 2398.851031] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2398.853090] Call Trace: [ 2398.853569] [ 2398.853974] dump_stack_lvl+0x8b/0xb3 [ 2398.854723] should_fail.cold+0x5/0xa [ 2398.855449] ? create_object.isra.0+0x3a/0xa20 [ 2398.856313] should_failslab+0x5/0x10 [ 2398.857036] kmem_cache_alloc+0x5b/0x480 [ 2398.857824] create_object.isra.0+0x3a/0xa20 [ 2398.858666] ? kasan_unpoison+0x23/0x50 [ 2398.859444] kmem_cache_alloc+0x239/0x480 [ 2398.860244] ptlock_alloc+0x1d/0x70 [ 2398.860926] pte_alloc_one+0x68/0x1f0 [ 2398.861659] __pte_alloc+0x69/0x200 [ 2398.862330] ? pmd_install+0x250/0x250 [ 2398.863069] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 2398.864037] ? lock_chain_count+0x20/0x20 [ 2398.864846] __handle_mm_fault+0x2550/0x35e0 [ 2398.865665] ? lock_is_held_type+0xd7/0x130 [ 2398.866466] ? __pmd_alloc+0x680/0x680 [ 2398.867252] handle_mm_fault+0x2e6/0xa20 [ 2398.867992] __get_user_pages+0x50d/0x1100 [ 2398.868787] ? follow_page_mask+0x1a30/0x1a30 [ 2398.869609] ? lock_release+0x750/0x750 [ 2398.870330] ? lock_is_held_type+0xd7/0x130 [ 2398.871149] ? lock_is_held_type+0xd7/0x130 [ 2398.871948] __get_user_pages_remote+0x18f/0x870 [ 2398.872813] ? down_read+0x170/0x440 [ 2398.873516] pin_user_pages_remote+0x63/0x90 [ 2398.874334] process_vm_rw_core.constprop.0+0x44a/0x9a0 [ 2398.875335] ? find_held_lock+0x2c/0x110 [ 2398.876089] ? vmalloc_dump_obj+0x1a0/0x1a0 [ 2398.876901] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2398.877910] ? _copy_from_user+0xf2/0x170 [ 2398.878671] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 2398.879608] ? iovec_from_user+0x1fd/0x3c0 [ 2398.880382] ? import_iovec+0x83/0xb0 [ 2398.881091] process_vm_rw+0x1b6/0x260 [ 2398.881803] ? process_vm_rw_core.constprop.0+0x9a0/0x9a0 [ 2398.882826] ? ksys_write+0x20c/0x250 [ 2398.883516] ? lock_downgrade+0x6d0/0x6d0 [ 2398.884274] ? find_held_lock+0x2c/0x110 [ 2398.885019] ? __mutex_unlock_slowpath+0x15c/0x5e0 [ 2398.885910] ? bit_wait_io_timeout+0x160/0x160 [ 2398.886743] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2398.887733] ? vfs_write+0x422/0xac0 [ 2398.888406] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 2398.889401] ? fput+0x2a/0x50 [ 2398.889978] __x64_sys_process_vm_readv+0xdf/0x1b0 [ 2398.890885] ? lockdep_hardirqs_on+0x79/0x100 [ 2398.891707] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2398.892645] do_syscall_64+0x3b/0x90 [ 2398.893335] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2398.894270] RIP: 0033:0x7f1173378b19 [ 2398.894952] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2398.898262] RSP: 002b:00007f11708cd188 EFLAGS: 00000246 ORIG_RAX: 0000000000000136 [ 2398.899649] RAX: ffffffffffffffda RBX: 00007f117348c020 RCX: 00007f1173378b19 [ 2398.900922] RDX: 0000000000000003 RSI: 00000000200000c0 RDI: 0000000000000311 [ 2398.902188] RBP: 00007f11708cd1d0 R08: 0000000000000001 R09: 0000000000000000 [ 2398.903464] R10: 0000000020000240 R11: 0000000000000246 R12: 0000000000000001 [ 2398.904730] R13: 00007ffeef59581f R14: 00007f11708cd300 R15: 0000000000022000 [ 2398.906024] 07:01:47 executing program 1: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) preadv(r0, &(0x7f00000011c0)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x7, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x0, 0x0, 0x87ffffc) mmap$perf(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000008, 0x1010, r2, 0x4) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000100), 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r3 = syz_open_procfs(0x0, 0x0) preadv(r3, &(0x7f0000000080)=[{&(0x7f0000000000)=""/40, 0x40}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000001240)={0x1, 0x80, 0x9, 0xa1, 0xf9, 0x3, 0x0, 0x7, 0xa0400, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x3, @perf_config_ext={0x58d}, 0x21, 0x1, 0x0, 0x6, 0x9, 0x0, 0x8000, 0x0, 0x80}, 0xffffffffffffffff, 0x4, r3, 0x0) r4 = gettid() process_vm_readv(r4, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/4078, 0xfee}, {&(0x7f0000000000)=""/123, 0x7b}, {&(0x7f0000000100)=""/57, 0x39}], 0x3, &(0x7f0000000240)=[{&(0x7f0000012940)=""/102400, 0xffffff76}], 0x1, 0x0) perf_event_open(0x0, r4, 0x1, r3, 0x8) 07:01:47 executing program 0: openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r0, 0x0, 0x0, 0x87ffffc) mmap$perf(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000008, 0x10, 0xffffffffffffffff, 0x4) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x12, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = syz_open_procfs(0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001240)={0x1, 0x80, 0x0, 0xa1, 0x0, 0x0, 0x0, 0x7, 0xa0400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x3, @perf_config_ext, 0x21, 0x1, 0x0, 0x0, 0x9, 0x0, 0x8000, 0x0, 0x80, 0x0, 0x5}, 0xffffffffffffffff, 0x4, r1, 0x0) r2 = gettid() process_vm_readv(r2, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/4078, 0xfee}, {&(0x7f0000000000)=""/123, 0x7b}, {&(0x7f0000000100)=""/57, 0x39}], 0x3, &(0x7f0000000240)=[{&(0x7f0000012940)=""/102400, 0xffffff76}], 0x1, 0x0) (fail_nth: 8) perf_event_open(0x0, r2, 0x1, r1, 0x8) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/consoles\x00', 0x0, 0x0) 07:01:47 executing program 3: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000040)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x300000c, 0x13, r0, 0x8000000) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xa) fork() (fail_nth: 8) 07:01:47 executing program 2: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x204800, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x1) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002480)='fd/3\x00') fdatasync(0xffffffffffffffff) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x40}}, './file0\x00'}) preadv2(r2, &(0x7f0000001300)=[{&(0x7f0000000080)=""/193, 0xc1}, {&(0x7f0000000180)=""/250, 0xfa}, {&(0x7f0000000300)=""/4096, 0x1000}], 0x3, 0x80000000, 0x66, 0x18) openat(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r3, 0x0, 0x0, 0x87ffffc) (fail_nth: 6) 07:01:47 executing program 6: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) preadv(r0, &(0x7f00000011c0)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x7, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x0, 0x0, 0x87ffffc) mmap$perf(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000008, 0x1010, r2, 0x4) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000100), 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r3 = syz_open_procfs(0x0, 0x0) perf_event_open(&(0x7f0000001240)={0x1, 0x80, 0x9, 0xa1, 0xf9, 0x3, 0x0, 0x7, 0xa0400, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x3, @perf_config_ext={0x58d}, 0x21, 0x1, 0x0, 0x6, 0x9, 0x0, 0x8000, 0x0, 0x80, 0x0, 0x5}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x0) r4 = gettid() process_vm_readv(r4, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/4078, 0xfee}, {&(0x7f0000000000)=""/123, 0x7b}, {&(0x7f0000000100)=""/57, 0x39}], 0x3, &(0x7f0000000240)=[{&(0x7f0000012940)=""/102400, 0xffffff76}], 0x1, 0x0) perf_event_open(0x0, r4, 0x1, r3, 0x8) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/consoles\x00', 0x0, 0x0) 07:01:47 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f00000001c0)=0x8) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x14, 0x0, 0x4300}, 0x14}}, 0x0) [ 2412.022685] FAULT_INJECTION: forcing a failure. [ 2412.022685] name failslab, interval 1, probability 0, space 0, times 0 [ 2412.025496] CPU: 0 PID: 12292 Comm: syz-executor.3 Not tainted 5.18.0-rc1-next-20220406 #1 [ 2412.027521] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2412.029916] Call Trace: [ 2412.030435] [ 2412.030902] dump_stack_lvl+0x8b/0xb3 [ 2412.031692] should_fail.cold+0x5/0xa [ 2412.032485] ? dup_fd+0x89/0xca0 [ 2412.033195] should_failslab+0x5/0x10 [ 2412.033985] kmem_cache_alloc+0x5b/0x480 [ 2412.034834] dup_fd+0x89/0xca0 [ 2412.035530] ? audit_filter_inodes+0x40/0x40 [ 2412.036443] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2412.037568] ? security_task_alloc+0xe6/0x260 [ 2412.038497] copy_process+0x2039/0x6db0 [ 2412.038609] FAULT_INJECTION: forcing a failure. [ 2412.038609] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2412.039364] ? __cleanup_sighand+0xb0/0xb0 [ 2412.041490] ? lock_release+0x3b2/0x750 [ 2412.042306] ? ksys_write+0x20c/0x250 [ 2412.043095] ? kernel_clone+0x2f8/0xa60 [ 2412.043929] kernel_clone+0xe7/0xa60 [ 2412.044692] ? find_held_lock+0x2c/0x110 [ 2412.045518] ? create_io_thread+0xf0/0xf0 [ 2412.046375] ? __mutex_unlock_slowpath+0x15c/0x5e0 [ 2412.047401] ? bit_wait_io_timeout+0x160/0x160 [ 2412.048329] ? lock_is_held_type+0xd7/0x130 [ 2412.049223] __do_sys_fork+0x8a/0xc0 [ 2412.049990] ? kernel_clone+0xa60/0xa60 [ 2412.050803] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 2412.051947] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2412.053005] ? lockdep_hardirqs_on+0x79/0x100 [ 2412.053928] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2412.054995] do_syscall_64+0x3b/0x90 [ 2412.055760] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2412.056819] RIP: 0033:0x7fc1c2a89b19 [ 2412.057573] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2412.061311] RSP: 002b:00007fc1bffff188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 2412.062862] RAX: ffffffffffffffda RBX: 00007fc1c2b9cf60 RCX: 00007fc1c2a89b19 [ 2412.064323] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2412.065779] RBP: 00007fc1bffff1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2412.067256] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2412.068718] R13: 00007fff0449096f R14: 00007fc1bffff300 R15: 0000000000022000 [ 2412.070184] [ 2412.070654] CPU: 1 PID: 12291 Comm: syz-executor.0 Not tainted 5.18.0-rc1-next-20220406 #1 [ 2412.071594] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2412.072815] Call Trace: [ 2412.073089] [ 2412.073333] dump_stack_lvl+0x8b/0xb3 [ 2412.073764] should_fail.cold+0x5/0xa [ 2412.074184] prepare_alloc_pages+0x17b/0x500 [ 2412.074692] __alloc_pages+0x131/0x4e0 [ 2412.075141] ? __alloc_pages_slowpath.constprop.0+0x1f10/0x1f10 [ 2412.075808] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 2412.076411] ? __lock_acquire+0x164e/0x6120 [ 2412.076894] alloc_pages+0x1a0/0x2f0 [ 2412.077315] pte_alloc_one+0x16/0x1f0 [ 2412.077756] __pte_alloc+0x69/0x200 [ 2412.078172] ? pmd_install+0x250/0x250 [ 2412.078609] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 2412.079211] ? lock_chain_count+0x20/0x20 [ 2412.079683] __handle_mm_fault+0x2550/0x35e0 [ 2412.080178] ? lock_is_held_type+0xd7/0x130 [ 2412.080669] ? __pmd_alloc+0x680/0x680 [ 2412.081132] handle_mm_fault+0x2e6/0xa20 [ 2412.081595] __get_user_pages+0x50d/0x1100 [ 2412.082075] ? follow_page_mask+0x1a30/0x1a30 [ 2412.082567] ? lock_release+0x750/0x750 [ 2412.083031] ? lock_is_held_type+0xd7/0x130 [ 2412.083527] ? lock_is_held_type+0xd7/0x130 [ 2412.084021] __get_user_pages_remote+0x18f/0x870 [ 2412.084552] ? down_read+0x170/0x440 [ 2412.084933] FAULT_INJECTION: forcing a failure. [ 2412.084933] name failslab, interval 1, probability 0, space 0, times 0 [ 2412.086183] pin_user_pages_remote+0x63/0x90 [ 2412.086204] process_vm_rw_core.constprop.0+0x44a/0x9a0 [ 2412.086229] ? find_held_lock+0x2c/0x110 [ 2412.086252] ? vmalloc_dump_obj+0x1a0/0x1a0 [ 2412.086282] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2412.086303] ? _copy_from_user+0xf2/0x170 [ 2412.086327] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 2412.086345] ? iovec_from_user+0x1fd/0x3c0 [ 2412.086361] ? import_iovec+0x83/0xb0 [ 2412.086381] process_vm_rw+0x1b6/0x260 [ 2412.086400] ? process_vm_rw_core.constprop.0+0x9a0/0x9a0 [ 2412.086419] ? ksys_write+0x20c/0x250 [ 2412.086435] ? lock_downgrade+0x6d0/0x6d0 [ 2412.086457] ? find_held_lock+0x2c/0x110 [ 2412.093608] ? __mutex_unlock_slowpath+0x15c/0x5e0 [ 2412.094161] ? bit_wait_io_timeout+0x160/0x160 [ 2412.094679] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2412.095308] ? vfs_write+0x422/0xac0 [ 2412.095727] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 2412.096339] ? fput+0x2a/0x50 [ 2412.096659] __x64_sys_process_vm_readv+0xdf/0x1b0 [ 2412.097213] ? lockdep_hardirqs_on+0x79/0x100 [ 2412.097662] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2412.098244] do_syscall_64+0x3b/0x90 [ 2412.098664] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2412.099259] RIP: 0033:0x7f1173378b19 [ 2412.099632] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2412.101710] RSP: 002b:00007f11708ee188 EFLAGS: 00000246 ORIG_RAX: 0000000000000136 [ 2412.102546] RAX: ffffffffffffffda RBX: 00007f117348bf60 RCX: 00007f1173378b19 [ 2412.103362] RDX: 0000000000000003 RSI: 00000000200000c0 RDI: 0000000000000313 [ 2412.104159] RBP: 00007f11708ee1d0 R08: 0000000000000001 R09: 0000000000000000 [ 2412.104946] R10: 0000000020000240 R11: 0000000000000246 R12: 0000000000000001 [ 2412.105749] R13: 00007ffeef59581f R14: 00007f11708ee300 R15: 0000000000022000 [ 2412.106560] [ 2412.106816] CPU: 0 PID: 12300 Comm: syz-executor.7 Not tainted 5.18.0-rc1-next-20220406 #1 [ 2412.108529] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2412.110823] Call Trace: [ 2412.111363] [ 2412.111820] dump_stack_lvl+0x8b/0xb3 [ 2412.112611] should_fail.cold+0x5/0xa [ 2412.113406] ? ext4_mb_new_blocks+0x64b/0x4b60 [ 2412.114348] should_failslab+0x5/0x10 [ 2412.115139] kmem_cache_alloc+0x5b/0x480 [ 2412.115989] ext4_mb_new_blocks+0x64b/0x4b60 [ 2412.116904] ? lock_is_held_type+0xd7/0x130 [ 2412.117806] ? rcu_read_lock_sched_held+0x3a/0x70 [ 2412.118795] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2412.119936] ? ext4_cache_extents+0x68/0x2d0 [ 2412.120832] ? ext4_discard_preallocations+0xe60/0xe60 [ 2412.121901] ? __sanitizer_cov_trace_const_cmp2+0x22/0x80 [ 2412.123030] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2412.124151] ? __sanitizer_cov_trace_const_cmp2+0x22/0x80 [ 2412.125278] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2412.126405] ? ext4_inode_to_goal_block+0x320/0x430 [ 2412.127455] ext4_ext_map_blocks+0x1fb0/0x5cd0 [ 2412.128407] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 2412.129483] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 2412.130580] ? ext4_ext_release+0x10/0x10 [ 2412.131465] ? lock_release+0x750/0x750 [ 2412.132296] ? lock_is_held_type+0xd7/0x130 [ 2412.133217] ? down_write_killable+0x170/0x170 07:01:47 executing program 5: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) preadv(r0, &(0x7f00000011c0)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x7, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x0, 0x0, 0x87ffffc) (fail_nth: 4) mmap$perf(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000008, 0x1010, r2, 0x4) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000100), 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r3 = syz_open_procfs(0x0, 0x0) perf_event_open(&(0x7f0000001240)={0x1, 0x80, 0x9, 0xa1, 0xf9, 0x3, 0x0, 0x7, 0xa0400, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x3, @perf_config_ext={0x58d}, 0x21, 0x1, 0x0, 0x6, 0x9, 0x0, 0x8000, 0x0, 0x80, 0x0, 0x5}, 0xffffffffffffffff, 0x4, r3, 0x0) r4 = gettid() perf_event_open(0x0, r4, 0x1, r3, 0x8) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/consoles\x00', 0x0, 0x0) 07:01:47 executing program 7: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000001340)) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x204800, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x1) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002480)='fd/3\x00') r2 = dup(r1) fdatasync(r2) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x40}}, './file0\x00'}) preadv2(r3, &(0x7f0000001300)=[{&(0x7f0000000080)=""/193, 0xc1}, {&(0x7f0000000180)=""/250, 0xfa}, {&(0x7f0000000300)=""/4096, 0x1000}], 0x3, 0x80000000, 0x66, 0x18) r4 = openat(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000001380)=0x100000) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r5, 0x0, 0x0, 0x87ffffc) (fail_nth: 9) sendfile(r5, r4, 0x0, 0x80000000) [ 2412.134161] ext4_map_blocks+0x652/0x1970 [ 2412.135210] ? lock_is_held_type+0xd7/0x130 [ 2412.136107] ? ext4_issue_zeroout+0x1c0/0x1c0 [ 2412.137033] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 2412.138155] ? jbd2__journal_start+0xf3/0x8d0 [ 2412.139102] ? __ext4_journal_start_sb+0x392/0x470 [ 2412.140094] ? __ext4_journal_start_sb+0x1d5/0x470 [ 2412.141099] ext4_alloc_file_blocks.isra.0+0x2c1/0xb20 [ 2412.142163] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2412.143308] ? ext4_ext_correct_indexes+0x440/0x440 [ 2412.144342] ? down_write_killable+0x170/0x170 [ 2412.145291] ext4_fallocate+0x1a2b/0x3c90 [ 2412.146142] ? lock_acquire+0x1b2/0x530 [ 2412.146965] ? lock_release+0x750/0x750 [ 2412.147790] ? ext4_ext_truncate+0x3e0/0x3e0 [ 2412.148695] ? lock_is_held_type+0xd7/0x130 [ 2412.149597] ? ext4_ext_truncate+0x3e0/0x3e0 [ 2412.150495] vfs_fallocate+0x489/0xe00 [ 2412.151331] __x64_sys_fallocate+0xcf/0x140 [ 2412.152221] do_syscall_64+0x3b/0x90 [ 2412.152992] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2412.154047] RIP: 0033:0x7fdba5ddfb19 [ 2412.154800] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2412.158556] RSP: 002b:00007fdba3355188 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 2412.160105] RAX: ffffffffffffffda RBX: 00007fdba5ef2f60 RCX: 00007fdba5ddfb19 [ 2412.161555] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 2412.163008] RBP: 00007fdba33551d0 R08: 0000000000000000 R09: 0000000000000000 [ 2412.163952] FAULT_INJECTION: forcing a failure. [ 2412.163952] name failslab, interval 1, probability 0, space 0, times 0 [ 2412.164455] R10: 00000000087ffffc R11: 0000000000000246 R12: 0000000000000001 [ 2412.164472] R13: 00007ffe895a664f R14: 00007fdba3355300 R15: 0000000000022000 [ 2412.168588] [ 2412.169057] CPU: 1 PID: 12304 Comm: syz-executor.5 Not tainted 5.18.0-rc1-next-20220406 #1 07:01:47 executing program 3: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000040)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x300000c, 0x13, r0, 0x8000000) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xa) fork() (fail_nth: 9) [ 2412.170112] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2412.171467] Call Trace: [ 2412.171757] [ 2412.172008] dump_stack_lvl+0x8b/0xb3 [ 2412.172450] should_fail.cold+0x5/0xa [ 2412.172871] ? create_object.isra.0+0x3a/0xa20 [ 2412.173394] should_failslab+0x5/0x10 [ 2412.173832] kmem_cache_alloc+0x5b/0x480 [ 2412.174293] create_object.isra.0+0x3a/0xa20 [ 2412.174781] ? kasan_unpoison+0x23/0x50 [ 2412.175248] kmem_cache_alloc+0x239/0x480 [ 2412.175594] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12296 comm=syz-executor.4 [ 2412.175716] jbd2__journal_start+0x18c/0x8d0 [ 2412.178567] __ext4_journal_start_sb+0x392/0x470 [ 2412.179112] ext4_alloc_file_blocks.isra.0+0x286/0xb20 [ 2412.179669] ? generic_update_time+0x21d/0x350 [ 2412.180167] ? ext4_ext_correct_indexes+0x440/0x440 [ 2412.180700] ? down_write_killable+0x170/0x170 [ 2412.181195] ext4_fallocate+0x1a2b/0x3c90 [ 2412.181632] ? lock_acquire+0x1b2/0x530 [ 2412.182058] ? lock_release+0x750/0x750 [ 2412.182491] ? ext4_ext_truncate+0x3e0/0x3e0 [ 2412.182985] ? lock_is_held_type+0xd7/0x130 [ 2412.183443] ? ext4_ext_truncate+0x3e0/0x3e0 [ 2412.183913] vfs_fallocate+0x489/0xe00 [ 2412.184332] __x64_sys_fallocate+0xcf/0x140 [ 2412.184795] do_syscall_64+0x3b/0x90 [ 2412.185186] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2412.185733] RIP: 0033:0x7f35817a9b19 [ 2412.186122] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2412.188095] RSP: 002b:00007f357ecfe188 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 2412.188846] RAX: ffffffffffffffda RBX: 00007f35818bd020 RCX: 00007f35817a9b19 [ 2412.189545] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 2412.190237] RBP: 00007f357ecfe1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2412.190936] R10: 00000000087ffffc R11: 0000000000000246 R12: 0000000000000001 [ 2412.191649] R13: 00007ffdd683fcbf R14: 00007f357ecfe300 R15: 0000000000022000 [ 2412.192387] [ 2412.196377] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12307 comm=syz-executor.4 07:01:47 executing program 0: openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r0, 0x0, 0x0, 0x87ffffc) mmap$perf(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000008, 0x10, 0xffffffffffffffff, 0x4) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x12, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = syz_open_procfs(0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001240)={0x1, 0x80, 0x0, 0xa1, 0x0, 0x0, 0x0, 0x7, 0xa0400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x3, @perf_config_ext, 0x21, 0x1, 0x0, 0x0, 0x9, 0x0, 0x8000, 0x0, 0x80, 0x0, 0x5}, 0xffffffffffffffff, 0x4, r1, 0x0) r2 = gettid() process_vm_readv(r2, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/4078, 0xfee}, {&(0x7f0000000000)=""/123, 0x7b}, {&(0x7f0000000100)=""/57, 0x39}], 0x3, &(0x7f0000000240)=[{&(0x7f0000012940)=""/102400, 0xffffff76}], 0x1, 0x0) (fail_nth: 9) perf_event_open(0x0, r2, 0x1, r1, 0x8) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/consoles\x00', 0x0, 0x0) [ 2412.228208] FAULT_INJECTION: forcing a failure. [ 2412.228208] name failslab, interval 1, probability 0, space 0, times 0 [ 2412.230770] CPU: 0 PID: 12306 Comm: syz-executor.2 Not tainted 5.18.0-rc1-next-20220406 #1 [ 2412.232479] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2412.234754] Call Trace: [ 2412.235286] [ 2412.235737] FAULT_INJECTION: forcing a failure. [ 2412.235737] name failslab, interval 1, probability 0, space 0, times 0 [ 2412.235738] dump_stack_lvl+0x8b/0xb3 [ 2412.237638] should_fail.cold+0x5/0xa [ 2412.238419] ? create_object.isra.0+0x3a/0xa20 [ 2412.239378] should_failslab+0x5/0x10 [ 2412.240160] kmem_cache_alloc+0x5b/0x480 [ 2412.241006] create_object.isra.0+0x3a/0xa20 [ 2412.241902] ? kasan_unpoison+0x23/0x50 [ 2412.242720] __kmalloc+0x25b/0x440 [ 2412.243470] ext4_find_extent+0xa39/0xd20 [ 2412.244333] ext4_ext_map_blocks+0x1c8/0x5cd0 [ 2412.245260] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 2412.246335] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 2412.247430] ? ext4_ext_release+0x10/0x10 [ 2412.248296] ? lock_acquire+0x1b2/0x530 [ 2412.249112] ? lock_release+0x750/0x750 [ 2412.249935] ? lock_is_held_type+0xd7/0x130 [ 2412.250839] ? down_read+0x198/0x440 [ 2412.251615] ? rwsem_down_read_slowpath+0xac0/0xac0 [ 2412.252630] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 2412.253753] ? ext4_es_lookup_extent+0xc4/0xc60 [ 2412.254715] ext4_map_blocks+0x9c8/0x1970 [ 2412.255583] ? lock_is_held_type+0xd7/0x130 [ 2412.256472] ? ext4_issue_zeroout+0x1c0/0x1c0 [ 2412.257394] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 2412.258517] ? jbd2__journal_start+0xf3/0x8d0 [ 2412.259446] ? __ext4_journal_start_sb+0x392/0x470 [ 2412.260438] ? __ext4_journal_start_sb+0x1d5/0x470 [ 2412.261438] ext4_alloc_file_blocks.isra.0+0x2c1/0xb20 [ 2412.262503] ? generic_update_time+0x21d/0x350 [ 2412.263468] ? ext4_ext_correct_indexes+0x440/0x440 [ 2412.264487] ? down_write_killable+0x170/0x170 [ 2412.265433] ext4_fallocate+0x1a2b/0x3c90 [ 2412.266276] ? lock_acquire+0x1b2/0x530 [ 2412.267102] ? lock_release+0x750/0x750 [ 2412.267923] ? ext4_ext_truncate+0x3e0/0x3e0 [ 2412.268821] ? lock_is_held_type+0xd7/0x130 [ 2412.269709] ? ext4_ext_truncate+0x3e0/0x3e0 [ 2412.270602] vfs_fallocate+0x489/0xe00 [ 2412.271432] __x64_sys_fallocate+0xcf/0x140 [ 2412.272323] do_syscall_64+0x3b/0x90 [ 2412.273085] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2412.274138] RIP: 0033:0x7fd845bccb19 [ 2412.274888] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2412.278629] RSP: 002b:00007fd843142188 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 2412.280196] RAX: ffffffffffffffda RBX: 00007fd845cdff60 RCX: 00007fd845bccb19 [ 2412.281643] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 2412.283101] RBP: 00007fd8431421d0 R08: 0000000000000000 R09: 0000000000000000 [ 2412.284544] R10: 00000000087ffffc R11: 0000000000000246 R12: 0000000000000001 [ 2412.285986] R13: 00007ffde12fa01f R14: 00007fd843142300 R15: 0000000000022000 [ 2412.287468] [ 2412.287939] CPU: 1 PID: 12309 Comm: syz-executor.3 Not tainted 5.18.0-rc1-next-20220406 #1 [ 2412.288874] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2412.290139] Call Trace: [ 2412.290422] [ 2412.290669] dump_stack_lvl+0x8b/0xb3 [ 2412.291104] should_fail.cold+0x5/0xa [ 2412.291523] ? create_object.isra.0+0x3a/0xa20 [ 2412.292028] should_failslab+0x5/0x10 [ 2412.292467] kmem_cache_alloc+0x5b/0x480 [ 2412.292932] create_object.isra.0+0x3a/0xa20 [ 2412.293425] ? kasan_unpoison+0x23/0x50 [ 2412.293864] kmem_cache_alloc+0x239/0x480 [ 2412.294329] dup_fd+0x89/0xca0 [ 2412.294692] ? audit_filter_inodes+0x40/0x40 [ 2412.295194] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2412.295811] ? security_task_alloc+0xe6/0x260 [ 2412.296315] copy_process+0x2039/0x6db0 [ 2412.296774] ? __cleanup_sighand+0xb0/0xb0 [ 2412.297250] ? lock_release+0x3b2/0x750 [ 2412.297697] ? ksys_write+0x20c/0x250 [ 2412.298119] ? kernel_clone+0x2f8/0xa60 [ 2412.298566] kernel_clone+0xe7/0xa60 [ 2412.298992] ? find_held_lock+0x2c/0x110 [ 2412.299452] ? create_io_thread+0xf0/0xf0 [ 2412.299926] ? __mutex_unlock_slowpath+0x15c/0x5e0 [ 2412.300410] ? bit_wait_io_timeout+0x160/0x160 [ 2412.300919] ? lock_is_held_type+0xd7/0x130 [ 2412.301407] __do_sys_fork+0x8a/0xc0 [ 2412.301830] ? kernel_clone+0xa60/0xa60 [ 2412.302287] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 2412.302913] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2412.303502] ? lockdep_hardirqs_on+0x79/0x100 [ 2412.304000] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2412.304562] do_syscall_64+0x3b/0x90 [ 2412.304975] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2412.305535] RIP: 0033:0x7fc1c2a89b19 [ 2412.305897] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2412.307912] RSP: 002b:00007fc1bffff188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 2412.308745] RAX: ffffffffffffffda RBX: 00007fc1c2b9cf60 RCX: 00007fc1c2a89b19 [ 2412.309527] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2412.310304] RBP: 00007fc1bffff1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2412.311043] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2412.311815] R13: 00007fff0449096f R14: 00007fc1bffff300 R15: 0000000000022000 [ 2412.312600] [ 2412.345460] FAULT_INJECTION: forcing a failure. [ 2412.345460] name failslab, interval 1, probability 0, space 0, times 0 [ 2412.346748] CPU: 1 PID: 12311 Comm: syz-executor.0 Not tainted 5.18.0-rc1-next-20220406 #1 [ 2412.347653] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2412.348829] Call Trace: [ 2412.349094] [ 2412.349334] dump_stack_lvl+0x8b/0xb3 [ 2412.349741] should_fail.cold+0x5/0xa [ 2412.350138] ? ptlock_alloc+0x1d/0x70 [ 2412.350551] should_failslab+0x5/0x10 [ 2412.350969] kmem_cache_alloc+0x5b/0x480 [ 2412.351415] ptlock_alloc+0x1d/0x70 [ 2412.351819] pte_alloc_one+0x68/0x1f0 [ 2412.352243] __pte_alloc+0x69/0x200 [ 2412.352650] ? pmd_install+0x250/0x250 [ 2412.353073] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 2412.353631] ? lock_chain_count+0x20/0x20 [ 2412.354077] __handle_mm_fault+0x2550/0x35e0 [ 2412.354546] ? lock_is_held_type+0xd7/0x130 [ 2412.355026] ? __pmd_alloc+0x680/0x680 [ 2412.355454] handle_mm_fault+0x2e6/0xa20 [ 2412.355891] __get_user_pages+0x50d/0x1100 [ 2412.356363] ? follow_page_mask+0x1a30/0x1a30 [ 2412.356938] ? lock_release+0x750/0x750 [ 2412.357365] ? lock_is_held_type+0xd7/0x130 [ 2412.357928] ? lock_is_held_type+0xd7/0x130 [ 2412.358405] __get_user_pages_remote+0x18f/0x870 [ 2412.359027] ? down_read+0x170/0x440 [ 2412.359515] pin_user_pages_remote+0x63/0x90 [ 2412.360087] process_vm_rw_core.constprop.0+0x44a/0x9a0 [ 2412.360793] ? find_held_lock+0x2c/0x110 [ 2412.361326] ? vmalloc_dump_obj+0x1a0/0x1a0 [ 2412.361901] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2412.362616] ? _copy_from_user+0xf2/0x170 [ 2412.363177] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 2412.363814] ? iovec_from_user+0x1fd/0x3c0 [ 2412.364357] ? import_iovec+0x83/0xb0 [ 2412.364843] process_vm_rw+0x1b6/0x260 [ 2412.365302] ? process_vm_rw_core.constprop.0+0x9a0/0x9a0 [ 2412.365999] ? ksys_write+0x20c/0x250 [ 2412.366489] ? lock_downgrade+0x6d0/0x6d0 [ 2412.367038] ? find_held_lock+0x2c/0x110 [ 2412.367561] ? __mutex_unlock_slowpath+0x15c/0x5e0 [ 2412.368190] ? bit_wait_io_timeout+0x160/0x160 [ 2412.368778] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2412.369476] ? vfs_write+0x422/0xac0 [ 2412.369949] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 2412.370652] ? fput+0x2a/0x50 [ 2412.371077] __x64_sys_process_vm_readv+0xdf/0x1b0 [ 2412.371703] ? lockdep_hardirqs_on+0x79/0x100 [ 2412.372274] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2412.372934] do_syscall_64+0x3b/0x90 [ 2412.373411] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2412.374067] RIP: 0033:0x7f1173378b19 [ 2412.374536] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2412.376779] RSP: 002b:00007f11708ee188 EFLAGS: 00000246 ORIG_RAX: 0000000000000136 [ 2412.377646] RAX: ffffffffffffffda RBX: 00007f117348bf60 RCX: 00007f1173378b19 [ 2412.378431] RDX: 0000000000000003 RSI: 00000000200000c0 RDI: 0000000000000316 [ 2412.379230] RBP: 00007f11708ee1d0 R08: 0000000000000001 R09: 0000000000000000 [ 2412.380045] R10: 0000000020000240 R11: 0000000000000246 R12: 0000000000000001 [ 2412.380866] R13: 00007ffeef59581f R14: 00007f11708ee300 R15: 0000000000022000 [ 2412.381691] 07:01:48 executing program 1: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) preadv(r0, &(0x7f00000011c0)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x7, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x0, 0x0, 0x87ffffc) mmap$perf(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000008, 0x1010, r2, 0x4) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000100), 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r3 = syz_open_procfs(0x0, 0x0) preadv(r3, &(0x7f0000000080)=[{&(0x7f0000000000)=""/40, 0x40}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000001240)={0x1, 0x80, 0x9, 0xa1, 0xf9, 0x3, 0x0, 0x7, 0xa0400, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x3, @perf_config_ext={0x58d}, 0x21, 0x1, 0x0, 0x6, 0x9, 0x0, 0x8000, 0x0, 0x80}, 0xffffffffffffffff, 0x4, r3, 0x0) r4 = gettid() process_vm_readv(r4, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/4078, 0xfee}, {&(0x7f0000000000)=""/123, 0x7b}, {&(0x7f0000000100)=""/57, 0x39}], 0x3, &(0x7f0000000240)=[{&(0x7f0000012940)=""/102400, 0xffffff76}], 0x1, 0x0) perf_event_open(0x0, r4, 0x1, r3, 0x8) 07:01:48 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f00000001c0)=0x8) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x14, 0x0, 0x4800}, 0x14}}, 0x0) [ 2412.405973] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12314 comm=syz-executor.4 [ 2412.409023] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12315 comm=syz-executor.4 07:01:48 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f00000001c0)=0x8) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x14, 0x0, 0x4900}, 0x14}}, 0x0) [ 2412.453524] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12321 comm=syz-executor.4 [ 2412.458735] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12322 comm=syz-executor.4 07:01:48 executing program 5: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) preadv(r0, &(0x7f00000011c0)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x7, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x0, 0x0, 0x87ffffc) (fail_nth: 5) mmap$perf(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000008, 0x1010, r2, 0x4) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000100), 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r3 = syz_open_procfs(0x0, 0x0) perf_event_open(&(0x7f0000001240)={0x1, 0x80, 0x9, 0xa1, 0xf9, 0x3, 0x0, 0x7, 0xa0400, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x3, @perf_config_ext={0x58d}, 0x21, 0x1, 0x0, 0x6, 0x9, 0x0, 0x8000, 0x0, 0x80, 0x0, 0x5}, 0xffffffffffffffff, 0x4, r3, 0x0) r4 = gettid() perf_event_open(0x0, r4, 0x1, r3, 0x8) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/consoles\x00', 0x0, 0x0) 07:01:48 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f00000001c0)=0x8) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x14, 0x0, 0x4a00}, 0x14}}, 0x0) 07:01:48 executing program 0: openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r0, 0x0, 0x0, 0x87ffffc) mmap$perf(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000008, 0x10, 0xffffffffffffffff, 0x4) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x12, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = syz_open_procfs(0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001240)={0x1, 0x80, 0x0, 0xa1, 0x0, 0x0, 0x0, 0x7, 0xa0400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x3, @perf_config_ext, 0x21, 0x1, 0x0, 0x0, 0x9, 0x0, 0x8000, 0x0, 0x80, 0x0, 0x5}, 0xffffffffffffffff, 0x4, r1, 0x0) r2 = gettid() process_vm_readv(r2, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/4078, 0xfee}, {&(0x7f0000000000)=""/123, 0x7b}, {&(0x7f0000000100)=""/57, 0x39}], 0x3, &(0x7f0000000240)=[{&(0x7f0000012940)=""/102400, 0xffffff76}], 0x1, 0x0) (fail_nth: 10) perf_event_open(0x0, r2, 0x1, r1, 0x8) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/consoles\x00', 0x0, 0x0) 07:01:48 executing program 6: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) preadv(r0, &(0x7f00000011c0)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x7, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x0, 0x0, 0x87ffffc) mmap$perf(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000008, 0x1010, r2, 0x4) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000100), 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r3 = syz_open_procfs(0x0, 0x0) perf_event_open(&(0x7f0000001240)={0x1, 0x80, 0x9, 0xa1, 0xf9, 0x3, 0x0, 0x7, 0xa0400, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x3, @perf_config_ext={0x58d}, 0x21, 0x1, 0x0, 0x6, 0x9, 0x0, 0x8000, 0x0, 0x80, 0x0, 0x5}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x0) r4 = gettid() process_vm_readv(r4, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/4078, 0xfee}, {&(0x7f0000000000)=""/123, 0x7b}, {&(0x7f0000000100)=""/57, 0x39}], 0x3, &(0x7f0000000240)=[{&(0x7f0000012940)=""/102400, 0xffffff76}], 0x1, 0x0) perf_event_open(0x0, r4, 0x1, r3, 0x8) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/consoles\x00', 0x0, 0x0) [ 2412.551804] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12326 comm=syz-executor.4 [ 2412.583160] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12331 comm=syz-executor.4 [ 2412.620270] FAULT_INJECTION: forcing a failure. [ 2412.620270] name failslab, interval 1, probability 0, space 0, times 0 [ 2412.621523] FAULT_INJECTION: forcing a failure. [ 2412.621523] name failslab, interval 1, probability 0, space 0, times 0 [ 2412.622883] CPU: 0 PID: 12332 Comm: syz-executor.5 Not tainted 5.18.0-rc1-next-20220406 #1 [ 2412.625838] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2412.628119] Call Trace: [ 2412.628635] [ 2412.629085] dump_stack_lvl+0x8b/0xb3 [ 2412.629867] should_fail.cold+0x5/0xa [ 2412.630644] ? ext4_find_extent+0xa39/0xd20 [ 2412.631523] should_failslab+0x5/0x10 [ 2412.632301] __kmalloc+0x72/0x440 [ 2412.633019] ext4_find_extent+0xa39/0xd20 [ 2412.633875] ext4_ext_map_blocks+0x1c8/0x5cd0 [ 2412.634796] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 2412.635881] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 2412.636955] ? ext4_ext_release+0x10/0x10 [ 2412.637794] ? lock_acquire+0x1b2/0x530 [ 2412.638606] ? lock_release+0x750/0x750 [ 2412.639434] ? lock_is_held_type+0xd7/0x130 [ 2412.640329] ? down_read+0x198/0x440 [ 2412.641084] ? rwsem_down_read_slowpath+0xac0/0xac0 [ 2412.642089] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 2412.643212] ? ext4_es_lookup_extent+0xc4/0xc60 [ 2412.644169] ext4_map_blocks+0x9c8/0x1970 [ 2412.645024] ? lock_is_held_type+0xd7/0x130 [ 2412.645907] ? ext4_issue_zeroout+0x1c0/0x1c0 [ 2412.646828] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 2412.647967] ? jbd2__journal_start+0xf3/0x8d0 [ 2412.648879] ? __ext4_journal_start_sb+0x392/0x470 [ 2412.649860] ? __ext4_journal_start_sb+0x1d5/0x470 [ 2412.650852] ext4_alloc_file_blocks.isra.0+0x2c1/0xb20 [ 2412.651923] ? generic_update_time+0x21d/0x350 [ 2412.652862] ? ext4_ext_correct_indexes+0x440/0x440 [ 2412.653872] ? down_write_killable+0x170/0x170 [ 2412.654812] ext4_fallocate+0x1a2b/0x3c90 [ 2412.655657] ? lock_acquire+0x1b2/0x530 [ 2412.656471] ? lock_release+0x750/0x750 [ 2412.657284] ? ext4_ext_truncate+0x3e0/0x3e0 [ 2412.658174] ? lock_is_held_type+0xd7/0x130 [ 2412.659073] ? ext4_ext_truncate+0x3e0/0x3e0 [ 2412.659962] vfs_fallocate+0x489/0xe00 [ 2412.660765] __x64_sys_fallocate+0xcf/0x140 [ 2412.661645] do_syscall_64+0x3b/0x90 [ 2412.662401] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2412.663451] RIP: 0033:0x7f35817a9b19 [ 2412.664202] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2412.667890] RSP: 002b:00007f357ed1f188 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 2412.669408] RAX: ffffffffffffffda RBX: 00007f35818bcf60 RCX: 00007f35817a9b19 [ 2412.670831] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 2412.672260] RBP: 00007f357ed1f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2412.673686] R10: 00000000087ffffc R11: 0000000000000246 R12: 0000000000000001 [ 2412.675117] R13: 00007ffdd683fcbf R14: 00007f357ed1f300 R15: 0000000000022000 [ 2412.676573] [ 2412.677037] CPU: 1 PID: 12327 Comm: syz-executor.0 Not tainted 5.18.0-rc1-next-20220406 #1 [ 2412.678120] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2412.679570] Call Trace: [ 2412.679899] [ 2412.680187] dump_stack_lvl+0x8b/0xb3 [ 2412.680693] should_fail.cold+0x5/0xa [ 2412.681186] ? create_object.isra.0+0x3a/0xa20 [ 2412.681788] should_failslab+0x5/0x10 [ 2412.682282] kmem_cache_alloc+0x5b/0x480 [ 2412.682816] create_object.isra.0+0x3a/0xa20 [ 2412.683328] ? kasan_unpoison+0x23/0x50 [ 2412.683790] kmem_cache_alloc+0x239/0x480 [ 2412.684265] ptlock_alloc+0x1d/0x70 [ 2412.684680] pte_alloc_one+0x68/0x1f0 [ 2412.685109] __pte_alloc+0x69/0x200 [ 2412.685524] ? pmd_install+0x250/0x250 [ 2412.685956] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 2412.686554] ? lock_chain_count+0x20/0x20 [ 2412.687002] __handle_mm_fault+0x2550/0x35e0 [ 2412.687515] ? lock_is_held_type+0xd7/0x130 [ 2412.688000] ? __pmd_alloc+0x680/0x680 [ 2412.688460] handle_mm_fault+0x2e6/0xa20 [ 2412.688919] __get_user_pages+0x50d/0x1100 [ 2412.689401] ? follow_page_mask+0x1a30/0x1a30 [ 2412.689909] ? lock_release+0x750/0x750 [ 2412.690349] ? lock_is_held_type+0xd7/0x130 [ 2412.690840] ? lock_is_held_type+0xd7/0x130 [ 2412.691367] __get_user_pages_remote+0x18f/0x870 [ 2412.691912] ? down_read+0x170/0x440 [ 2412.692342] pin_user_pages_remote+0x63/0x90 [ 2412.692841] process_vm_rw_core.constprop.0+0x44a/0x9a0 [ 2412.693475] ? find_held_lock+0x2c/0x110 [ 2412.693952] ? vmalloc_dump_obj+0x1a0/0x1a0 [ 2412.694467] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2412.695098] ? _copy_from_user+0xf2/0x170 [ 2412.695591] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 2412.696161] ? iovec_from_user+0x1fd/0x3c0 [ 2412.696614] ? import_iovec+0x83/0xb0 [ 2412.697048] process_vm_rw+0x1b6/0x260 [ 2412.697494] ? process_vm_rw_core.constprop.0+0x9a0/0x9a0 [ 2412.698127] ? ksys_write+0x20c/0x250 [ 2412.698572] ? lock_downgrade+0x6d0/0x6d0 [ 2412.699063] ? find_held_lock+0x2c/0x110 [ 2412.699536] ? __mutex_unlock_slowpath+0x15c/0x5e0 [ 2412.700105] ? bit_wait_io_timeout+0x160/0x160 [ 2412.700630] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2412.701252] ? vfs_write+0x422/0xac0 [ 2412.701661] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 2412.702279] ? fput+0x2a/0x50 [ 2412.702649] __x64_sys_process_vm_readv+0xdf/0x1b0 [ 2412.703220] ? lockdep_hardirqs_on+0x79/0x100 [ 2412.703757] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2412.704341] do_syscall_64+0x3b/0x90 [ 2412.704777] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2412.705362] RIP: 0033:0x7f1173378b19 [ 2412.705800] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2412.707874] RSP: 002b:00007f11708ee188 EFLAGS: 00000246 ORIG_RAX: 0000000000000136 [ 2412.708737] RAX: ffffffffffffffda RBX: 00007f117348bf60 RCX: 00007f1173378b19 [ 2412.709510] RDX: 0000000000000003 RSI: 00000000200000c0 RDI: 0000000000000319 [ 2412.710333] RBP: 00007f11708ee1d0 R08: 0000000000000001 R09: 0000000000000000 [ 2412.711156] R10: 0000000020000240 R11: 0000000000000246 R12: 0000000000000002 [ 2412.711968] R13: 00007ffeef59581f R14: 00007f11708ee300 R15: 0000000000022000 [ 2412.712786] 07:02:02 executing program 5: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) preadv(r0, &(0x7f00000011c0)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x7, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x0, 0x0, 0x87ffffc) (fail_nth: 6) mmap$perf(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000008, 0x1010, r2, 0x4) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000100), 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r3 = syz_open_procfs(0x0, 0x0) perf_event_open(&(0x7f0000001240)={0x1, 0x80, 0x9, 0xa1, 0xf9, 0x3, 0x0, 0x7, 0xa0400, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x3, @perf_config_ext={0x58d}, 0x21, 0x1, 0x0, 0x6, 0x9, 0x0, 0x8000, 0x0, 0x80, 0x0, 0x5}, 0xffffffffffffffff, 0x4, r3, 0x0) r4 = gettid() perf_event_open(0x0, r4, 0x1, r3, 0x8) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/consoles\x00', 0x0, 0x0) 07:02:02 executing program 6: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) preadv(r0, &(0x7f00000011c0)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x7, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x0, 0x0, 0x87ffffc) mmap$perf(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000008, 0x1010, r2, 0x4) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000100), 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r3 = syz_open_procfs(0x0, 0x0) perf_event_open(&(0x7f0000001240)={0x1, 0x80, 0x9, 0xa1, 0xf9, 0x3, 0x0, 0x7, 0xa0400, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x3, @perf_config_ext={0x58d}, 0x21, 0x1, 0x0, 0x6, 0x9, 0x0, 0x8000, 0x0, 0x80, 0x0, 0x5}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x0) r4 = gettid() process_vm_readv(r4, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/4078, 0xfee}, {&(0x7f0000000000)=""/123, 0x7b}, {&(0x7f0000000100)=""/57, 0x39}], 0x3, &(0x7f0000000240)=[{&(0x7f0000012940)=""/102400, 0xffffff76}], 0x1, 0x0) perf_event_open(0x0, r4, 0x1, r3, 0x8) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/consoles\x00', 0x0, 0x0) 07:02:02 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f00000001c0)=0x8) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x14, 0x0, 0x4c00}, 0x14}}, 0x0) 07:02:02 executing program 7: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000001340)) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x204800, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x1) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002480)='fd/3\x00') r2 = dup(r1) fdatasync(r2) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x40}}, './file0\x00'}) preadv2(r3, &(0x7f0000001300)=[{&(0x7f0000000080)=""/193, 0xc1}, {&(0x7f0000000180)=""/250, 0xfa}, {&(0x7f0000000300)=""/4096, 0x1000}], 0x3, 0x80000000, 0x66, 0x18) r4 = openat(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000001380)=0x100000) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r5, 0x0, 0x0, 0x87ffffc) (fail_nth: 10) sendfile(r5, r4, 0x0, 0x80000000) 07:02:02 executing program 1: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) preadv(r0, &(0x7f00000011c0)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x7, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x0, 0x0, 0x87ffffc) mmap$perf(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000008, 0x1010, r2, 0x4) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000100), 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r3 = syz_open_procfs(0x0, 0x0) preadv(r3, &(0x7f0000000080)=[{&(0x7f0000000000)=""/40, 0x40}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000001240)={0x1, 0x80, 0x9, 0xa1, 0xf9, 0x3, 0x0, 0x7, 0xa0400, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x3, @perf_config_ext={0x58d}, 0x21, 0x1, 0x0, 0x6, 0x9, 0x0, 0x8000, 0x0, 0x80}, 0xffffffffffffffff, 0x4, r3, 0x0) r4 = gettid() process_vm_readv(r4, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/4078, 0xfee}, {&(0x7f0000000000)=""/123, 0x7b}, {&(0x7f0000000100)=""/57, 0x39}], 0x3, &(0x7f0000000240)=[{&(0x7f0000012940)=""/102400, 0xffffff76}], 0x1, 0x0) perf_event_open(0x0, r4, 0x1, r3, 0x8) 07:02:02 executing program 3: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000040)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x300000c, 0x13, r0, 0x8000000) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xa) fork() (fail_nth: 10) 07:02:02 executing program 0: openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r0, 0x0, 0x0, 0x87ffffc) mmap$perf(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000008, 0x10, 0xffffffffffffffff, 0x4) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x12, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = syz_open_procfs(0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001240)={0x1, 0x80, 0x0, 0xa1, 0x0, 0x0, 0x0, 0x7, 0xa0400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x3, @perf_config_ext, 0x21, 0x1, 0x0, 0x0, 0x9, 0x0, 0x8000, 0x0, 0x80, 0x0, 0x5}, 0xffffffffffffffff, 0x4, r1, 0x0) r2 = gettid() process_vm_readv(r2, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/4078, 0xfee}, {&(0x7f0000000000)=""/123, 0x7b}, {&(0x7f0000000100)=""/57, 0x39}], 0x3, &(0x7f0000000240)=[{&(0x7f0000012940)=""/102400, 0xffffff76}], 0x1, 0x0) (fail_nth: 11) perf_event_open(0x0, r2, 0x1, r1, 0x8) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/consoles\x00', 0x0, 0x0) 07:02:02 executing program 2: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x204800, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x1) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002480)='fd/3\x00') fdatasync(0xffffffffffffffff) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x40}}, './file0\x00'}) preadv2(r2, &(0x7f0000001300)=[{&(0x7f0000000080)=""/193, 0xc1}, {&(0x7f0000000180)=""/250, 0xfa}, {&(0x7f0000000300)=""/4096, 0x1000}], 0x3, 0x80000000, 0x66, 0x18) openat(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r3, 0x0, 0x0, 0x87ffffc) (fail_nth: 7) [ 2426.900323] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12350 comm=syz-executor.4 [ 2426.912775] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12355 comm=syz-executor.4 [ 2426.917457] FAULT_INJECTION: forcing a failure. [ 2426.917457] name failslab, interval 1, probability 0, space 0, times 0 [ 2426.919830] CPU: 0 PID: 12352 Comm: syz-executor.3 Not tainted 5.18.0-rc1-next-20220406 #1 [ 2426.921541] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2426.923920] Call Trace: [ 2426.924456] [ 2426.924920] dump_stack_lvl+0x8b/0xb3 [ 2426.925727] should_fail.cold+0x5/0xa [ 2426.926520] ? alloc_fdtable+0x84/0x280 [ 2426.927364] should_failslab+0x5/0x10 [ 2426.928154] kmem_cache_alloc_trace+0x55/0x3c0 [ 2426.929120] alloc_fdtable+0x84/0x280 [ 2426.929922] dup_fd+0x71e/0xca0 [ 2426.930654] copy_process+0x2039/0x6db0 [ 2426.931531] ? __cleanup_sighand+0xb0/0xb0 [ 2426.932443] ? lock_release+0x3b2/0x750 [ 2426.933262] ? ksys_write+0x20c/0x250 [ 2426.934070] ? kernel_clone+0x2f8/0xa60 [ 2426.934899] kernel_clone+0xe7/0xa60 [ 2426.935707] ? find_held_lock+0x2c/0x110 [ 2426.936548] ? create_io_thread+0xf0/0xf0 [ 2426.937436] ? __mutex_unlock_slowpath+0x15c/0x5e0 [ 2426.938449] ? bit_wait_io_timeout+0x160/0x160 [ 2426.939416] ? lock_is_held_type+0xd7/0x130 [ 2426.940307] __do_sys_fork+0x8a/0xc0 [ 2426.941076] ? kernel_clone+0xa60/0xa60 [ 2426.941891] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 2426.943031] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2426.944108] ? lockdep_hardirqs_on+0x79/0x100 [ 2426.945023] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2426.946074] do_syscall_64+0x3b/0x90 [ 2426.946837] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2426.946850] FAULT_INJECTION: forcing a failure. [ 2426.946850] name failslab, interval 1, probability 0, space 0, times 0 [ 2426.947898] RIP: 0033:0x7fc1c2a89b19 [ 2426.947919] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2426.947943] RSP: 002b:00007fc1bffff188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 2426.947967] RAX: ffffffffffffffda RBX: 00007fc1c2b9cf60 RCX: 00007fc1c2a89b19 [ 2426.947985] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2426.947999] RBP: 00007fc1bffff1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2426.948014] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2426.948028] R13: 00007fff0449096f R14: 00007fc1bffff300 R15: 0000000000022000 [ 2426.948068] [ 2426.965156] CPU: 1 PID: 12358 Comm: syz-executor.7 Not tainted 5.18.0-rc1-next-20220406 #1 [ 2426.966651] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2426.968690] Call Trace: [ 2426.969156] [ 2426.969562] dump_stack_lvl+0x8b/0xb3 [ 2426.970269] should_fail.cold+0x5/0xa [ 2426.970965] ? create_object.isra.0+0x3a/0xa20 [ 2426.971811] should_failslab+0x5/0x10 [ 2426.972493] kmem_cache_alloc+0x5b/0x480 [ 2426.973245] create_object.isra.0+0x3a/0xa20 [ 2426.974035] ? kasan_unpoison+0x23/0x50 [ 2426.974755] __kmalloc+0x25b/0x440 [ 2426.975434] ext4_find_extent+0xa39/0xd20 [ 2426.975737] FAULT_INJECTION: forcing a failure. [ 2426.975737] name failslab, interval 1, probability 0, space 0, times 0 [ 2426.976181] ext4_ext_map_blocks+0x1c8/0x5cd0 [ 2426.976224] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 2426.980466] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 2426.981412] ? ext4_ext_release+0x10/0x10 [ 2426.982175] ? lock_acquire+0x1b2/0x530 [ 2426.982885] ? lock_release+0x750/0x750 [ 2426.983630] ? lock_is_held_type+0xd7/0x130 [ 2426.984419] ? down_write+0xde/0x150 [ 2426.985110] ? down_write_killable+0x170/0x170 [ 2426.985938] ext4_map_blocks+0x652/0x1970 [ 2426.986723] ? lock_is_held_type+0xd7/0x130 [ 2426.987519] ? ext4_issue_zeroout+0x1c0/0x1c0 [ 2426.988354] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 2426.989333] ? jbd2__journal_start+0xf3/0x8d0 [ 2426.990163] ? __ext4_journal_start_sb+0x392/0x470 [ 2426.991030] ? __ext4_journal_start_sb+0x1d5/0x470 [ 2426.991917] ext4_alloc_file_blocks.isra.0+0x2c1/0xb20 [ 2426.992857] ? generic_update_time+0x21d/0x350 [ 2426.993679] ? ext4_ext_correct_indexes+0x440/0x440 [ 2426.994568] ? down_write_killable+0x170/0x170 [ 2426.995408] ext4_fallocate+0x1a2b/0x3c90 [ 2426.996151] ? lock_acquire+0x1b2/0x530 [ 2426.996859] ? lock_release+0x750/0x750 [ 2426.997577] ? ext4_ext_truncate+0x3e0/0x3e0 [ 2426.998350] ? lock_is_held_type+0xd7/0x130 [ 2426.999131] ? ext4_ext_truncate+0x3e0/0x3e0 [ 2426.999902] vfs_fallocate+0x489/0xe00 [ 2427.000603] __x64_sys_fallocate+0xcf/0x140 [ 2427.001364] do_syscall_64+0x3b/0x90 [ 2427.002034] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2427.002939] RIP: 0033:0x7fdba5ddfb19 [ 2427.003608] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2427.006798] RSP: 002b:00007fdba3355188 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 2427.008191] RAX: ffffffffffffffda RBX: 00007fdba5ef2f60 RCX: 00007fdba5ddfb19 [ 2427.009458] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 2427.010698] RBP: 00007fdba33551d0 R08: 0000000000000000 R09: 0000000000000000 [ 2427.011978] R10: 00000000087ffffc R11: 0000000000000246 R12: 0000000000000002 [ 2427.013217] R13: 00007ffe895a664f R14: 00007fdba3355300 R15: 0000000000022000 [ 2427.014542] [ 2427.014954] CPU: 0 PID: 12353 Comm: syz-executor.2 Not tainted 5.18.0-rc1-next-20220406 #1 [ 2427.016916] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2427.019527] Call Trace: [ 2427.020117] [ 2427.020631] dump_stack_lvl+0x8b/0xb3 [ 2427.021519] should_fail.cold+0x5/0xa [ 2427.022403] ? __es_insert_extent+0x3a9/0x12f0 [ 2427.023410] should_failslab+0x5/0x10 [ 2427.024298] kmem_cache_alloc+0x5b/0x480 [ 2427.025146] FAULT_INJECTION: forcing a failure. [ 2427.025146] name failslab, interval 1, probability 0, space 0, times 0 [ 2427.025255] __es_insert_extent+0x3a9/0x12f0 [ 2427.028155] ? do_raw_write_lock+0x11a/0x280 [ 2427.029181] ? do_raw_read_unlock+0x70/0x70 [ 2427.030204] ext4_es_insert_extent+0x2dc/0xbf0 [ 2427.031282] ? ext4_es_scan_clu+0x2e0/0x2e0 [ 2427.032269] ? lock_downgrade+0x6d0/0x6d0 [ 2427.033230] ? lock_is_held_type+0xd7/0x130 [ 2427.034230] ? __ext4_handle_dirty_metadata+0x720/0x720 [ 2427.035461] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 2427.036738] ext4_ext_map_blocks+0x1a36/0x5cd0 [ 2427.037797] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 2427.039000] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 2427.040216] ? ext4_ext_release+0x10/0x10 [ 2427.041168] ? lock_acquire+0x1b2/0x530 [ 2427.042080] ? lock_release+0x750/0x750 [ 2427.043004] ? lock_is_held_type+0xd7/0x130 [ 2427.044020] ? down_read+0x198/0x440 [ 2427.044883] ? rwsem_down_read_slowpath+0xac0/0xac0 [ 2427.046015] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 2427.047290] ? ext4_es_lookup_extent+0xc4/0xc60 [ 2427.048356] ext4_map_blocks+0x9c8/0x1970 [ 2427.049311] ? lock_is_held_type+0xd7/0x130 [ 2427.050294] ? ext4_issue_zeroout+0x1c0/0x1c0 [ 2427.051860] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 2427.053103] ? jbd2__journal_start+0xf3/0x8d0 [ 2427.054127] ? __ext4_journal_start_sb+0x392/0x470 [ 2427.055242] ? __ext4_journal_start_sb+0x1d5/0x470 [ 2427.056361] ext4_alloc_file_blocks.isra.0+0x2c1/0xb20 [ 2427.057539] ? generic_update_time+0x21d/0x350 [ 2427.058580] ? ext4_ext_correct_indexes+0x440/0x440 [ 2427.059718] ? down_write_killable+0x170/0x170 [ 2427.060766] ext4_fallocate+0x1a2b/0x3c90 [ 2427.061700] ? lock_acquire+0x1b2/0x530 [ 2427.062597] ? lock_release+0x750/0x750 [ 2427.063508] ? ext4_ext_truncate+0x3e0/0x3e0 [ 2427.064493] ? lock_is_held_type+0xd7/0x130 [ 2427.065471] ? ext4_ext_truncate+0x3e0/0x3e0 [ 2427.066457] vfs_fallocate+0x489/0xe00 [ 2427.067369] __x64_sys_fallocate+0xcf/0x140 [ 2427.068353] do_syscall_64+0x3b/0x90 [ 2427.069187] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2427.070358] RIP: 0033:0x7fd845bccb19 [ 2427.071189] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2427.075273] RSP: 002b:00007fd843142188 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 2427.076943] RAX: ffffffffffffffda RBX: 00007fd845cdff60 RCX: 00007fd845bccb19 [ 2427.078519] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 2427.080106] RBP: 00007fd8431421d0 R08: 0000000000000000 R09: 0000000000000000 [ 2427.081674] R10: 00000000087ffffc R11: 0000000000000246 R12: 0000000000000001 [ 2427.083247] R13: 00007ffde12fa01f R14: 00007fd843142300 R15: 0000000000022000 [ 2427.084857] [ 2427.085388] CPU: 1 PID: 12359 Comm: syz-executor.5 Not tainted 5.18.0-rc1-next-20220406 #1 [ 2427.086880] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2427.088884] Call Trace: [ 2427.089343] [ 2427.089722] dump_stack_lvl+0x8b/0xb3 [ 2427.090411] should_fail.cold+0x5/0xa [ 2427.091084] ? create_object.isra.0+0x3a/0xa20 [ 2427.091909] should_failslab+0x5/0x10 [ 2427.092592] kmem_cache_alloc+0x5b/0x480 [ 2427.093303] create_object.isra.0+0x3a/0xa20 [ 2427.094061] ? kasan_unpoison+0x23/0x50 [ 2427.094780] __kmalloc+0x25b/0x440 [ 2427.095423] ext4_find_extent+0xa39/0xd20 [ 2427.096157] ext4_ext_map_blocks+0x1c8/0x5cd0 [ 2427.096969] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 2427.097886] ? finish_task_switch.isra.0+0x230/0x870 [ 2427.098792] ? ext4_ext_release+0x10/0x10 [ 2427.099500] ? lock_acquire+0x1b2/0x530 [ 2427.100184] ? lock_release+0x750/0x750 [ 2427.100882] ? io_schedule_timeout+0x140/0x140 [ 2427.101686] ? lock_is_held_type+0xd7/0x130 [ 2427.102449] ? __cond_resched+0x13/0x20 [ 2427.103136] ? down_read+0x198/0x440 [ 2427.103780] ? rwsem_down_read_slowpath+0xac0/0xac0 [ 2427.104597] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 2427.105545] ? ext4_es_lookup_extent+0xc4/0xc60 [ 2427.106305] ext4_map_blocks+0x9c8/0x1970 [ 2427.107017] ? lock_is_held_type+0xd7/0x130 [ 2427.107736] ? ext4_issue_zeroout+0x1c0/0x1c0 [ 2427.108533] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 2427.109444] ? jbd2__journal_start+0xf3/0x8d0 [ 2427.110197] ? __ext4_journal_start_sb+0x392/0x470 [ 2427.110988] ? __ext4_journal_start_sb+0x1d5/0x470 [ 2427.111837] ext4_alloc_file_blocks.isra.0+0x2c1/0xb20 [ 2427.112776] ? generic_update_time+0x21d/0x350 [ 2427.113580] ? ext4_ext_correct_indexes+0x440/0x440 [ 2427.114469] ? down_write_killable+0x170/0x170 [ 2427.115288] ext4_fallocate+0x1a2b/0x3c90 [ 2427.115998] ? lock_acquire+0x1b2/0x530 [ 2427.116662] ? lock_release+0x750/0x750 [ 2427.117339] ? ext4_ext_truncate+0x3e0/0x3e0 [ 2427.118065] ? lock_is_held_type+0xd7/0x130 [ 2427.118803] ? ext4_ext_truncate+0x3e0/0x3e0 [ 2427.119550] vfs_fallocate+0x489/0xe00 [ 2427.120217] __x64_sys_fallocate+0xcf/0x140 [ 2427.120946] do_syscall_64+0x3b/0x90 [ 2427.121572] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2427.122441] RIP: 0033:0x7f35817a9b19 [ 2427.123058] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2427.126127] RSP: 002b:00007f357ed1f188 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 2427.127393] RAX: ffffffffffffffda RBX: 00007f35818bcf60 RCX: 00007f35817a9b19 [ 2427.128576] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 2427.129753] RBP: 00007f357ed1f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2427.130935] R10: 00000000087ffffc R11: 0000000000000246 R12: 0000000000000001 [ 2427.132124] R13: 00007ffdd683fcbf R14: 00007f357ed1f300 R15: 0000000000022000 [ 2427.133320] [ 2427.222060] FAULT_INJECTION: forcing a failure. [ 2427.222060] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2427.224590] CPU: 0 PID: 12356 Comm: syz-executor.0 Not tainted 5.18.0-rc1-next-20220406 #1 [ 2427.226239] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2427.228511] Call Trace: [ 2427.229021] [ 2427.229470] dump_stack_lvl+0x8b/0xb3 [ 2427.230242] should_fail.cold+0x5/0xa [ 2427.231014] copy_page_to_iter+0x431/0x1190 [ 2427.231915] process_vm_rw_core.constprop.0+0x5d7/0x9a0 [ 2427.233010] ? vmalloc_dump_obj+0x1a0/0x1a0 [ 2427.233901] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2427.235023] ? _copy_from_user+0xf2/0x170 [ 2427.235883] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 2427.236886] ? iovec_from_user+0x1fd/0x3c0 [ 2427.237735] ? import_iovec+0x83/0xb0 [ 2427.238510] process_vm_rw+0x1b6/0x260 [ 2427.239312] ? process_vm_rw_core.constprop.0+0x9a0/0x9a0 [ 2427.240417] ? ksys_write+0x20c/0x250 [ 2427.241180] ? lock_downgrade+0x6d0/0x6d0 [ 2427.242026] ? find_held_lock+0x2c/0x110 [ 2427.242848] ? __mutex_unlock_slowpath+0x15c/0x5e0 [ 2427.243864] ? bit_wait_io_timeout+0x160/0x160 [ 2427.244794] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2427.245900] ? vfs_write+0x422/0xac0 [ 2427.246644] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 2427.247745] ? fput+0x2a/0x50 [ 2427.248386] __x64_sys_process_vm_readv+0xdf/0x1b0 [ 2427.249372] ? lockdep_hardirqs_on+0x79/0x100 [ 2427.250288] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2427.251348] do_syscall_64+0x3b/0x90 [ 2427.252100] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2427.253138] RIP: 0033:0x7f1173378b19 [ 2427.253882] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2427.257543] RSP: 002b:00007f11708ee188 EFLAGS: 00000246 ORIG_RAX: 0000000000000136 [ 2427.259053] RAX: ffffffffffffffda RBX: 00007f117348bf60 RCX: 00007f1173378b19 [ 2427.260479] RDX: 0000000000000003 RSI: 00000000200000c0 RDI: 000000000000031c [ 2427.261890] RBP: 00007f11708ee1d0 R08: 0000000000000001 R09: 0000000000000000 [ 2427.263323] R10: 0000000020000240 R11: 0000000000000246 R12: 0000000000000002 [ 2427.264734] R13: 00007ffeef59581f R14: 00007f11708ee300 R15: 0000000000022000 [ 2427.266181] 07:02:16 executing program 5: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) preadv(r0, &(0x7f00000011c0)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x7, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x0, 0x0, 0x87ffffc) (fail_nth: 7) mmap$perf(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000008, 0x1010, r2, 0x4) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000100), 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r3 = syz_open_procfs(0x0, 0x0) perf_event_open(&(0x7f0000001240)={0x1, 0x80, 0x9, 0xa1, 0xf9, 0x3, 0x0, 0x7, 0xa0400, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x3, @perf_config_ext={0x58d}, 0x21, 0x1, 0x0, 0x6, 0x9, 0x0, 0x8000, 0x0, 0x80, 0x0, 0x5}, 0xffffffffffffffff, 0x4, r3, 0x0) r4 = gettid() perf_event_open(0x0, r4, 0x1, r3, 0x8) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/consoles\x00', 0x0, 0x0) 07:02:16 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f00000001c0)=0x8) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x14, 0x0, 0x4e00}, 0x14}}, 0x0) 07:02:16 executing program 0: openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r0, 0x0, 0x0, 0x87ffffc) mmap$perf(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000008, 0x10, 0xffffffffffffffff, 0x4) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x12, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = syz_open_procfs(0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001240)={0x1, 0x80, 0x0, 0xa1, 0x0, 0x0, 0x0, 0x7, 0xa0400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x3, @perf_config_ext, 0x21, 0x1, 0x0, 0x0, 0x9, 0x0, 0x8000, 0x0, 0x80, 0x0, 0x5}, 0xffffffffffffffff, 0x4, r1, 0x0) r2 = gettid() process_vm_readv(r2, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/4078, 0xfee}, {&(0x7f0000000000)=""/123, 0x7b}, {&(0x7f0000000100)=""/57, 0x39}], 0x3, &(0x7f0000000240)=[{&(0x7f0000012940)=""/102400, 0xffffff76}], 0x1, 0x0) (fail_nth: 12) perf_event_open(0x0, r2, 0x1, r1, 0x8) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/consoles\x00', 0x0, 0x0) 07:02:16 executing program 6: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) preadv(r0, &(0x7f00000011c0)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x7, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x0, 0x0, 0x87ffffc) mmap$perf(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000008, 0x1010, r2, 0x4) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000100), 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r3 = syz_open_procfs(0x0, 0x0) perf_event_open(&(0x7f0000001240)={0x1, 0x80, 0x9, 0xa1, 0xf9, 0x3, 0x0, 0x7, 0xa0400, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x3, @perf_config_ext={0x58d}, 0x21, 0x1, 0x0, 0x6, 0x9, 0x0, 0x8000, 0x0, 0x80, 0x0, 0x5}, 0xffffffffffffffff, 0x4, r3, 0x0) r4 = gettid() process_vm_readv(0x0, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/4078, 0xfee}, {&(0x7f0000000000)=""/123, 0x7b}, {&(0x7f0000000100)=""/57, 0x39}], 0x3, &(0x7f0000000240)=[{&(0x7f0000012940)=""/102400, 0xffffff76}], 0x1, 0x0) perf_event_open(0x0, r4, 0x1, r3, 0x8) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/consoles\x00', 0x0, 0x0) 07:02:16 executing program 3: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000040)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x300000c, 0x13, r0, 0x8000000) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xa) fork() (fail_nth: 11) 07:02:16 executing program 2: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x204800, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x1) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002480)='fd/3\x00') fdatasync(0xffffffffffffffff) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x40}}, './file0\x00'}) preadv2(r2, &(0x7f0000001300)=[{&(0x7f0000000080)=""/193, 0xc1}, {&(0x7f0000000180)=""/250, 0xfa}, {&(0x7f0000000300)=""/4096, 0x1000}], 0x3, 0x80000000, 0x66, 0x18) openat(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r3, 0x0, 0x0, 0x87ffffc) (fail_nth: 8) 07:02:16 executing program 1: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) preadv(r0, &(0x7f00000011c0)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x7, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x0, 0x0, 0x87ffffc) mmap$perf(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000008, 0x1010, r2, 0x4) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000100), 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r3 = syz_open_procfs(0x0, 0x0) preadv(r3, &(0x7f0000000080)=[{&(0x7f0000000000)=""/40, 0x40}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000001240)={0x1, 0x80, 0x9, 0xa1, 0xf9, 0x3, 0x0, 0x7, 0xa0400, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x3, @perf_config_ext={0x58d}, 0x21, 0x1, 0x0, 0x6, 0x9, 0x0, 0x8000, 0x0, 0x80, 0x0, 0x5}, 0xffffffffffffffff, 0x0, r3, 0x0) r4 = gettid() process_vm_readv(r4, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/4078, 0xfee}, {&(0x7f0000000000)=""/123, 0x7b}, {&(0x7f0000000100)=""/57, 0x39}], 0x3, &(0x7f0000000240)=[{&(0x7f0000012940)=""/102400, 0xffffff76}], 0x1, 0x0) perf_event_open(0x0, r4, 0x1, r3, 0x8) 07:02:16 executing program 7: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000001340)) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x204800, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x1) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002480)='fd/3\x00') r2 = dup(r1) fdatasync(r2) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x40}}, './file0\x00'}) preadv2(r3, &(0x7f0000001300)=[{&(0x7f0000000080)=""/193, 0xc1}, {&(0x7f0000000180)=""/250, 0xfa}, {&(0x7f0000000300)=""/4096, 0x1000}], 0x3, 0x80000000, 0x66, 0x18) r4 = openat(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000001380)=0x100000) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r5, 0x0, 0x0, 0x87ffffc) (fail_nth: 11) sendfile(r5, r4, 0x0, 0x80000000) [ 2440.489823] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12380 comm=syz-executor.4 [ 2440.496629] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12383 comm=syz-executor.4 [ 2440.499950] FAULT_INJECTION: forcing a failure. [ 2440.499950] name failslab, interval 1, probability 0, space 0, times 0 [ 2440.501395] CPU: 0 PID: 12382 Comm: syz-executor.5 Not tainted 5.18.0-rc1-next-20220406 #1 [ 2440.502299] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2440.503559] Call Trace: [ 2440.503834] [ 2440.504080] dump_stack_lvl+0x8b/0xb3 [ 2440.504494] should_fail.cold+0x5/0xa [ 2440.504899] ? __es_insert_extent+0x3a9/0x12f0 [ 2440.505397] should_failslab+0x5/0x10 [ 2440.505828] kmem_cache_alloc+0x5b/0x480 [ 2440.506278] __es_insert_extent+0x3a9/0x12f0 [ 2440.506768] ? do_raw_write_lock+0x11a/0x280 [ 2440.507275] ? do_raw_read_unlock+0x70/0x70 [ 2440.507791] ext4_es_insert_extent+0x2dc/0xbf0 [ 2440.507944] FAULT_INJECTION: forcing a failure. [ 2440.507944] name failslab, interval 1, probability 0, space 0, times 0 [ 2440.508307] ? ext4_es_scan_clu+0x2e0/0x2e0 [ 2440.508323] ? lock_downgrade+0x6d0/0x6d0 [ 2440.511575] ? lock_is_held_type+0xd7/0x130 [ 2440.512085] ? __ext4_handle_dirty_metadata+0x720/0x720 [ 2440.512708] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 2440.513356] ext4_ext_map_blocks+0x1a36/0x5cd0 [ 2440.513909] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 2440.514517] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 2440.515131] ? ext4_ext_release+0x10/0x10 [ 2440.515623] ? lock_acquire+0x1b2/0x530 [ 2440.516087] ? lock_release+0x750/0x750 [ 2440.516559] ? lock_is_held_type+0xd7/0x130 [ 2440.517037] ? down_read+0x198/0x440 [ 2440.517467] ? rwsem_down_read_slowpath+0xac0/0xac0 [ 2440.518035] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 2440.518670] ? ext4_es_lookup_extent+0xc4/0xc60 [ 2440.519211] ext4_map_blocks+0x9c8/0x1970 [ 2440.519713] ? lock_is_held_type+0xd7/0x130 [ 2440.520217] ? ext4_issue_zeroout+0x1c0/0x1c0 [ 2440.520729] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 2440.521365] ? jbd2__journal_start+0xf3/0x8d0 [ 2440.521889] ? __ext4_journal_start_sb+0x392/0x470 [ 2440.522407] ? __ext4_journal_start_sb+0x1d5/0x470 [ 2440.522976] ext4_alloc_file_blocks.isra.0+0x2c1/0xb20 [ 2440.523596] ? generic_update_time+0x21d/0x350 [ 2440.524137] ? ext4_ext_correct_indexes+0x440/0x440 [ 2440.524721] ? down_write_killable+0x170/0x170 [ 2440.525256] ext4_fallocate+0x1a2b/0x3c90 [ 2440.525742] ? lock_acquire+0x1b2/0x530 [ 2440.526212] ? lock_release+0x750/0x750 [ 2440.526674] ? ext4_ext_truncate+0x3e0/0x3e0 [ 2440.527184] ? lock_is_held_type+0xd7/0x130 [ 2440.527670] ? ext4_ext_truncate+0x3e0/0x3e0 [ 2440.528188] vfs_fallocate+0x489/0xe00 [ 2440.528649] __x64_sys_fallocate+0xcf/0x140 [ 2440.529157] do_syscall_64+0x3b/0x90 [ 2440.529592] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2440.530190] RIP: 0033:0x7f35817a9b19 [ 2440.530617] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2440.532784] RSP: 002b:00007f357ed1f188 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 2440.533672] RAX: ffffffffffffffda RBX: 00007f35818bcf60 RCX: 00007f35817a9b19 [ 2440.534503] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 2440.535306] RBP: 00007f357ed1f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2440.536101] R10: 00000000087ffffc R11: 0000000000000246 R12: 0000000000000001 [ 2440.536868] R13: 00007ffdd683fcbf R14: 00007f357ed1f300 R15: 0000000000022000 [ 2440.537713] [ 2440.537978] CPU: 1 PID: 12381 Comm: syz-executor.3 Not tainted 5.18.0-rc1-next-20220406 #1 [ 2440.539736] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2440.542104] Call Trace: [ 2440.542640] [ 2440.543108] dump_stack_lvl+0x8b/0xb3 [ 2440.543933] should_fail.cold+0x5/0xa [ 2440.544736] ? create_object.isra.0+0x3a/0xa20 [ 2440.545710] should_failslab+0x5/0x10 [ 2440.546513] kmem_cache_alloc+0x5b/0x480 [ 2440.547395] create_object.isra.0+0x3a/0xa20 [ 2440.548322] ? kasan_unpoison+0x23/0x50 [ 2440.549169] kmem_cache_alloc_trace+0x22e/0x3c0 [ 2440.550160] alloc_fdtable+0x84/0x280 [ 2440.550977] dup_fd+0x71e/0xca0 [ 2440.551708] copy_process+0x2039/0x6db0 [ 2440.552586] ? __cleanup_sighand+0xb0/0xb0 [ 2440.553496] ? lock_release+0x3b2/0x750 [ 2440.554335] ? ksys_write+0x20c/0x250 [ 2440.555132] ? kernel_clone+0x2f8/0xa60 [ 2440.555994] kernel_clone+0xe7/0xa60 [ 2440.556784] ? find_held_lock+0x2c/0x110 [ 2440.557636] ? create_io_thread+0xf0/0xf0 [ 2440.558519] ? __mutex_unlock_slowpath+0x15c/0x5e0 [ 2440.559560] ? bit_wait_io_timeout+0x160/0x160 [ 2440.560519] ? lock_is_held_type+0xd7/0x130 [ 2440.561444] __do_sys_fork+0x8a/0xc0 [ 2440.562235] ? kernel_clone+0xa60/0xa60 [ 2440.563082] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 2440.564265] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2440.565365] ? lockdep_hardirqs_on+0x79/0x100 [ 2440.566314] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2440.567428] do_syscall_64+0x3b/0x90 [ 2440.568220] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2440.569319] RIP: 0033:0x7fc1c2a89b19 [ 2440.570094] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2440.573941] RSP: 002b:00007fc1bffff188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 2440.575533] RAX: ffffffffffffffda RBX: 00007fc1c2b9cf60 RCX: 00007fc1c2a89b19 [ 2440.577024] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2440.578512] RBP: 00007fc1bffff1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2440.579041] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12389 comm=syz-executor.4 [ 2440.580014] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2440.580032] R13: 00007fff0449096f R14: 00007fc1bffff300 R15: 0000000000022000 [ 2440.584201] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12390 comm=syz-executor.4 [ 2440.584362] [ 2440.606972] FAULT_INJECTION: forcing a failure. [ 2440.606972] name failslab, interval 1, probability 0, space 0, times 0 [ 2440.609516] CPU: 1 PID: 12377 Comm: syz-executor.2 Not tainted 5.18.0-rc1-next-20220406 #1 [ 2440.611259] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2440.613633] Call Trace: [ 2440.614171] [ 2440.614642] dump_stack_lvl+0x8b/0xb3 [ 2440.615479] should_fail.cold+0x5/0xa [ 2440.616282] ? __es_tree_search.isra.0+0x1af/0x210 [ 2440.617321] ? create_object.isra.0+0x3a/0xa20 [ 2440.618289] should_failslab+0x5/0x10 [ 2440.619097] kmem_cache_alloc+0x5b/0x480 [ 2440.619987] create_object.isra.0+0x3a/0xa20 [ 2440.620920] ? kasan_unpoison+0x23/0x50 [ 2440.621768] kmem_cache_alloc+0x239/0x480 [ 2440.622664] __es_insert_extent+0x3a9/0x12f0 07:02:16 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f00000001c0)=0x8) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x14, 0x0, 0x4f00}, 0x14}}, 0x0) 07:02:16 executing program 6: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) preadv(r0, &(0x7f00000011c0)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x7, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x0, 0x0, 0x87ffffc) mmap$perf(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000008, 0x1010, r2, 0x4) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000100), 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r3 = syz_open_procfs(0x0, 0x0) perf_event_open(&(0x7f0000001240)={0x1, 0x80, 0x9, 0xa1, 0xf9, 0x3, 0x0, 0x7, 0xa0400, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x3, @perf_config_ext={0x58d}, 0x21, 0x1, 0x0, 0x6, 0x9, 0x0, 0x8000, 0x0, 0x80, 0x0, 0x5}, 0xffffffffffffffff, 0x4, r3, 0x0) r4 = gettid() process_vm_readv(0x0, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/4078, 0xfee}, {&(0x7f0000000000)=""/123, 0x7b}, {&(0x7f0000000100)=""/57, 0x39}], 0x3, &(0x7f0000000240)=[{&(0x7f0000012940)=""/102400, 0xffffff76}], 0x1, 0x0) perf_event_open(0x0, r4, 0x1, r3, 0x8) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/consoles\x00', 0x0, 0x0) 07:02:16 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f00000001c0)=0x8) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x14, 0x0, 0x5000}, 0x14}}, 0x0) [ 2440.623609] ? do_raw_write_lock+0x11a/0x280 [ 2440.624771] ? do_raw_read_unlock+0x70/0x70 [ 2440.625716] ext4_es_insert_extent+0x2dc/0xbf0 [ 2440.626697] ? ext4_es_scan_clu+0x2e0/0x2e0 [ 2440.627618] ? lock_downgrade+0x6d0/0x6d0 [ 2440.628510] ? lock_is_held_type+0xd7/0x130 [ 2440.629448] ? __ext4_handle_dirty_metadata+0x720/0x720 [ 2440.630571] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 2440.631752] ext4_ext_map_blocks+0x1a36/0x5cd0 [ 2440.632735] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 2440.633846] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 2440.634970] ? ext4_ext_release+0x10/0x10 [ 2440.635864] ? lock_acquire+0x1b2/0x530 [ 2440.636714] ? lock_release+0x750/0x750 [ 2440.637573] ? lock_is_held_type+0xd7/0x130 [ 2440.638508] ? down_read+0x198/0x440 [ 2440.639298] ? rwsem_down_read_slowpath+0xac0/0xac0 [ 2440.640359] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 2440.641397] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12395 comm=syz-executor.4 [ 2440.641523] ? ext4_es_lookup_extent+0xc4/0xc60 [ 2440.643778] ext4_map_blocks+0x9c8/0x1970 [ 2440.644670] ? lock_is_held_type+0xd7/0x130 [ 2440.645591] ? ext4_issue_zeroout+0x1c0/0x1c0 [ 2440.646548] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 2440.647720] ? jbd2__journal_start+0xf3/0x8d0 [ 2440.648674] ? __ext4_journal_start_sb+0x392/0x470 [ 2440.648793] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12396 comm=syz-executor.4 [ 2440.649704] ? __ext4_journal_start_sb+0x1d5/0x470 [ 2440.649741] ext4_alloc_file_blocks.isra.0+0x2c1/0xb20 [ 2440.653150] ? generic_update_time+0x21d/0x350 [ 2440.654138] ? ext4_ext_correct_indexes+0x440/0x440 [ 2440.655187] ? down_write_killable+0x170/0x170 [ 2440.656188] ext4_fallocate+0x1a2b/0x3c90 [ 2440.657057] ? lock_acquire+0x1b2/0x530 [ 2440.657898] ? lock_release+0x750/0x750 [ 2440.658746] ? ext4_ext_truncate+0x3e0/0x3e0 [ 2440.659700] ? lock_is_held_type+0xd7/0x130 [ 2440.660626] ? ext4_ext_truncate+0x3e0/0x3e0 [ 2440.661558] vfs_fallocate+0x489/0xe00 [ 2440.662402] __x64_sys_fallocate+0xcf/0x140 [ 2440.663335] do_syscall_64+0x3b/0x90 [ 2440.664127] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2440.665224] RIP: 0033:0x7fd845bccb19 [ 2440.666003] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2440.669870] RSP: 002b:00007fd843142188 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 2440.671471] RAX: ffffffffffffffda RBX: 00007fd845cdff60 RCX: 00007fd845bccb19 [ 2440.672968] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 2440.674464] RBP: 00007fd8431421d0 R08: 0000000000000000 R09: 0000000000000000 [ 2440.675967] R10: 00000000087ffffc R11: 0000000000000246 R12: 0000000000000001 [ 2440.677462] R13: 00007ffde12fa01f R14: 00007fd843142300 R15: 0000000000022000 [ 2440.678991] 07:02:16 executing program 1: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) preadv(r0, &(0x7f00000011c0)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x7, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x0, 0x0, 0x87ffffc) mmap$perf(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000008, 0x1010, r2, 0x4) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000100), 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r3 = syz_open_procfs(0x0, 0x0) preadv(r3, &(0x7f0000000080)=[{&(0x7f0000000000)=""/40, 0x40}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000001240)={0x1, 0x80, 0x9, 0xa1, 0xf9, 0x3, 0x0, 0x7, 0xa0400, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x3, @perf_config_ext={0x58d}, 0x21, 0x1, 0x0, 0x6, 0x9, 0x0, 0x8000, 0x0, 0x80, 0x0, 0x5}, 0xffffffffffffffff, 0x0, r3, 0x0) r4 = gettid() process_vm_readv(r4, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/4078, 0xfee}, {&(0x7f0000000000)=""/123, 0x7b}, {&(0x7f0000000100)=""/57, 0x39}], 0x3, &(0x7f0000000240)=[{&(0x7f0000012940)=""/102400, 0xffffff76}], 0x1, 0x0) perf_event_open(0x0, r4, 0x1, r3, 0x8) 07:02:16 executing program 5: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) preadv(r0, &(0x7f00000011c0)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x7, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x0, 0x0, 0x87ffffc) (fail_nth: 8) mmap$perf(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000008, 0x1010, r2, 0x4) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000100), 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r3 = syz_open_procfs(0x0, 0x0) perf_event_open(&(0x7f0000001240)={0x1, 0x80, 0x9, 0xa1, 0xf9, 0x3, 0x0, 0x7, 0xa0400, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x3, @perf_config_ext={0x58d}, 0x21, 0x1, 0x0, 0x6, 0x9, 0x0, 0x8000, 0x0, 0x80, 0x0, 0x5}, 0xffffffffffffffff, 0x4, r3, 0x0) r4 = gettid() perf_event_open(0x0, r4, 0x1, r3, 0x8) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/consoles\x00', 0x0, 0x0) [ 2440.706711] FAULT_INJECTION: forcing a failure. [ 2440.706711] name failslab, interval 1, probability 0, space 0, times 0 [ 2440.709511] CPU: 1 PID: 12391 Comm: syz-executor.7 Not tainted 5.18.0-rc1-next-20220406 #1 [ 2440.711276] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2440.713705] Call Trace: [ 2440.714244] [ 2440.714719] dump_stack_lvl+0x8b/0xb3 [ 2440.715563] should_fail.cold+0x5/0xa [ 2440.716377] ? ext4_mb_new_blocks+0x64b/0x4b60 [ 2440.717356] should_failslab+0x5/0x10 [ 2440.718173] kmem_cache_alloc+0x5b/0x480 [ 2440.719055] ext4_mb_new_blocks+0x64b/0x4b60 [ 2440.720011] ? lock_is_held_type+0xd7/0x130 [ 2440.720944] ? rcu_read_lock_sched_held+0x3a/0x70 [ 2440.721975] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2440.723149] ? ext4_cache_extents+0x68/0x2d0 [ 2440.724100] ? ext4_discard_preallocations+0xe60/0xe60 [ 2440.725218] ? __sanitizer_cov_trace_const_cmp2+0x22/0x80 [ 2440.726389] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2440.727563] ? __sanitizer_cov_trace_const_cmp2+0x22/0x80 [ 2440.728734] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2440.729898] ? ext4_inode_to_goal_block+0x320/0x430 [ 2440.730979] ext4_ext_map_blocks+0x1fb0/0x5cd0 [ 2440.731984] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 2440.733109] ? finish_task_switch.isra.0+0x230/0x870 [ 2440.734219] ? ext4_ext_release+0x10/0x10 [ 2440.735110] ? lock_release+0x750/0x750 [ 2440.735983] ? lock_is_held_type+0xd7/0x130 [ 2440.736930] ? down_write_killable+0x170/0x170 [ 2440.737919] ext4_map_blocks+0x652/0x1970 [ 2440.738822] ? lock_is_held_type+0xd7/0x130 [ 2440.739766] ? ext4_issue_zeroout+0x1c0/0x1c0 [ 2440.740729] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 2440.741899] ? jbd2__journal_start+0xf3/0x8d0 [ 2440.742858] ? __ext4_journal_start_sb+0x392/0x470 [ 2440.743897] ? __ext4_journal_start_sb+0x1d5/0x470 [ 2440.744942] ext4_alloc_file_blocks.isra.0+0x2c1/0xb20 [ 2440.746052] ? generic_update_time+0x21d/0x350 [ 2440.747033] ? ext4_ext_correct_indexes+0x440/0x440 [ 2440.748101] ? down_write_killable+0x170/0x170 [ 2440.749089] ext4_fallocate+0x1a2b/0x3c90 [ 2440.749969] ? lock_acquire+0x1b2/0x530 [ 2440.750822] ? lock_release+0x750/0x750 [ 2440.751701] ? ext4_ext_truncate+0x3e0/0x3e0 [ 2440.752643] ? lock_is_held_type+0xd7/0x130 [ 2440.753567] ? ext4_ext_truncate+0x3e0/0x3e0 [ 2440.754507] vfs_fallocate+0x489/0xe00 [ 2440.755368] __x64_sys_fallocate+0xcf/0x140 [ 2440.756302] do_syscall_64+0x3b/0x90 [ 2440.757098] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2440.758199] RIP: 0033:0x7fdba5ddfb19 [ 2440.758979] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2440.762864] RSP: 002b:00007fdba3355188 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 2440.764481] RAX: ffffffffffffffda RBX: 00007fdba5ef2f60 RCX: 00007fdba5ddfb19 [ 2440.765096] FAULT_INJECTION: forcing a failure. [ 2440.765096] name failslab, interval 1, probability 0, space 0, times 0 [ 2440.765982] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 2440.765999] RBP: 00007fdba33551d0 R08: 0000000000000000 R09: 0000000000000000 [ 2440.766016] R10: 00000000087ffffc R11: 0000000000000246 R12: 0000000000000002 [ 2440.766032] R13: 00007ffe895a664f R14: 00007fdba3355300 R15: 0000000000022000 [ 2440.766082] [ 2440.773712] CPU: 0 PID: 12401 Comm: syz-executor.5 Not tainted 5.18.0-rc1-next-20220406 #1 [ 2440.774651] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2440.775940] Call Trace: [ 2440.776223] [ 2440.776469] dump_stack_lvl+0x8b/0xb3 [ 2440.776899] should_fail.cold+0x5/0xa [ 2440.777328] ? __es_tree_search.isra.0+0x1af/0x210 [ 2440.777875] ? create_object.isra.0+0x3a/0xa20 [ 2440.778393] should_failslab+0x5/0x10 [ 2440.778821] kmem_cache_alloc+0x5b/0x480 [ 2440.779290] create_object.isra.0+0x3a/0xa20 [ 2440.779795] ? kasan_unpoison+0x23/0x50 [ 2440.780246] kmem_cache_alloc+0x239/0x480 [ 2440.780717] __es_insert_extent+0x3a9/0x12f0 [ 2440.781210] ? do_raw_write_lock+0x11a/0x280 [ 2440.781698] ? do_raw_read_unlock+0x70/0x70 [ 2440.782203] ext4_es_insert_extent+0x2dc/0xbf0 [ 2440.782721] ? ext4_es_scan_clu+0x2e0/0x2e0 [ 2440.783204] ? lock_downgrade+0x6d0/0x6d0 [ 2440.783692] ? lock_is_held_type+0xd7/0x130 [ 2440.784185] ? __ext4_handle_dirty_metadata+0x720/0x720 [ 2440.784764] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 2440.785370] ext4_ext_map_blocks+0x1a36/0x5cd0 [ 2440.785893] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 2440.786481] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 2440.787076] ? ext4_ext_release+0x10/0x10 [ 2440.787554] ? lock_acquire+0x1b2/0x530 [ 2440.788002] ? lock_release+0x750/0x750 [ 2440.788454] ? lock_is_held_type+0xd7/0x130 [ 2440.788946] ? down_read+0x198/0x440 [ 2440.789364] ? rwsem_down_read_slowpath+0xac0/0xac0 [ 2440.789924] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 2440.790542] ? ext4_es_lookup_extent+0xc4/0xc60 [ 2440.791070] ext4_map_blocks+0x9c8/0x1970 [ 2440.791539] ? lock_is_held_type+0xd7/0x130 [ 2440.792026] ? ext4_issue_zeroout+0x1c0/0x1c0 [ 2440.792537] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 2440.793160] ? jbd2__journal_start+0xf3/0x8d0 [ 2440.793672] ? __ext4_journal_start_sb+0x392/0x470 [ 2440.794221] ? __ext4_journal_start_sb+0x1d5/0x470 [ 2440.794776] ext4_alloc_file_blocks.isra.0+0x2c1/0xb20 [ 2440.795384] ? generic_update_time+0x21d/0x350 [ 2440.795905] ? ext4_ext_correct_indexes+0x440/0x440 [ 2440.796466] ? down_write_killable+0x170/0x170 [ 2440.796990] ext4_fallocate+0x1a2b/0x3c90 [ 2440.797466] ? lock_acquire+0x1b2/0x530 [ 2440.797915] ? lock_release+0x750/0x750 [ 2440.798364] ? ext4_ext_truncate+0x3e0/0x3e0 [ 2440.798854] ? lock_is_held_type+0xd7/0x130 [ 2440.799351] ? ext4_ext_truncate+0x3e0/0x3e0 [ 2440.799841] vfs_fallocate+0x489/0xe00 [ 2440.800282] __x64_sys_fallocate+0xcf/0x140 [ 2440.800766] do_syscall_64+0x3b/0x90 [ 2440.801183] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2440.801756] RIP: 0033:0x7f35817a9b19 [ 2440.802161] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2440.804205] RSP: 002b:00007f357ed1f188 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 2440.805043] RAX: ffffffffffffffda RBX: 00007f35818bcf60 RCX: 00007f35817a9b19 [ 2440.805825] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 2440.806606] RBP: 00007f357ed1f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2440.807411] R10: 00000000087ffffc R11: 0000000000000246 R12: 0000000000000001 [ 2440.808194] R13: 00007ffdd683fcbf R14: 00007f357ed1f300 R15: 0000000000022000 [ 2440.808996] [ 2440.826133] FAULT_INJECTION: forcing a failure. [ 2440.826133] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2440.827429] CPU: 0 PID: 12397 Comm: syz-executor.0 Not tainted 5.18.0-rc1-next-20220406 #1 [ 2440.828317] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2440.829539] Call Trace: [ 2440.829814] [ 2440.830056] dump_stack_lvl+0x8b/0xb3 [ 2440.830471] should_fail.cold+0x5/0xa [ 2440.830887] copy_page_to_iter+0x431/0x1190 [ 2440.831409] process_vm_rw_core.constprop.0+0x5d7/0x9a0 [ 2440.831995] ? vmalloc_dump_obj+0x1a0/0x1a0 [ 2440.832481] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2440.833101] ? _copy_from_user+0xf2/0x170 [ 2440.833579] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 2440.834151] ? iovec_from_user+0x1fd/0x3c0 [ 2440.834628] ? import_iovec+0x83/0xb0 [ 2440.835070] process_vm_rw+0x1b6/0x260 [ 2440.835525] ? process_vm_rw_core.constprop.0+0x9a0/0x9a0 [ 2440.836146] ? ksys_write+0x20c/0x250 [ 2440.836576] ? lock_downgrade+0x6d0/0x6d0 [ 2440.837044] ? find_held_lock+0x2c/0x110 [ 2440.837503] ? __mutex_unlock_slowpath+0x15c/0x5e0 [ 2440.838066] ? bit_wait_io_timeout+0x160/0x160 [ 2440.838587] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2440.839212] ? vfs_write+0x422/0xac0 [ 2440.839633] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 2440.840261] ? fput+0x2a/0x50 [ 2440.840620] __x64_sys_process_vm_readv+0xdf/0x1b0 [ 2440.841170] ? lockdep_hardirqs_on+0x79/0x100 [ 2440.841676] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2440.842252] do_syscall_64+0x3b/0x90 [ 2440.842679] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2440.843265] RIP: 0033:0x7f1173378b19 [ 2440.843696] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2440.845767] RSP: 002b:00007f11708ee188 EFLAGS: 00000246 ORIG_RAX: 0000000000000136 [ 2440.846608] RAX: ffffffffffffffda RBX: 00007f117348bf60 RCX: 00007f1173378b19 [ 2440.847403] RDX: 0000000000000003 RSI: 00000000200000c0 RDI: 000000000000031f [ 2440.848186] RBP: 00007f11708ee1d0 R08: 0000000000000001 R09: 0000000000000000 [ 2440.848967] R10: 0000000020000240 R11: 0000000000000246 R12: 0000000000000002 [ 2440.849753] R13: 00007ffeef59581f R14: 00007f11708ee300 R15: 0000000000022000 [ 2440.850548] 07:02:28 executing program 3: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000040)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x300000c, 0x13, r0, 0x8000000) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xa) fork() (fail_nth: 12) 07:02:28 executing program 0: openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r0, 0x0, 0x0, 0x87ffffc) mmap$perf(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000008, 0x10, 0xffffffffffffffff, 0x4) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x12, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = syz_open_procfs(0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001240)={0x1, 0x80, 0x0, 0xa1, 0x0, 0x0, 0x0, 0x7, 0xa0400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x3, @perf_config_ext, 0x21, 0x1, 0x0, 0x0, 0x9, 0x0, 0x8000, 0x0, 0x80, 0x0, 0x5}, 0xffffffffffffffff, 0x4, r1, 0x0) r2 = gettid() process_vm_readv(r2, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/4078, 0xfee}, {&(0x7f0000000000)=""/123, 0x7b}, {&(0x7f0000000100)=""/57, 0x39}], 0x3, &(0x7f0000000240)=[{&(0x7f0000012940)=""/102400, 0xffffff76}], 0x1, 0x0) (fail_nth: 13) perf_event_open(0x0, r2, 0x1, r1, 0x8) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/consoles\x00', 0x0, 0x0) 07:02:28 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f00000001c0)=0x8) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x14, 0x0, 0x5100}, 0x14}}, 0x0) 07:02:28 executing program 6: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) preadv(r0, &(0x7f00000011c0)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x7, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x0, 0x0, 0x87ffffc) mmap$perf(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000008, 0x1010, r2, 0x4) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000100), 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r3 = syz_open_procfs(0x0, 0x0) perf_event_open(&(0x7f0000001240)={0x1, 0x80, 0x9, 0xa1, 0xf9, 0x3, 0x0, 0x7, 0xa0400, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x3, @perf_config_ext={0x58d}, 0x21, 0x1, 0x0, 0x6, 0x9, 0x0, 0x8000, 0x0, 0x80, 0x0, 0x5}, 0xffffffffffffffff, 0x4, r3, 0x0) r4 = gettid() process_vm_readv(0x0, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/4078, 0xfee}, {&(0x7f0000000000)=""/123, 0x7b}, {&(0x7f0000000100)=""/57, 0x39}], 0x3, &(0x7f0000000240)=[{&(0x7f0000012940)=""/102400, 0xffffff76}], 0x1, 0x0) perf_event_open(0x0, r4, 0x1, r3, 0x8) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/consoles\x00', 0x0, 0x0) 07:02:28 executing program 2: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x204800, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x1) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002480)='fd/3\x00') fdatasync(0xffffffffffffffff) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x40}}, './file0\x00'}) preadv2(r2, &(0x7f0000001300)=[{&(0x7f0000000080)=""/193, 0xc1}, {&(0x7f0000000180)=""/250, 0xfa}, {&(0x7f0000000300)=""/4096, 0x1000}], 0x3, 0x80000000, 0x66, 0x18) openat(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r3, 0x0, 0x0, 0x87ffffc) (fail_nth: 9) 07:02:28 executing program 5: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) preadv(r0, &(0x7f00000011c0)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x7, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x0, 0x0, 0x87ffffc) (fail_nth: 9) mmap$perf(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000008, 0x1010, r2, 0x4) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000100), 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r3 = syz_open_procfs(0x0, 0x0) perf_event_open(&(0x7f0000001240)={0x1, 0x80, 0x9, 0xa1, 0xf9, 0x3, 0x0, 0x7, 0xa0400, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x3, @perf_config_ext={0x58d}, 0x21, 0x1, 0x0, 0x6, 0x9, 0x0, 0x8000, 0x0, 0x80, 0x0, 0x5}, 0xffffffffffffffff, 0x4, r3, 0x0) r4 = gettid() perf_event_open(0x0, r4, 0x1, r3, 0x8) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/consoles\x00', 0x0, 0x0) 07:02:28 executing program 1: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) preadv(r0, &(0x7f00000011c0)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x7, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x0, 0x0, 0x87ffffc) mmap$perf(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000008, 0x1010, r2, 0x4) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000100), 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r3 = syz_open_procfs(0x0, 0x0) preadv(r3, &(0x7f0000000080)=[{&(0x7f0000000000)=""/40, 0x40}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000001240)={0x1, 0x80, 0x9, 0xa1, 0xf9, 0x3, 0x0, 0x7, 0xa0400, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x3, @perf_config_ext={0x58d}, 0x21, 0x1, 0x0, 0x6, 0x9, 0x0, 0x8000, 0x0, 0x80, 0x0, 0x5}, 0xffffffffffffffff, 0x0, r3, 0x0) r4 = gettid() process_vm_readv(r4, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/4078, 0xfee}, {&(0x7f0000000000)=""/123, 0x7b}, {&(0x7f0000000100)=""/57, 0x39}], 0x3, &(0x7f0000000240)=[{&(0x7f0000012940)=""/102400, 0xffffff76}], 0x1, 0x0) perf_event_open(0x0, r4, 0x1, r3, 0x8) 07:02:28 executing program 7: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000001340)) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x204800, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x1) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002480)='fd/3\x00') r2 = dup(r1) fdatasync(r2) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x40}}, './file0\x00'}) preadv2(r3, &(0x7f0000001300)=[{&(0x7f0000000080)=""/193, 0xc1}, {&(0x7f0000000180)=""/250, 0xfa}, {&(0x7f0000000300)=""/4096, 0x1000}], 0x3, 0x80000000, 0x66, 0x18) r4 = openat(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000001380)=0x100000) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r5, 0x0, 0x0, 0x87ffffc) (fail_nth: 12) sendfile(r5, r4, 0x0, 0x80000000) [ 2453.055401] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12417 comm=syz-executor.4 [ 2453.057808] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12420 comm=syz-executor.4 07:02:28 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f00000001c0)=0x8) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x14, 0x0, 0x5200}, 0x14}}, 0x0) [ 2453.083511] FAULT_INJECTION: forcing a failure. [ 2453.083511] name failslab, interval 1, probability 0, space 0, times 0 [ 2453.084098] FAULT_INJECTION: forcing a failure. [ 2453.084098] name failslab, interval 1, probability 0, space 0, times 0 [ 2453.085949] CPU: 1 PID: 12416 Comm: syz-executor.5 Not tainted 5.18.0-rc1-next-20220406 #1 [ 2453.088685] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2453.090961] Call Trace: [ 2453.091508] [ 2453.091965] dump_stack_lvl+0x8b/0xb3 [ 2453.092770] should_fail.cold+0x5/0xa [ 2453.093557] ? ext4_find_extent+0xa39/0xd20 [ 2453.094431] should_failslab+0x5/0x10 [ 2453.095212] __kmalloc+0x72/0x440 [ 2453.095953] ext4_find_extent+0xa39/0xd20 [ 2453.096814] ext4_ext_map_blocks+0x1c8/0x5cd0 [ 2453.097739] ? lockdep_hardirqs_on+0x79/0x100 [ 2453.098657] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 2453.099768] ? ext4_ext_release+0x10/0x10 [ 2453.100603] ? lock_acquire+0x1b2/0x530 [ 2453.101419] ? lock_release+0x750/0x750 [ 2453.102225] ? lock_is_held_type+0xd7/0x130 [ 2453.103108] ? down_write+0xde/0x150 [ 2453.103874] ? down_write_killable+0x170/0x170 [ 2453.104804] ext4_map_blocks+0x652/0x1970 [ 2453.105652] ? lock_is_held_type+0xd7/0x130 [ 2453.106528] ? ext4_issue_zeroout+0x1c0/0x1c0 [ 2453.107439] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 2453.108561] ? jbd2__journal_start+0xf3/0x8d0 [ 2453.109464] ? __ext4_journal_start_sb+0x392/0x470 [ 2453.110438] ? __ext4_journal_start_sb+0x1d5/0x470 [ 2453.111430] ext4_alloc_file_blocks.isra.0+0x2c1/0xb20 [ 2453.112499] ? generic_update_time+0x21d/0x350 [ 2453.113427] ? ext4_ext_correct_indexes+0x440/0x440 [ 2453.114427] ? down_write_killable+0x170/0x170 [ 2453.115359] ext4_fallocate+0x1a2b/0x3c90 [ 2453.116202] ? lock_acquire+0x1b2/0x530 [ 2453.117004] ? lock_release+0x750/0x750 [ 2453.117811] ? ext4_ext_truncate+0x3e0/0x3e0 [ 2453.118694] ? lock_is_held_type+0xd7/0x130 [ 2453.119572] ? ext4_ext_truncate+0x3e0/0x3e0 [ 2453.120450] vfs_fallocate+0x489/0xe00 [ 2453.121244] __x64_sys_fallocate+0xcf/0x140 [ 2453.122115] do_syscall_64+0x3b/0x90 [ 2453.122861] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2453.123919] RIP: 0033:0x7f35817a9b19 [ 2453.124660] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2453.128320] RSP: 002b:00007f357ed1f188 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 2453.129842] RAX: ffffffffffffffda RBX: 00007f35818bcf60 RCX: 00007f35817a9b19 [ 2453.131256] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 2453.132697] RBP: 00007f357ed1f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2453.134123] R10: 00000000087ffffc R11: 0000000000000246 R12: 0000000000000001 [ 2453.135550] R13: 00007ffdd683fcbf R14: 00007f357ed1f300 R15: 0000000000022000 [ 2453.137000] [ 2453.137462] CPU: 0 PID: 12426 Comm: syz-executor.3 Not tainted 5.18.0-rc1-next-20220406 #1 [ 2453.138417] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2453.139699] Call Trace: [ 2453.139991] [ 2453.140240] dump_stack_lvl+0x8b/0xb3 [ 2453.140683] should_fail.cold+0x5/0xa [ 2453.141107] ? kvmalloc_node+0x3e/0x130 [ 2453.141563] should_failslab+0x5/0x10 [ 2453.142000] __kmalloc_node+0x76/0x470 [ 2453.142451] kvmalloc_node+0x3e/0x130 [ 2453.142878] alloc_fdtable+0xd3/0x280 [ 2453.143315] dup_fd+0x71e/0xca0 [ 2453.143708] copy_process+0x2039/0x6db0 [ 2453.144180] ? __cleanup_sighand+0xb0/0xb0 [ 2453.144645] ? lock_release+0x3b2/0x750 [ 2453.145101] ? ksys_write+0x20c/0x250 [ 2453.145537] ? kernel_clone+0x2f8/0xa60 [ 2453.145968] kernel_clone+0xe7/0xa60 [ 2453.146408] ? find_held_lock+0x2c/0x110 [ 2453.146855] ? create_io_thread+0xf0/0xf0 [ 2453.147333] ? __mutex_unlock_slowpath+0x15c/0x5e0 [ 2453.147886] ? bit_wait_io_timeout+0x160/0x160 [ 2453.148401] ? lock_is_held_type+0xd7/0x130 [ 2453.148876] __do_sys_fork+0x8a/0xc0 [ 2453.149309] ? kernel_clone+0xa60/0xa60 [ 2453.149756] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 2453.150406] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2453.150972] ? lockdep_hardirqs_on+0x79/0x100 [ 2453.151499] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2453.152086] do_syscall_64+0x3b/0x90 [ 2453.152508] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2453.153068] RIP: 0033:0x7fc1c2a89b19 [ 2453.153481] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2453.155460] RSP: 002b:00007fc1bffff188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 2453.156294] RAX: ffffffffffffffda RBX: 00007fc1c2b9cf60 RCX: 00007fc1c2a89b19 [ 2453.157064] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2453.157832] RBP: 00007fc1bffff1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2453.158597] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2453.159370] R13: 00007fff0449096f R14: 00007fc1bffff300 R15: 0000000000022000 [ 2453.160168] [ 2453.171178] FAULT_INJECTION: forcing a failure. [ 2453.171178] name failslab, interval 1, probability 0, space 0, times 0 [ 2453.172590] CPU: 0 PID: 12421 Comm: syz-executor.2 Not tainted 5.18.0-rc1-next-20220406 #1 [ 2453.173561] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2453.174796] Call Trace: [ 2453.175068] [ 2453.175308] dump_stack_lvl+0x8b/0xb3 [ 2453.175741] should_fail.cold+0x5/0xa [ 2453.176159] ? ext4_find_extent+0xa39/0xd20 [ 2453.176641] should_failslab+0x5/0x10 [ 2453.177050] __kmalloc+0x72/0x440 [ 2453.177445] ext4_find_extent+0xa39/0xd20 [ 2453.177912] ext4_ext_map_blocks+0x1c8/0x5cd0 [ 2453.178017] FAULT_INJECTION: forcing a failure. [ 2453.178017] name failslab, interval 1, probability 0, space 0, times 0 [ 2453.178411] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 2453.178431] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 2453.178456] ? ext4_ext_release+0x10/0x10 [ 2453.178474] ? lock_acquire+0x1b2/0x530 [ 2453.178492] ? lock_release+0x750/0x750 [ 2453.178514] ? lock_is_held_type+0xd7/0x130 [ 2453.178542] ? down_write+0xde/0x150 [ 2453.178557] ? down_write_killable+0x170/0x170 [ 2453.178585] ext4_map_blocks+0x652/0x1970 [ 2453.185015] ? lock_is_held_type+0xd7/0x130 [ 2453.185491] ? ext4_issue_zeroout+0x1c0/0x1c0 [ 2453.185985] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 2453.186583] ? jbd2__journal_start+0xf3/0x8d0 [ 2453.187081] ? __ext4_journal_start_sb+0x392/0x470 [ 2453.187618] ? __ext4_journal_start_sb+0x1d5/0x470 [ 2453.188153] ext4_alloc_file_blocks.isra.0+0x2c1/0xb20 [ 2453.188736] ? generic_update_time+0x21d/0x350 [ 2453.189246] ? ext4_ext_correct_indexes+0x440/0x440 [ 2453.189801] ? down_write_killable+0x170/0x170 [ 2453.190309] ext4_fallocate+0x1a2b/0x3c90 [ 2453.190764] ? lock_acquire+0x1b2/0x530 [ 2453.191196] ? lock_release+0x750/0x750 [ 2453.191656] ? ext4_ext_truncate+0x3e0/0x3e0 [ 2453.192133] ? lock_is_held_type+0xd7/0x130 [ 2453.192610] ? ext4_ext_truncate+0x3e0/0x3e0 [ 2453.193100] vfs_fallocate+0x489/0xe00 [ 2453.193539] __x64_sys_fallocate+0xcf/0x140 [ 2453.194012] do_syscall_64+0x3b/0x90 [ 2453.194428] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2453.194991] RIP: 0033:0x7fd845bccb19 [ 2453.195399] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2453.197483] RSP: 002b:00007fd843142188 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 2453.198344] RAX: ffffffffffffffda RBX: 00007fd845cdff60 RCX: 00007fd845bccb19 [ 2453.199150] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 2453.199976] RBP: 00007fd8431421d0 R08: 0000000000000000 R09: 0000000000000000 [ 2453.200792] R10: 00000000087ffffc R11: 0000000000000246 R12: 0000000000000001 [ 2453.201607] R13: 00007ffde12fa01f R14: 00007fd843142300 R15: 0000000000022000 [ 2453.202445] [ 2453.202710] CPU: 1 PID: 12428 Comm: syz-executor.7 Not tainted 5.18.0-rc1-next-20220406 #1 [ 2453.204389] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2453.206641] Call Trace: [ 2453.207151] [ 2453.207620] dump_stack_lvl+0x8b/0xb3 [ 2453.208395] should_fail.cold+0x5/0xa [ 2453.209157] ? create_object.isra.0+0x3a/0xa20 [ 2453.210074] should_failslab+0x5/0x10 [ 2453.210836] kmem_cache_alloc+0x5b/0x480 [ 2453.211676] create_object.isra.0+0x3a/0xa20 [ 2453.212553] ? kasan_unpoison+0x23/0x50 [ 2453.213364] kmem_cache_alloc+0x239/0x480 [ 2453.214213] ext4_mb_new_blocks+0x222c/0x4b60 [ 2453.215139] ? lock_is_held_type+0xd7/0x130 [ 2453.216033] ? rcu_read_lock_sched_held+0x3a/0x70 [ 2453.217005] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2453.218121] ? ext4_cache_extents+0x68/0x2d0 [ 2453.219005] ? ext4_discard_preallocations+0xe60/0xe60 [ 2453.219801] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12435 comm=syz-executor.4 [ 2453.220078] ? __sanitizer_cov_trace_const_cmp2+0x22/0x80 [ 2453.222006] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12436 comm=syz-executor.4 [ 2453.222483] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2453.222520] ? __sanitizer_cov_trace_const_cmp2+0x22/0x80 [ 2453.226032] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2453.227138] ? ext4_inode_to_goal_block+0x320/0x430 [ 2453.228181] ext4_ext_map_blocks+0x1fb0/0x5cd0 [ 2453.229115] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 2453.230177] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 2453.231253] ? ext4_ext_release+0x10/0x10 [ 2453.232111] ? lock_release+0x750/0x750 [ 2453.232930] ? lock_is_held_type+0xd7/0x130 [ 2453.233823] ? down_write_killable+0x170/0x170 [ 2453.234763] ext4_map_blocks+0x652/0x1970 [ 2453.235622] ? lock_is_held_type+0xd7/0x130 [ 2453.236499] ? ext4_issue_zeroout+0x1c0/0x1c0 [ 2453.237407] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 2453.238524] ? jbd2__journal_start+0xf3/0x8d0 [ 2453.239452] ? __ext4_journal_start_sb+0x392/0x470 [ 2453.240459] ? __ext4_journal_start_sb+0x1d5/0x470 [ 2453.241447] ext4_alloc_file_blocks.isra.0+0x2c1/0xb20 [ 2453.242499] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2453.243633] ? ext4_ext_correct_indexes+0x440/0x440 [ 2453.244639] ? down_write_killable+0x170/0x170 [ 2453.245591] ext4_fallocate+0x1a2b/0x3c90 [ 2453.246419] ? lock_acquire+0x1b2/0x530 [ 2453.247233] ? lock_release+0x750/0x750 [ 2453.248054] ? ext4_ext_truncate+0x3e0/0x3e0 [ 2453.248946] ? lock_is_held_type+0xd7/0x130 [ 2453.249837] ? ext4_ext_truncate+0x3e0/0x3e0 07:02:29 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f00000001c0)=0x8) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x14, 0x0, 0x5400}, 0x14}}, 0x0) [ 2453.250727] vfs_fallocate+0x489/0xe00 [ 2453.251686] __x64_sys_fallocate+0xcf/0x140 [ 2453.252577] do_syscall_64+0x3b/0x90 [ 2453.253326] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2453.254374] RIP: 0033:0x7fdba5ddfb19 [ 2453.255113] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2453.258766] RSP: 002b:00007fdba3355188 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 2453.260317] RAX: ffffffffffffffda RBX: 00007fdba5ef2f60 RCX: 00007fdba5ddfb19 [ 2453.261755] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 2453.263177] RBP: 00007fdba33551d0 R08: 0000000000000000 R09: 0000000000000000 [ 2453.264594] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12438 comm=syz-executor.4 [ 2453.264612] R10: 00000000087ffffc R11: 0000000000000246 R12: 0000000000000002 [ 2453.267364] R13: 00007ffe895a664f R14: 00007fdba3355300 R15: 0000000000022000 [ 2453.268829] [ 2453.269527] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12439 comm=syz-executor.4 07:02:29 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f00000001c0)=0x8) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x14, 0x0, 0x5500}, 0x14}}, 0x0) 07:02:29 executing program 6: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) preadv(r0, &(0x7f00000011c0)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x7, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x0, 0x0, 0x87ffffc) mmap$perf(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000008, 0x1010, r2, 0x4) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000100), 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r3 = syz_open_procfs(0x0, 0x0) perf_event_open(&(0x7f0000001240)={0x1, 0x80, 0x9, 0xa1, 0xf9, 0x3, 0x0, 0x7, 0xa0400, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x3, @perf_config_ext={0x58d}, 0x21, 0x1, 0x0, 0x6, 0x9, 0x0, 0x8000, 0x0, 0x80, 0x0, 0x5}, 0xffffffffffffffff, 0x4, r3, 0x0) r4 = gettid() process_vm_readv(r4, 0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000012940)=""/102400, 0x19000}], 0x1, 0x0) perf_event_open(0x0, r4, 0x1, r3, 0x8) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/consoles\x00', 0x0, 0x0) [ 2453.333396] FAULT_INJECTION: forcing a failure. [ 2453.333396] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2453.335944] CPU: 1 PID: 12429 Comm: syz-executor.0 Not tainted 5.18.0-rc1-next-20220406 #1 [ 2453.337610] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2453.339889] Call Trace: [ 2453.340407] [ 2453.340852] dump_stack_lvl+0x8b/0xb3 [ 2453.341628] should_fail.cold+0x5/0xa [ 2453.342373] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12444 comm=syz-executor.4 [ 2453.344062] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12445 comm=syz-executor.4 [ 2453.344744] copy_page_to_iter+0x722/0x1190 [ 2453.346982] process_vm_rw_core.constprop.0+0x5d7/0x9a0 [ 2453.348111] ? vmalloc_dump_obj+0x1a0/0x1a0 [ 2453.349008] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2453.350120] ? _copy_from_user+0xf2/0x170 [ 2453.350965] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 2453.351994] ? iovec_from_user+0x1fd/0x3c0 [ 2453.352844] ? import_iovec+0x83/0xb0 [ 2453.353630] process_vm_rw+0x1b6/0x260 [ 2453.354424] ? process_vm_rw_core.constprop.0+0x9a0/0x9a0 [ 2453.355575] ? finish_task_switch.isra.0+0x221/0x870 [ 2453.356611] ? lock_downgrade+0x6d0/0x6d0 [ 2453.357475] ? perf_mux_hrtimer_handler+0xe70/0xe70 [ 2453.358503] ? lockdep_hardirqs_on+0x79/0x100 [ 2453.359418] ? finish_task_switch.isra.0+0x226/0x870 [ 2453.360458] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 2453.361480] ? xfd_validate_state+0x59/0x180 [ 2453.362378] ? restore_fpregs_from_fpstate+0xcc/0x1e0 [ 2453.363440] __x64_sys_process_vm_readv+0xdf/0x1b0 [ 2453.364438] ? lockdep_hardirqs_on+0x79/0x100 [ 2453.365347] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2453.366392] do_syscall_64+0x3b/0x90 [ 2453.367146] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2453.368206] RIP: 0033:0x7f1173378b19 [ 2453.368953] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2453.372634] RSP: 002b:00007f11708ee188 EFLAGS: 00000246 ORIG_RAX: 0000000000000136 [ 2453.374163] RAX: ffffffffffffffda RBX: 00007f117348bf60 RCX: 00007f1173378b19 [ 2453.375609] RDX: 0000000000000003 RSI: 00000000200000c0 RDI: 0000000000000322 [ 2453.377027] RBP: 00007f11708ee1d0 R08: 0000000000000001 R09: 0000000000000000 [ 2453.378450] R10: 0000000020000240 R11: 0000000000000246 R12: 0000000000000002 [ 2453.379883] R13: 00007ffeef59581f R14: 00007f11708ee300 R15: 0000000000022000 [ 2453.381330] 07:02:29 executing program 2: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x204800, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x1) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002480)='fd/3\x00') fdatasync(0xffffffffffffffff) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x40}}, './file0\x00'}) preadv2(r2, &(0x7f0000001300)=[{&(0x7f0000000080)=""/193, 0xc1}, {&(0x7f0000000180)=""/250, 0xfa}, {&(0x7f0000000300)=""/4096, 0x1000}], 0x3, 0x80000000, 0x66, 0x18) openat(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r3, 0x0, 0x0, 0x87ffffc) (fail_nth: 10) 07:02:29 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f00000001c0)=0x8) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x14, 0x0, 0x5600}, 0x14}}, 0x0) [ 2453.418096] FAULT_INJECTION: forcing a failure. [ 2453.418096] name failslab, interval 1, probability 0, space 0, times 0 [ 2453.419531] CPU: 0 PID: 12447 Comm: syz-executor.2 Not tainted 5.18.0-rc1-next-20220406 #1 [ 2453.420447] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2453.421678] Call Trace: [ 2453.422023] [ 2453.422326] dump_stack_lvl+0x8b/0xb3 [ 2453.422844] should_fail.cold+0x5/0xa [ 2453.423357] ? create_object.isra.0+0x3a/0xa20 [ 2453.423991] should_failslab+0x5/0x10 [ 2453.424504] kmem_cache_alloc+0x5b/0x480 [ 2453.425063] create_object.isra.0+0x3a/0xa20 [ 2453.425652] ? kasan_unpoison+0x23/0x50 [ 2453.426190] kmem_cache_alloc+0x239/0x480 [ 2453.426758] ext4_mb_new_blocks+0x64b/0x4b60 [ 2453.427237] ? lock_is_held_type+0xd7/0x130 [ 2453.427754] ? rcu_read_lock_sched_held+0x3a/0x70 [ 2453.428310] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2453.428942] ? ext4_cache_extents+0x68/0x2d0 [ 2453.429438] ? ext4_discard_preallocations+0xe60/0xe60 [ 2453.430027] ? __sanitizer_cov_trace_const_cmp2+0x22/0x80 [ 2453.430658] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2453.431283] ? __sanitizer_cov_trace_const_cmp2+0x22/0x80 [ 2453.431924] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2453.432550] ? ext4_inode_to_goal_block+0x320/0x430 [ 2453.433119] ext4_ext_map_blocks+0x1fb0/0x5cd0 [ 2453.433630] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 2453.434227] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 2453.434832] ? ext4_ext_release+0x10/0x10 [ 2453.435320] ? lock_release+0x750/0x750 [ 2453.435789] ? lock_is_held_type+0xd7/0x130 [ 2453.436298] ? down_write_killable+0x170/0x170 [ 2453.436775] ext4_map_blocks+0x652/0x1970 [ 2453.437247] ? lock_is_held_type+0xd7/0x130 [ 2453.437738] ? ext4_issue_zeroout+0x1c0/0x1c0 [ 2453.438250] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 2453.438877] ? jbd2__journal_start+0xf3/0x8d0 [ 2453.439389] ? __ext4_journal_start_sb+0x392/0x470 [ 2453.439951] ? __ext4_journal_start_sb+0x1d5/0x470 [ 2453.440510] ext4_alloc_file_blocks.isra.0+0x2c1/0xb20 [ 2453.441104] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2453.441737] ? ext4_ext_correct_indexes+0x440/0x440 [ 2453.442299] ? down_write_killable+0x170/0x170 [ 2453.442820] ext4_fallocate+0x1a2b/0x3c90 [ 2453.443248] ? lock_acquire+0x1b2/0x530 [ 2453.443718] ? lock_release+0x750/0x750 [ 2453.444172] ? ext4_ext_truncate+0x3e0/0x3e0 [ 2453.444658] ? lock_is_held_type+0xd7/0x130 [ 2453.445143] ? ext4_ext_truncate+0x3e0/0x3e0 [ 2453.445642] vfs_fallocate+0x489/0xe00 [ 2453.446086] __x64_sys_fallocate+0xcf/0x140 [ 2453.446576] do_syscall_64+0x3b/0x90 [ 2453.446985] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2453.447581] RIP: 0033:0x7fd845bccb19 [ 2453.447990] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2453.450034] RSP: 002b:00007fd843142188 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 2453.450828] RAX: ffffffffffffffda RBX: 00007fd845cdff60 RCX: 00007fd845bccb19 [ 2453.451631] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 2453.452461] RBP: 00007fd8431421d0 R08: 0000000000000000 R09: 0000000000000000 [ 2453.453277] R10: 00000000087ffffc R11: 0000000000000246 R12: 0000000000000002 [ 2453.454087] R13: 00007ffde12fa01f R14: 00007fd843142300 R15: 0000000000022000 [ 2453.454929] 07:02:29 executing program 1: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) preadv(r0, &(0x7f00000011c0)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x7, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x0, 0x0, 0x87ffffc) mmap$perf(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000008, 0x1010, r2, 0x4) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000100), 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r3 = syz_open_procfs(0x0, 0x0) preadv(r3, &(0x7f0000000080)=[{&(0x7f0000000000)=""/40, 0x40}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000001240)={0x1, 0x80, 0x9, 0xa1, 0xf9, 0x3, 0x0, 0x7, 0xa0400, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x3, @perf_config_ext={0x58d}, 0x21, 0x1, 0x0, 0x6, 0x9, 0x0, 0x8000, 0x0, 0x80, 0x0, 0x5}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x0) r4 = gettid() process_vm_readv(r4, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/4078, 0xfee}, {&(0x7f0000000000)=""/123, 0x7b}, {&(0x7f0000000100)=""/57, 0x39}], 0x3, &(0x7f0000000240)=[{&(0x7f0000012940)=""/102400, 0xffffff76}], 0x1, 0x0) perf_event_open(0x0, r4, 0x1, r3, 0x8) 07:02:29 executing program 5: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) preadv(r0, &(0x7f00000011c0)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x7, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x0, 0x0, 0x87ffffc) (fail_nth: 10) mmap$perf(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000008, 0x1010, r2, 0x4) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000100), 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r3 = syz_open_procfs(0x0, 0x0) perf_event_open(&(0x7f0000001240)={0x1, 0x80, 0x9, 0xa1, 0xf9, 0x3, 0x0, 0x7, 0xa0400, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x3, @perf_config_ext={0x58d}, 0x21, 0x1, 0x0, 0x6, 0x9, 0x0, 0x8000, 0x0, 0x80, 0x0, 0x5}, 0xffffffffffffffff, 0x4, r3, 0x0) r4 = gettid() perf_event_open(0x0, r4, 0x1, r3, 0x8) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/consoles\x00', 0x0, 0x0) [ 2453.460226] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12452 comm=syz-executor.4 [ 2453.475030] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12454 comm=syz-executor.4 [ 2453.493376] FAULT_INJECTION: forcing a failure. [ 2453.493376] name failslab, interval 1, probability 0, space 0, times 0 [ 2453.494787] CPU: 0 PID: 12456 Comm: syz-executor.5 Not tainted 5.18.0-rc1-next-20220406 #1 [ 2453.495702] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2453.496913] Call Trace: [ 2453.497190] [ 2453.497440] dump_stack_lvl+0x8b/0xb3 [ 2453.497874] should_fail.cold+0x5/0xa [ 2453.498298] ? create_object.isra.0+0x3a/0xa20 [ 2453.498804] should_failslab+0x5/0x10 [ 2453.499233] kmem_cache_alloc+0x5b/0x480 [ 2453.499700] create_object.isra.0+0x3a/0xa20 [ 2453.500182] ? kasan_unpoison+0x23/0x50 [ 2453.500632] __kmalloc+0x25b/0x440 [ 2453.501032] ext4_find_extent+0xa39/0xd20 [ 2453.501508] ext4_ext_map_blocks+0x1c8/0x5cd0 [ 2453.502000] ? mark_held_locks+0x9e/0xe0 [ 2453.502461] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 2453.503037] ? finish_task_switch.isra.0+0x226/0x870 [ 2453.503648] ? lockdep_hardirqs_on+0x79/0x100 [ 2453.504142] ? ext4_ext_release+0x10/0x10 [ 2453.504619] ? lock_acquire+0x1b2/0x530 [ 2453.505079] ? lock_release+0x750/0x750 [ 2453.505537] ? io_schedule_timeout+0x140/0x140 [ 2453.506053] ? lock_is_held_type+0xd7/0x130 [ 2453.506550] ? __cond_resched+0x13/0x20 [ 2453.506998] ? down_write+0xde/0x150 [ 2453.507420] ? down_write_killable+0x170/0x170 [ 2453.507972] ext4_map_blocks+0x652/0x1970 [ 2453.508458] ? lock_is_held_type+0xd7/0x130 [ 2453.508948] ? ext4_issue_zeroout+0x1c0/0x1c0 [ 2453.509458] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 2453.510085] ? jbd2__journal_start+0xf3/0x8d0 [ 2453.510590] ? __ext4_journal_start_sb+0x392/0x470 [ 2453.511151] ? __ext4_journal_start_sb+0x1d5/0x470 [ 2453.511738] ext4_alloc_file_blocks.isra.0+0x2c1/0xb20 [ 2453.512341] ? generic_update_time+0x21d/0x350 [ 2453.512870] ? ext4_ext_correct_indexes+0x440/0x440 [ 2453.513442] ? down_write_killable+0x170/0x170 [ 2453.513986] ext4_fallocate+0x1a2b/0x3c90 [ 2453.514454] ? lock_acquire+0x1b2/0x530 [ 2453.514910] ? lock_release+0x750/0x750 [ 2453.515362] ? ext4_ext_truncate+0x3e0/0x3e0 [ 2453.515873] ? lock_is_held_type+0xd7/0x130 [ 2453.516366] ? ext4_ext_truncate+0x3e0/0x3e0 [ 2453.516871] vfs_fallocate+0x489/0xe00 [ 2453.517336] __x64_sys_fallocate+0xcf/0x140 [ 2453.517832] do_syscall_64+0x3b/0x90 [ 2453.518253] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2453.518830] RIP: 0033:0x7f35817a9b19 [ 2453.519247] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2453.521333] RSP: 002b:00007f357ed1f188 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 2453.522206] RAX: ffffffffffffffda RBX: 00007f35818bcf60 RCX: 00007f35817a9b19 [ 2453.523018] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 2453.523843] RBP: 00007f357ed1f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2453.524647] R10: 00000000087ffffc R11: 0000000000000246 R12: 0000000000000002 [ 2453.525444] R13: 00007ffdd683fcbf R14: 00007f357ed1f300 R15: 0000000000022000 [ 2453.526259] 07:02:42 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f00000001c0)=0x8) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x14, 0x0, 0x5800}, 0x14}}, 0x0) 07:02:42 executing program 7: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000001340)) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x204800, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x1) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002480)='fd/3\x00') r2 = dup(r1) fdatasync(r2) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x40}}, './file0\x00'}) preadv2(r3, &(0x7f0000001300)=[{&(0x7f0000000080)=""/193, 0xc1}, {&(0x7f0000000180)=""/250, 0xfa}, {&(0x7f0000000300)=""/4096, 0x1000}], 0x3, 0x80000000, 0x66, 0x18) r4 = openat(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000001380)=0x100000) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r5, 0x0, 0x0, 0x87ffffc) (fail_nth: 13) sendfile(r5, r4, 0x0, 0x80000000) 07:02:42 executing program 6: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) preadv(r0, &(0x7f00000011c0)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x7, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x0, 0x0, 0x87ffffc) mmap$perf(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000008, 0x1010, r2, 0x4) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000100), 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r3 = syz_open_procfs(0x0, 0x0) perf_event_open(&(0x7f0000001240)={0x1, 0x80, 0x9, 0xa1, 0xf9, 0x3, 0x0, 0x7, 0xa0400, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x3, @perf_config_ext={0x58d}, 0x21, 0x1, 0x0, 0x6, 0x9, 0x0, 0x8000, 0x0, 0x80, 0x0, 0x5}, 0xffffffffffffffff, 0x4, r3, 0x0) r4 = gettid() process_vm_readv(r4, 0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000012940)=""/102400, 0x19000}], 0x1, 0x0) perf_event_open(0x0, r4, 0x1, r3, 0x8) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/consoles\x00', 0x0, 0x0) 07:02:42 executing program 5: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) preadv(r0, &(0x7f00000011c0)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x7, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x0, 0x0, 0x87ffffc) (fail_nth: 11) mmap$perf(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000008, 0x1010, r2, 0x4) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000100), 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r3 = syz_open_procfs(0x0, 0x0) perf_event_open(&(0x7f0000001240)={0x1, 0x80, 0x9, 0xa1, 0xf9, 0x3, 0x0, 0x7, 0xa0400, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x3, @perf_config_ext={0x58d}, 0x21, 0x1, 0x0, 0x6, 0x9, 0x0, 0x8000, 0x0, 0x80, 0x0, 0x5}, 0xffffffffffffffff, 0x4, r3, 0x0) r4 = gettid() perf_event_open(0x0, r4, 0x1, r3, 0x8) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/consoles\x00', 0x0, 0x0) 07:02:42 executing program 1: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) preadv(r0, &(0x7f00000011c0)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x7, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x0, 0x0, 0x87ffffc) mmap$perf(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000008, 0x1010, r2, 0x4) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000100), 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r3 = syz_open_procfs(0x0, 0x0) preadv(r3, &(0x7f0000000080)=[{&(0x7f0000000000)=""/40, 0x40}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000001240)={0x1, 0x80, 0x9, 0xa1, 0xf9, 0x3, 0x0, 0x7, 0xa0400, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x3, @perf_config_ext={0x58d}, 0x21, 0x1, 0x0, 0x6, 0x9, 0x0, 0x8000, 0x0, 0x80, 0x0, 0x5}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x0) r4 = gettid() process_vm_readv(r4, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/4078, 0xfee}, {&(0x7f0000000000)=""/123, 0x7b}, {&(0x7f0000000100)=""/57, 0x39}], 0x3, &(0x7f0000000240)=[{&(0x7f0000012940)=""/102400, 0xffffff76}], 0x1, 0x0) perf_event_open(0x0, r4, 0x1, r3, 0x8) 07:02:42 executing program 3: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000040)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x300000c, 0x13, r0, 0x8000000) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xa) fork() (fail_nth: 13) 07:02:42 executing program 0: openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r0, 0x0, 0x0, 0x87ffffc) mmap$perf(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000008, 0x10, 0xffffffffffffffff, 0x4) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x12, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = syz_open_procfs(0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001240)={0x1, 0x80, 0x0, 0xa1, 0x0, 0x0, 0x0, 0x7, 0xa0400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x3, @perf_config_ext, 0x21, 0x1, 0x0, 0x0, 0x9, 0x0, 0x8000, 0x0, 0x80, 0x0, 0x5}, 0xffffffffffffffff, 0x4, r1, 0x0) r2 = gettid() process_vm_readv(r2, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/4078, 0xfee}, {&(0x7f0000000000)=""/123, 0x7b}, {&(0x7f0000000100)=""/57, 0x39}], 0x3, &(0x7f0000000240)=[{&(0x7f0000012940)=""/102400, 0xffffff76}], 0x1, 0x0) (fail_nth: 14) perf_event_open(0x0, r2, 0x1, r1, 0x8) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/consoles\x00', 0x0, 0x0) 07:02:42 executing program 2: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x204800, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x1) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002480)='fd/3\x00') fdatasync(0xffffffffffffffff) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x40}}, './file0\x00'}) preadv2(r2, &(0x7f0000001300)=[{&(0x7f0000000080)=""/193, 0xc1}, {&(0x7f0000000180)=""/250, 0xfa}, {&(0x7f0000000300)=""/4096, 0x1000}], 0x3, 0x80000000, 0x66, 0x18) openat(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r3, 0x0, 0x0, 0x87ffffc) (fail_nth: 11) [ 2466.434482] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12466 comm=syz-executor.4 [ 2466.445945] FAULT_INJECTION: forcing a failure. [ 2466.445945] name failslab, interval 1, probability 0, space 0, times 0 [ 2466.447424] CPU: 0 PID: 12471 Comm: syz-executor.2 Not tainted 5.18.0-rc1-next-20220406 #1 [ 2466.448428] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2466.449773] Call Trace: [ 2466.450078] [ 2466.450344] dump_stack_lvl+0x8b/0xb3 [ 2466.450821] should_fail.cold+0x5/0xa [ 2466.451276] ? ext4_mb_new_blocks+0x64b/0x4b60 [ 2466.451844] should_failslab+0x5/0x10 [ 2466.452305] kmem_cache_alloc+0x5b/0x480 [ 2466.452804] ext4_mb_new_blocks+0x64b/0x4b60 [ 2466.453342] ? lock_is_held_type+0xd7/0x130 [ 2466.453869] ? rcu_read_lock_sched_held+0x3a/0x70 [ 2466.454448] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2466.454479] FAULT_INJECTION: forcing a failure. [ 2466.454479] name failslab, interval 1, probability 0, space 0, times 0 [ 2466.455096] ? ext4_cache_extents+0x68/0x2d0 [ 2466.457974] ? ext4_discard_preallocations+0xe60/0xe60 [ 2466.458645] ? __sanitizer_cov_trace_const_cmp2+0x22/0x80 [ 2466.459341] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2466.460050] ? __sanitizer_cov_trace_const_cmp2+0x22/0x80 [ 2466.460730] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2466.461402] ? ext4_inode_to_goal_block+0x320/0x430 [ 2466.462039] ext4_ext_map_blocks+0x1fb0/0x5cd0 [ 2466.462611] ? lockdep_hardirqs_on+0x79/0x100 [ 2466.463176] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2466.463885] ? ext4_ext_release+0x10/0x10 [ 2466.464396] ? lock_acquire+0x1db/0x530 [ 2466.464896] ? lock_release+0x750/0x750 [ 2466.465389] ? io_schedule_timeout+0x140/0x140 [ 2466.465950] ? lock_is_held_type+0xd7/0x130 [ 2466.466494] ? __cond_resched+0x13/0x20 [ 2466.466994] ? down_write_killable+0x170/0x170 [ 2466.467563] ext4_map_blocks+0x652/0x1970 [ 2466.468098] ? lock_is_held_type+0xd7/0x130 [ 2466.468631] ? ext4_issue_zeroout+0x1c0/0x1c0 [ 2466.469201] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 2466.469884] ? jbd2__journal_start+0xf3/0x8d0 [ 2466.470454] ? __ext4_journal_start_sb+0x392/0x470 [ 2466.471050] ? __ext4_journal_start_sb+0x1d5/0x470 [ 2466.471664] ext4_alloc_file_blocks.isra.0+0x2c1/0xb20 [ 2466.472335] ? generic_update_time+0x21d/0x350 [ 2466.472915] ? ext4_ext_correct_indexes+0x440/0x440 [ 2466.473528] ? down_write_killable+0x170/0x170 [ 2466.474091] ext4_fallocate+0x1a2b/0x3c90 [ 2466.474597] ? lock_acquire+0x1b2/0x530 [ 2466.475085] ? lock_release+0x750/0x750 [ 2466.475580] ? ext4_ext_truncate+0x3e0/0x3e0 [ 2466.476135] ? lock_is_held_type+0xd7/0x130 [ 2466.476668] ? ext4_ext_truncate+0x3e0/0x3e0 [ 2466.477210] vfs_fallocate+0x489/0xe00 [ 2466.477703] __x64_sys_fallocate+0xcf/0x140 [ 2466.478240] do_syscall_64+0x3b/0x90 [ 2466.478695] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2466.479332] RIP: 0033:0x7fd845bccb19 [ 2466.479788] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2466.482042] RSP: 002b:00007fd843142188 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 2466.482955] RAX: ffffffffffffffda RBX: 00007fd845cdff60 RCX: 00007fd845bccb19 [ 2466.483810] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 2466.484651] RBP: 00007fd8431421d0 R08: 0000000000000000 R09: 0000000000000000 [ 2466.485490] R10: 00000000087ffffc R11: 0000000000000246 R12: 0000000000000002 [ 2466.486327] R13: 00007ffde12fa01f R14: 00007fd843142300 R15: 0000000000022000 [ 2466.487179] [ 2466.487453] CPU: 1 PID: 12476 Comm: syz-executor.3 Not tainted 5.18.0-rc1-next-20220406 #1 [ 2466.489506] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2466.492225] Call Trace: [ 2466.492841] [ 2466.493377] dump_stack_lvl+0x8b/0xb3 [ 2466.494335] should_fail.cold+0x5/0xa [ 2466.495207] ? create_object.isra.0+0x3a/0xa20 [ 2466.496478] should_failslab+0x5/0x10 [ 2466.497348] kmem_cache_alloc+0x5b/0x480 [ 2466.498467] create_object.isra.0+0x3a/0xa20 [ 2466.499468] ? kasan_unpoison+0x23/0x50 [ 2466.500394] __kmalloc_node+0x26f/0x470 [ 2466.501334] kvmalloc_node+0x3e/0x130 [ 2466.502228] alloc_fdtable+0xd3/0x280 [ 2466.503103] dup_fd+0x71e/0xca0 [ 2466.503901] copy_process+0x2039/0x6db0 [ 2466.504844] ? __cleanup_sighand+0xb0/0xb0 [ 2466.505846] ? lock_release+0x3b2/0x750 [ 2466.506750] ? ksys_write+0x20c/0x250 [ 2466.507622] ? kernel_clone+0x2f8/0xa60 [ 2466.508542] kernel_clone+0xe7/0xa60 [ 2466.509412] ? find_held_lock+0x2c/0x110 [ 2466.510328] ? create_io_thread+0xf0/0xf0 [ 2466.511283] ? __mutex_unlock_slowpath+0x15c/0x5e0 [ 2466.512417] ? bit_wait_io_timeout+0x160/0x160 [ 2466.513574] ? lock_is_held_type+0xd7/0x130 [ 2466.514586] __do_sys_fork+0x8a/0xc0 [ 2466.515444] ? kernel_clone+0xa60/0xa60 [ 2466.516365] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 2466.517643] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2466.518805] ? lockdep_hardirqs_on+0x79/0x100 [ 2466.519821] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2466.520964] do_syscall_64+0x3b/0x90 [ 2466.521815] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2466.522957] RIP: 0033:0x7fc1c2a89b19 07:02:42 executing program 2: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x204800, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x1) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002480)='fd/3\x00') fdatasync(0xffffffffffffffff) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x40}}, './file0\x00'}) preadv2(r2, &(0x7f0000001300)=[{&(0x7f0000000080)=""/193, 0xc1}, {&(0x7f0000000180)=""/250, 0xfa}, {&(0x7f0000000300)=""/4096, 0x1000}], 0x3, 0x80000000, 0x66, 0x18) openat(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r3, 0x0, 0x0, 0x87ffffc) (fail_nth: 12) [ 2466.523824] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2466.528070] RSP: 002b:00007fc1bffff188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 2466.529752] RAX: ffffffffffffffda RBX: 00007fc1c2b9cf60 RCX: 00007fc1c2a89b19 [ 2466.531351] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2466.532661] FAULT_INJECTION: forcing a failure. [ 2466.532661] name failslab, interval 1, probability 0, space 0, times 0 [ 2466.532935] RBP: 00007fc1bffff1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2466.535783] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2466.537351] R13: 00007fff0449096f R14: 00007fc1bffff300 R15: 0000000000022000 [ 2466.538935] [ 2466.539453] CPU: 0 PID: 12479 Comm: syz-executor.2 Not tainted 5.18.0-rc1-next-20220406 #1 [ 2466.540423] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2466.541743] Call Trace: [ 2466.542028] [ 2466.542284] dump_stack_lvl+0x8b/0xb3 [ 2466.542729] should_fail.cold+0x5/0xa [ 2466.543188] ? create_object.isra.0+0x3a/0xa20 [ 2466.543722] should_failslab+0x5/0x10 [ 2466.544168] kmem_cache_alloc+0x5b/0x480 [ 2466.544631] create_object.isra.0+0x3a/0xa20 [ 2466.545142] ? kasan_unpoison+0x23/0x50 [ 2466.545596] kmem_cache_alloc+0x239/0x480 [ 2466.546095] ext4_mb_new_blocks+0x64b/0x4b60 [ 2466.546596] ? lock_is_held_type+0xd7/0x130 [ 2466.547106] ? rcu_read_lock_sched_held+0x3a/0x70 [ 2466.547663] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2466.548325] ? ext4_cache_extents+0x68/0x2d0 [ 2466.548822] ? ext4_discard_preallocations+0xe60/0xe60 [ 2466.549430] ? __sanitizer_cov_trace_const_cmp2+0x22/0x80 [ 2466.550052] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2466.550677] ? __sanitizer_cov_trace_const_cmp2+0x22/0x80 [ 2466.551294] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2466.551931] ? ext4_inode_to_goal_block+0x320/0x430 [ 2466.552513] ext4_ext_map_blocks+0x1fb0/0x5cd0 [ 2466.553050] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 2466.553653] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 2466.554272] ? ext4_ext_release+0x10/0x10 [ 2466.554742] ? lock_release+0x750/0x750 [ 2466.555202] ? lock_is_held_type+0xd7/0x130 [ 2466.555714] ? down_write_killable+0x170/0x170 [ 2466.556254] ext4_map_blocks+0x652/0x1970 [ 2466.556727] ? lock_is_held_type+0xd7/0x130 [ 2466.557239] ? ext4_issue_zeroout+0x1c0/0x1c0 [ 2466.557746] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 2466.558387] ? jbd2__journal_start+0xf3/0x8d0 [ 2466.558901] ? __ext4_journal_start_sb+0x392/0x470 [ 2466.559463] ? __ext4_journal_start_sb+0x1d5/0x470 [ 2466.560019] ext4_alloc_file_blocks.isra.0+0x2c1/0xb20 [ 2466.560617] ? generic_update_time+0x21d/0x350 [ 2466.561139] ? ext4_ext_correct_indexes+0x440/0x440 [ 2466.561719] ? down_write_killable+0x170/0x170 [ 2466.562232] ext4_fallocate+0x1a2b/0x3c90 [ 2466.562716] ? lock_acquire+0x1b2/0x530 [ 2466.563162] ? lock_release+0x750/0x750 [ 2466.563659] ? ext4_ext_truncate+0x3e0/0x3e0 [ 2466.564163] ? lock_is_held_type+0xd7/0x130 [ 2466.564682] ? ext4_ext_truncate+0x3e0/0x3e0 [ 2466.565173] vfs_fallocate+0x489/0xe00 [ 2466.565633] __x64_sys_fallocate+0xcf/0x140 [ 2466.566115] do_syscall_64+0x3b/0x90 [ 2466.566555] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2466.567134] RIP: 0033:0x7fd845bccb19 [ 2466.567565] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2466.569658] RSP: 002b:00007fd843142188 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 2466.570531] RAX: ffffffffffffffda RBX: 00007fd845cdff60 RCX: 00007fd845bccb19 [ 2466.571350] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 2466.572168] RBP: 00007fd8431421d0 R08: 0000000000000000 R09: 0000000000000000 [ 2466.572977] R10: 00000000087ffffc R11: 0000000000000246 R12: 0000000000000002 [ 2466.573778] R13: 00007ffde12fa01f R14: 00007fd843142300 R15: 0000000000022000 [ 2466.574591] [ 2466.576032] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12480 comm=syz-executor.4 [ 2466.584683] FAULT_INJECTION: forcing a failure. [ 2466.584683] name failslab, interval 1, probability 0, space 0, times 0 [ 2466.587464] CPU: 1 PID: 12470 Comm: syz-executor.5 Not tainted 5.18.0-rc1-next-20220406 #1 [ 2466.589229] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2466.591578] Call Trace: [ 2466.592151] [ 2466.592614] dump_stack_lvl+0x8b/0xb3 [ 2466.593431] should_fail.cold+0x5/0xa [ 2466.594255] ? ext4_mb_new_blocks+0x64b/0x4b60 [ 2466.595222] should_failslab+0x5/0x10 [ 2466.596034] kmem_cache_alloc+0x5b/0x480 [ 2466.596915] ext4_mb_new_blocks+0x64b/0x4b60 [ 2466.597863] ? lock_is_held_type+0xd7/0x130 [ 2466.598816] ? rcu_read_lock_sched_held+0x3a/0x70 [ 2466.599858] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2466.601051] ? ext4_cache_extents+0x68/0x2d0 [ 2466.601977] ? ext4_discard_preallocations+0xe60/0xe60 [ 2466.603102] ? __sanitizer_cov_trace_const_cmp2+0x22/0x80 [ 2466.604282] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2466.605437] ? __sanitizer_cov_trace_const_cmp2+0x22/0x80 [ 2466.606605] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2466.607771] ? ext4_inode_to_goal_block+0x320/0x430 [ 2466.608854] ext4_ext_map_blocks+0x1fb0/0x5cd0 [ 2466.609832] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 2466.610952] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 2466.612117] ? ext4_ext_release+0x10/0x10 [ 2466.612986] ? lock_release+0x750/0x750 [ 2466.613823] ? lock_is_held_type+0xd7/0x130 [ 2466.614756] ? down_write_killable+0x170/0x170 [ 2466.615768] ext4_map_blocks+0x652/0x1970 [ 2466.616663] ? lock_is_held_type+0xd7/0x130 [ 2466.617491] FAULT_INJECTION: forcing a failure. [ 2466.617491] name failslab, interval 1, probability 0, space 0, times 0 [ 2466.619802] ? ext4_issue_zeroout+0x1c0/0x1c0 [ 2466.620747] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 2466.621886] ? jbd2__journal_start+0xf3/0x8d0 [ 2466.622812] ? __ext4_journal_start_sb+0x392/0x470 [ 2466.623839] ? __ext4_journal_start_sb+0x1d5/0x470 [ 2466.624853] ext4_alloc_file_blocks.isra.0+0x2c1/0xb20 [ 2466.625925] ? generic_update_time+0x21d/0x350 [ 2466.626879] ? ext4_ext_correct_indexes+0x440/0x440 [ 2466.627932] ? down_write_killable+0x170/0x170 [ 2466.628892] ext4_fallocate+0x1a2b/0x3c90 [ 2466.629750] ? lock_acquire+0x1b2/0x530 [ 2466.630574] ? lock_release+0x750/0x750 [ 2466.631418] ? ext4_ext_truncate+0x3e0/0x3e0 [ 2466.632348] ? lock_is_held_type+0xd7/0x130 [ 2466.633239] ? ext4_ext_truncate+0x3e0/0x3e0 [ 2466.634140] vfs_fallocate+0x489/0xe00 [ 2466.634944] __x64_sys_fallocate+0xcf/0x140 [ 2466.635861] do_syscall_64+0x3b/0x90 [ 2466.636633] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2466.637686] RIP: 0033:0x7f35817a9b19 [ 2466.638568] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2466.642258] RSP: 002b:00007f357ed1f188 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 2466.644159] RAX: ffffffffffffffda RBX: 00007f35818bcf60 RCX: 00007f35817a9b19 [ 2466.645785] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 2466.647307] RBP: 00007f357ed1f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2466.648831] R10: 00000000087ffffc R11: 0000000000000246 R12: 0000000000000002 [ 2466.650344] R13: 00007ffdd683fcbf R14: 00007f357ed1f300 R15: 0000000000022000 [ 2466.651912] [ 2466.652411] CPU: 0 PID: 12472 Comm: syz-executor.7 Not tainted 5.18.0-rc1-next-20220406 #1 [ 2466.653449] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2466.654668] Call Trace: [ 2466.654943] [ 2466.655198] dump_stack_lvl+0x8b/0xb3 [ 2466.655634] should_fail.cold+0x5/0xa [ 2466.656064] ? __es_insert_extent+0x3a9/0x12f0 [ 2466.656576] should_failslab+0x5/0x10 [ 2466.657009] kmem_cache_alloc+0x5b/0x480 [ 2466.657473] __es_insert_extent+0x3a9/0x12f0 [ 2466.657976] ext4_es_insert_extent+0x2dc/0xbf0 [ 2466.658490] ? ext4_es_scan_clu+0x2e0/0x2e0 [ 2466.658965] ? _raw_read_unlock+0x24/0x40 [ 2466.659437] ? ext4_es_scan_range+0x116/0x240 [ 2466.659968] ? ext4_es_find_extent_range+0x570/0x570 [ 2466.660533] ? down_write_killable+0x170/0x170 [ 2466.661047] ext4_map_blocks+0x8e1/0x1970 [ 2466.661525] ? ext4_issue_zeroout+0x1c0/0x1c0 [ 2466.662030] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 2466.662651] ? jbd2__journal_start+0xf3/0x8d0 [ 2466.663140] ? __ext4_journal_start_sb+0x392/0x470 [ 2466.663692] ? __ext4_journal_start_sb+0x1d5/0x470 [ 2466.664243] ext4_alloc_file_blocks.isra.0+0x2c1/0xb20 [ 2466.664821] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2466.665440] ? ext4_ext_correct_indexes+0x440/0x440 [ 2466.665997] ? down_write_killable+0x170/0x170 [ 2466.666521] ext4_fallocate+0x1a2b/0x3c90 [ 2466.666986] ? lock_acquire+0x1b2/0x530 [ 2466.667441] ? lock_release+0x750/0x750 [ 2466.667907] ? ext4_ext_truncate+0x3e0/0x3e0 [ 2466.668411] ? lock_is_held_type+0xd7/0x130 [ 2466.668898] ? ext4_ext_truncate+0x3e0/0x3e0 [ 2466.669390] vfs_fallocate+0x489/0xe00 [ 2466.669833] __x64_sys_fallocate+0xcf/0x140 [ 2466.670319] do_syscall_64+0x3b/0x90 [ 2466.670737] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2466.671288] RIP: 0033:0x7fdba5ddfb19 [ 2466.671707] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2466.673682] RSP: 002b:00007fdba3355188 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 2466.674530] RAX: ffffffffffffffda RBX: 00007fdba5ef2f60 RCX: 00007fdba5ddfb19 [ 2466.675314] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 2466.676117] RBP: 00007fdba33551d0 R08: 0000000000000000 R09: 0000000000000000 [ 2466.676912] R10: 00000000087ffffc R11: 0000000000000246 R12: 0000000000000002 [ 2466.677713] R13: 00007ffe895a664f R14: 00007fdba3355300 R15: 0000000000022000 [ 2466.678514] 07:02:42 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f00000001c0)=0x8) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x14, 0x0, 0x5900}, 0x14}}, 0x0) [ 2466.716687] FAULT_INJECTION: forcing a failure. [ 2466.716687] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2466.717966] CPU: 0 PID: 12477 Comm: syz-executor.0 Not tainted 5.18.0-rc1-next-20220406 #1 [ 2466.718924] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2466.720134] Call Trace: [ 2466.720426] [ 2466.720667] dump_stack_lvl+0x8b/0xb3 [ 2466.721085] should_fail.cold+0x5/0xa [ 2466.721533] copy_page_to_iter+0x722/0x1190 [ 2466.722035] process_vm_rw_core.constprop.0+0x5d7/0x9a0 [ 2466.722644] ? vmalloc_dump_obj+0x1a0/0x1a0 [ 2466.723149] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2466.723774] ? _copy_from_user+0xf2/0x170 [ 2466.724264] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 2466.724810] ? iovec_from_user+0x1fd/0x3c0 [ 2466.725296] ? import_iovec+0x83/0xb0 [ 2466.725714] process_vm_rw+0x1b6/0x260 [ 2466.726159] ? process_vm_rw_core.constprop.0+0x9a0/0x9a0 [ 2466.726748] ? ksys_write+0x20c/0x250 [ 2466.727180] ? lock_downgrade+0x6d0/0x6d0 [ 2466.727638] ? find_held_lock+0x2c/0x110 [ 2466.728117] ? __mutex_unlock_slowpath+0x15c/0x5e0 [ 2466.728688] ? bit_wait_io_timeout+0x160/0x160 [ 2466.729182] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2466.729807] ? vfs_write+0x422/0xac0 [ 2466.730213] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 2466.730835] ? fput+0x2a/0x50 [ 2466.731174] __x64_sys_process_vm_readv+0xdf/0x1b0 [ 2466.731738] ? lockdep_hardirqs_on+0x79/0x100 [ 2466.732223] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2466.732806] do_syscall_64+0x3b/0x90 [ 2466.733214] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2466.733807] RIP: 0033:0x7f1173378b19 [ 2466.734205] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2466.736266] RSP: 002b:00007f11708ee188 EFLAGS: 00000246 ORIG_RAX: 0000000000000136 [ 2466.737107] RAX: ffffffffffffffda RBX: 00007f117348bf60 RCX: 00007f1173378b19 [ 2466.737906] RDX: 0000000000000003 RSI: 00000000200000c0 RDI: 0000000000000325 [ 2466.738711] RBP: 00007f11708ee1d0 R08: 0000000000000001 R09: 0000000000000000 [ 2466.739512] R10: 0000000020000240 R11: 0000000000000246 R12: 0000000000000002 [ 2466.740332] R13: 00007ffeef59581f R14: 00007f11708ee300 R15: 0000000000022000 [ 2466.741133] 07:02:42 executing program 2: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x204800, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x1) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002480)='fd/3\x00') fdatasync(0xffffffffffffffff) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x40}}, './file0\x00'}) preadv2(r2, &(0x7f0000001300)=[{&(0x7f0000000080)=""/193, 0xc1}, {&(0x7f0000000180)=""/250, 0xfa}, {&(0x7f0000000300)=""/4096, 0x1000}], 0x3, 0x80000000, 0x66, 0x18) openat(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r3, 0x0, 0x0, 0x87ffffc) (fail_nth: 13) [ 2466.765902] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12488 comm=syz-executor.4 07:02:42 executing program 5: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) preadv(r0, &(0x7f00000011c0)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x7, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x0, 0x0, 0x87ffffc) (fail_nth: 12) mmap$perf(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000008, 0x1010, r2, 0x4) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000100), 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r3 = syz_open_procfs(0x0, 0x0) perf_event_open(&(0x7f0000001240)={0x1, 0x80, 0x9, 0xa1, 0xf9, 0x3, 0x0, 0x7, 0xa0400, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x3, @perf_config_ext={0x58d}, 0x21, 0x1, 0x0, 0x6, 0x9, 0x0, 0x8000, 0x0, 0x80, 0x0, 0x5}, 0xffffffffffffffff, 0x4, r3, 0x0) r4 = gettid() perf_event_open(0x0, r4, 0x1, r3, 0x8) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/consoles\x00', 0x0, 0x0) 07:02:42 executing program 6: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) preadv(r0, &(0x7f00000011c0)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x7, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x0, 0x0, 0x87ffffc) mmap$perf(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000008, 0x1010, r2, 0x4) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000100), 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r3 = syz_open_procfs(0x0, 0x0) perf_event_open(&(0x7f0000001240)={0x1, 0x80, 0x9, 0xa1, 0xf9, 0x3, 0x0, 0x7, 0xa0400, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x3, @perf_config_ext={0x58d}, 0x21, 0x1, 0x0, 0x6, 0x9, 0x0, 0x8000, 0x0, 0x80, 0x0, 0x5}, 0xffffffffffffffff, 0x4, r3, 0x0) r4 = gettid() process_vm_readv(r4, 0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000012940)=""/102400, 0x19000}], 0x1, 0x0) perf_event_open(0x0, r4, 0x1, r3, 0x8) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/consoles\x00', 0x0, 0x0) [ 2466.795126] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12489 comm=syz-executor.4 [ 2466.820724] FAULT_INJECTION: forcing a failure. [ 2466.820724] name failslab, interval 1, probability 0, space 0, times 0 [ 2466.822175] CPU: 0 PID: 12491 Comm: syz-executor.2 Not tainted 5.18.0-rc1-next-20220406 #1 [ 2466.823115] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2466.824385] Call Trace: [ 2466.824671] [ 2466.824920] dump_stack_lvl+0x8b/0xb3 [ 2466.825365] should_fail.cold+0x5/0xa [ 2466.825797] ? ext4_mb_new_blocks+0x222c/0x4b60 [ 2466.826328] should_failslab+0x5/0x10 [ 2466.826759] kmem_cache_alloc+0x5b/0x480 [ 2466.827226] ext4_mb_new_blocks+0x222c/0x4b60 [ 2466.827748] ? lock_is_held_type+0xd7/0x130 [ 2466.828241] ? rcu_read_lock_sched_held+0x3a/0x70 [ 2466.828784] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2466.829408] ? ext4_cache_extents+0x68/0x2d0 [ 2466.829887] ? ext4_discard_preallocations+0xe60/0xe60 [ 2466.830481] ? __sanitizer_cov_trace_const_cmp2+0x22/0x80 [ 2466.831093] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2466.831723] ? __sanitizer_cov_trace_const_cmp2+0x22/0x80 [ 2466.832344] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2466.832961] ? ext4_inode_to_goal_block+0x320/0x430 [ 2466.833532] ext4_ext_map_blocks+0x1fb0/0x5cd0 [ 2466.834053] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 2466.834646] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 2466.835237] ? ext4_ext_release+0x10/0x10 [ 2466.835705] ? lock_release+0x750/0x750 [ 2466.836163] ? lock_is_held_type+0xd7/0x130 [ 2466.836664] ? down_write_killable+0x170/0x170 [ 2466.837166] ext4_map_blocks+0x652/0x1970 [ 2466.837643] ? lock_is_held_type+0xd7/0x130 [ 2466.838127] ? ext4_issue_zeroout+0x1c0/0x1c0 [ 2466.838633] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 2466.839253] ? jbd2__journal_start+0xf3/0x8d0 [ 2466.839769] ? __ext4_journal_start_sb+0x392/0x470 [ 2466.840316] ? __ext4_journal_start_sb+0x1d5/0x470 [ 2466.840872] ext4_alloc_file_blocks.isra.0+0x2c1/0xb20 [ 2466.841457] ? generic_update_time+0x21d/0x350 [ 2466.841971] ? ext4_ext_correct_indexes+0x440/0x440 [ 2466.842534] ? down_write_killable+0x170/0x170 [ 2466.843048] ext4_fallocate+0x1a2b/0x3c90 [ 2466.843513] ? lock_acquire+0x1b2/0x530 [ 2466.843953] ? lock_release+0x750/0x750 [ 2466.844412] ? ext4_ext_truncate+0x3e0/0x3e0 [ 2466.844903] ? lock_is_held_type+0xd7/0x130 [ 2466.845389] ? ext4_ext_truncate+0x3e0/0x3e0 [ 2466.845876] vfs_fallocate+0x489/0xe00 [ 2466.846326] __x64_sys_fallocate+0xcf/0x140 [ 2466.846818] do_syscall_64+0x3b/0x90 [ 2466.847242] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2466.847831] RIP: 0033:0x7fd845bccb19 [ 2466.848232] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2466.850285] RSP: 002b:00007fd843142188 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 2466.851128] RAX: ffffffffffffffda RBX: 00007fd845cdff60 RCX: 00007fd845bccb19 [ 2466.851938] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 2466.852733] RBP: 00007fd8431421d0 R08: 0000000000000000 R09: 0000000000000000 [ 2466.853522] R10: 00000000087ffffc R11: 0000000000000246 R12: 0000000000000002 [ 2466.854316] R13: 00007ffde12fa01f R14: 00007fd843142300 R15: 0000000000022000 [ 2466.855122] 07:02:42 executing program 1: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) preadv(r0, &(0x7f00000011c0)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x7, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x0, 0x0, 0x87ffffc) mmap$perf(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000008, 0x1010, r2, 0x4) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000100), 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r3 = syz_open_procfs(0x0, 0x0) preadv(r3, &(0x7f0000000080)=[{&(0x7f0000000000)=""/40, 0x40}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000001240)={0x1, 0x80, 0x9, 0xa1, 0xf9, 0x3, 0x0, 0x7, 0xa0400, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x3, @perf_config_ext={0x58d}, 0x21, 0x1, 0x0, 0x6, 0x9, 0x0, 0x8000, 0x0, 0x80, 0x0, 0x5}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x0) r4 = gettid() process_vm_readv(r4, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/4078, 0xfee}, {&(0x7f0000000000)=""/123, 0x7b}, {&(0x7f0000000100)=""/57, 0x39}], 0x3, &(0x7f0000000240)=[{&(0x7f0000012940)=""/102400, 0xffffff76}], 0x1, 0x0) perf_event_open(0x0, r4, 0x1, r3, 0x8) [ 2466.863010] FAULT_INJECTION: forcing a failure. [ 2466.863010] name failslab, interval 1, probability 0, space 0, times 0 [ 2466.864413] CPU: 0 PID: 12493 Comm: syz-executor.5 Not tainted 5.18.0-rc1-next-20220406 #1 [ 2466.865343] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2466.866594] Call Trace: [ 2466.866877] [ 2466.867125] dump_stack_lvl+0x8b/0xb3 [ 2466.867552] should_fail.cold+0x5/0xa [ 2466.867984] ? create_object.isra.0+0x3a/0xa20 [ 2466.868490] should_failslab+0x5/0x10 [ 2466.868915] kmem_cache_alloc+0x5b/0x480 [ 2466.869372] create_object.isra.0+0x3a/0xa20 [ 2466.869856] ? kasan_unpoison+0x23/0x50 [ 2466.870299] kmem_cache_alloc+0x239/0x480 [ 2466.870775] ext4_mb_new_blocks+0x64b/0x4b60 [ 2466.871268] ? lock_is_held_type+0xd7/0x130 [ 2466.871752] ? rcu_read_lock_sched_held+0x3a/0x70 [ 2466.872295] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2466.872903] ? ext4_cache_extents+0x68/0x2d0 [ 2466.873387] ? ext4_discard_preallocations+0xe60/0xe60 [ 2466.873962] ? __sanitizer_cov_trace_const_cmp2+0x22/0x80 [ 2466.874575] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2466.875189] ? __sanitizer_cov_trace_const_cmp2+0x22/0x80 [ 2466.875812] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2466.876426] ? ext4_inode_to_goal_block+0x320/0x430 [ 2466.876996] ext4_ext_map_blocks+0x1fb0/0x5cd0 [ 2466.877512] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 2466.878093] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 2466.878686] ? ext4_ext_release+0x10/0x10 [ 2466.879156] ? lock_release+0x750/0x750 [ 2466.879605] ? lock_is_held_type+0xd7/0x130 [ 2466.880103] ? down_write_killable+0x170/0x170 [ 2466.880624] ext4_map_blocks+0x652/0x1970 [ 2466.881100] ? lock_is_held_type+0xd7/0x130 [ 2466.881588] ? ext4_issue_zeroout+0x1c0/0x1c0 [ 2466.882087] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 2466.882699] ? jbd2__journal_start+0xf3/0x8d0 [ 2466.883204] ? __ext4_journal_start_sb+0x392/0x470 [ 2466.883729] ? __ext4_journal_start_sb+0x1d5/0x470 [ 2466.884267] ext4_alloc_file_blocks.isra.0+0x2c1/0xb20 [ 2466.884856] ? generic_update_time+0x21d/0x350 [ 2466.885360] ? ext4_ext_correct_indexes+0x440/0x440 [ 2466.885923] ? down_write_killable+0x170/0x170 [ 2466.886427] ext4_fallocate+0x1a2b/0x3c90 [ 2466.886895] ? lock_acquire+0x1b2/0x530 [ 2466.887335] ? lock_release+0x750/0x750 [ 2466.887791] ? ext4_ext_truncate+0x3e0/0x3e0 [ 2466.888280] ? lock_is_held_type+0xd7/0x130 [ 2466.888769] ? ext4_ext_truncate+0x3e0/0x3e0 [ 2466.889257] vfs_fallocate+0x489/0xe00 [ 2466.889705] __x64_sys_fallocate+0xcf/0x140 [ 2466.890193] do_syscall_64+0x3b/0x90 [ 2466.890612] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2466.891187] RIP: 0033:0x7f35817a9b19 [ 2466.891601] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2466.893584] RSP: 002b:00007f357ed1f188 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 2466.894435] RAX: ffffffffffffffda RBX: 00007f35818bcf60 RCX: 00007f35817a9b19 [ 2466.895227] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 2466.896027] RBP: 00007f357ed1f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2466.896822] R10: 00000000087ffffc R11: 0000000000000246 R12: 0000000000000002 [ 2466.897612] R13: 00007ffdd683fcbf R14: 00007f357ed1f300 R15: 0000000000022000 [ 2466.898425] 07:02:42 executing program 7: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000001340)) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x204800, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x1) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002480)='fd/3\x00') r2 = dup(r1) fdatasync(r2) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x40}}, './file0\x00'}) preadv2(r3, &(0x7f0000001300)=[{&(0x7f0000000080)=""/193, 0xc1}, {&(0x7f0000000180)=""/250, 0xfa}, {&(0x7f0000000300)=""/4096, 0x1000}], 0x3, 0x80000000, 0x66, 0x18) r4 = openat(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000001380)=0x100000) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r5, 0x0, 0x0, 0x87ffffc) (fail_nth: 14) sendfile(r5, r4, 0x0, 0x80000000) 07:02:42 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f00000001c0)=0x8) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x14, 0x0, 0x5a00}, 0x14}}, 0x0) 07:02:42 executing program 3: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000040)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x300000c, 0x13, r0, 0x8000000) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xa) fork() (fail_nth: 14) 07:02:42 executing program 2: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x204800, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x1) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002480)='fd/3\x00') fdatasync(0xffffffffffffffff) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x40}}, './file0\x00'}) preadv2(r2, &(0x7f0000001300)=[{&(0x7f0000000080)=""/193, 0xc1}, {&(0x7f0000000180)=""/250, 0xfa}, {&(0x7f0000000300)=""/4096, 0x1000}], 0x3, 0x80000000, 0x66, 0x18) openat(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r3, 0x0, 0x0, 0x87ffffc) (fail_nth: 14) [ 2467.018719] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12507 comm=syz-executor.4 [ 2467.024917] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12508 comm=syz-executor.4 [ 2467.036021] FAULT_INJECTION: forcing a failure. [ 2467.036021] name failslab, interval 1, probability 0, space 0, times 0 [ 2467.037354] CPU: 0 PID: 12509 Comm: syz-executor.2 Not tainted 5.18.0-rc1-next-20220406 #1 [ 2467.037448] FAULT_INJECTION: forcing a failure. [ 2467.037448] name failslab, interval 1, probability 0, space 0, times 0 [ 2467.038243] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2467.038255] Call Trace: [ 2467.038259] [ 2467.038265] dump_stack_lvl+0x8b/0xb3 [ 2467.038290] should_fail.cold+0x5/0xa [ 2467.038306] ? create_object.isra.0+0x3a/0xa20 [ 2467.038327] should_failslab+0x5/0x10 [ 2467.038348] kmem_cache_alloc+0x5b/0x480 [ 2467.038374] create_object.isra.0+0x3a/0xa20 [ 2467.038389] ? kasan_unpoison+0x23/0x50 [ 2467.038409] kmem_cache_alloc+0x239/0x480 [ 2467.045956] ext4_mb_new_blocks+0x222c/0x4b60 [ 2467.046457] ? lock_is_held_type+0xd7/0x130 [ 2467.046934] ? rcu_read_lock_sched_held+0x3a/0x70 [ 2467.047493] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2467.048096] ? ext4_cache_extents+0x68/0x2d0 [ 2467.048570] ? ext4_discard_preallocations+0xe60/0xe60 [ 2467.049139] ? __sanitizer_cov_trace_const_cmp2+0x22/0x80 [ 2467.049738] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2467.050342] ? __sanitizer_cov_trace_const_cmp2+0x22/0x80 [ 2467.050944] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2467.051544] ? ext4_inode_to_goal_block+0x320/0x430 [ 2467.052134] ext4_ext_map_blocks+0x1fb0/0x5cd0 [ 2467.052655] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 2467.053222] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 2467.053815] ? ext4_ext_release+0x10/0x10 [ 2467.054266] ? lock_release+0x750/0x750 [ 2467.054718] ? lock_is_held_type+0xd7/0x130 [ 2467.055214] ? down_write_killable+0x170/0x170 [ 2467.055738] ext4_map_blocks+0x652/0x1970 [ 2467.056203] ? lock_is_held_type+0xd7/0x130 [ 2467.056691] ? ext4_issue_zeroout+0x1c0/0x1c0 [ 2467.057180] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 2467.057798] ? jbd2__journal_start+0xf3/0x8d0 [ 2467.058289] ? __ext4_journal_start_sb+0x392/0x470 [ 2467.058830] ? __ext4_journal_start_sb+0x1d5/0x470 [ 2467.059380] ext4_alloc_file_blocks.isra.0+0x2c1/0xb20 [ 2467.059961] ? generic_update_time+0x21d/0x350 [ 2467.060464] ? ext4_ext_correct_indexes+0x440/0x440 [ 2467.061012] ? down_write_killable+0x170/0x170 [ 2467.061519] ext4_fallocate+0x1a2b/0x3c90 [ 2467.061973] ? lock_acquire+0x1b2/0x530 [ 2467.062414] ? lock_release+0x750/0x750 [ 2467.062852] ? ext4_ext_truncate+0x3e0/0x3e0 [ 2467.063340] ? lock_is_held_type+0xd7/0x130 [ 2467.063836] ? ext4_ext_truncate+0x3e0/0x3e0 [ 2467.064331] vfs_fallocate+0x489/0xe00 [ 2467.064778] __x64_sys_fallocate+0xcf/0x140 [ 2467.065262] do_syscall_64+0x3b/0x90 [ 2467.065680] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2467.066257] RIP: 0033:0x7fd845bccb19 [ 2467.066668] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2467.068674] RSP: 002b:00007fd843142188 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 2467.069512] RAX: ffffffffffffffda RBX: 00007fd845cdff60 RCX: 00007fd845bccb19 [ 2467.070297] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 2467.071081] RBP: 00007fd8431421d0 R08: 0000000000000000 R09: 0000000000000000 [ 2467.071870] R10: 00000000087ffffc R11: 0000000000000246 R12: 0000000000000002 [ 2467.072664] R13: 00007ffde12fa01f R14: 00007fd843142300 R15: 0000000000022000 [ 2467.073470] [ 2467.073720] CPU: 1 PID: 12501 Comm: syz-executor.7 Not tainted 5.18.0-rc1-next-20220406 #1 [ 2467.075490] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2467.077896] Call Trace: [ 2467.078499] [ 2467.078977] dump_stack_lvl+0x8b/0xb3 [ 2467.079822] should_fail.cold+0x5/0xa [ 2467.080639] ? create_object.isra.0+0x3a/0xa20 [ 2467.081632] should_failslab+0x5/0x10 [ 2467.082461] kmem_cache_alloc+0x5b/0x480 [ 2467.083356] create_object.isra.0+0x3a/0xa20 [ 2467.084328] ? kasan_unpoison+0x23/0x50 [ 2467.085194] kmem_cache_alloc+0x239/0x480 [ 2467.086104] ext4_mb_new_blocks+0x222c/0x4b60 [ 2467.087077] ? lock_is_held_type+0xd7/0x130 [ 2467.088010] ? rcu_read_lock_sched_held+0x3a/0x70 [ 2467.089344] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2467.090857] ? ext4_cache_extents+0x68/0x2d0 [ 2467.091862] ? ext4_discard_preallocations+0xe60/0xe60 [ 2467.092995] ? __sanitizer_cov_trace_const_cmp2+0x22/0x80 [ 2467.094193] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 07:02:42 executing program 5: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) preadv(r0, &(0x7f00000011c0)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x7, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x0, 0x0, 0x87ffffc) (fail_nth: 13) mmap$perf(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000008, 0x1010, r2, 0x4) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000100), 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r3 = syz_open_procfs(0x0, 0x0) perf_event_open(&(0x7f0000001240)={0x1, 0x80, 0x9, 0xa1, 0xf9, 0x3, 0x0, 0x7, 0xa0400, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x3, @perf_config_ext={0x58d}, 0x21, 0x1, 0x0, 0x6, 0x9, 0x0, 0x8000, 0x0, 0x80, 0x0, 0x5}, 0xffffffffffffffff, 0x4, r3, 0x0) r4 = gettid() perf_event_open(0x0, r4, 0x1, r3, 0x8) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/consoles\x00', 0x0, 0x0) [ 2467.095369] ? __sanitizer_cov_trace_const_cmp2+0x22/0x80 [ 2467.096977] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2467.098138] ? ext4_inode_to_goal_block+0x320/0x430 [ 2467.099210] ext4_ext_map_blocks+0x1fb0/0x5cd0 [ 2467.100412] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 2467.101521] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 2467.102775] ? ext4_ext_release+0x10/0x10 [ 2467.103654] ? lock_release+0x750/0x750 [ 2467.104514] ? lock_is_held_type+0xd7/0x130 [ 2467.105453] ? down_write_killable+0x170/0x170 [ 2467.106451] ext4_map_blocks+0x652/0x1970 [ 2467.107346] ? lock_is_held_type+0xd7/0x130 [ 2467.108284] ? ext4_issue_zeroout+0x1c0/0x1c0 [ 2467.109266] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 2467.110438] ? jbd2__journal_start+0xf3/0x8d0 [ 2467.111406] ? __ext4_journal_start_sb+0x392/0x470 [ 2467.112451] ? __ext4_journal_start_sb+0x1d5/0x470 [ 2467.113534] ext4_alloc_file_blocks.isra.0+0x2c1/0xb20 [ 2467.114638] ? generic_update_time+0x21d/0x350 [ 2467.115642] ? ext4_ext_correct_indexes+0x440/0x440 [ 2467.116719] ? down_write_killable+0x170/0x170 [ 2467.117715] ext4_fallocate+0x1a2b/0x3c90 [ 2467.118590] ? lock_acquire+0x1b2/0x530 [ 2467.119214] FAULT_INJECTION: forcing a failure. [ 2467.119214] name failslab, interval 1, probability 0, space 0, times 0 [ 2467.119461] ? lock_release+0x750/0x750 [ 2467.119507] ? ext4_ext_truncate+0x3e0/0x3e0 [ 2467.122466] ? lock_is_held_type+0xd7/0x130 [ 2467.123388] ? ext4_ext_truncate+0x3e0/0x3e0 [ 2467.124342] vfs_fallocate+0x489/0xe00 [ 2467.125183] __x64_sys_fallocate+0xcf/0x140 [ 2467.126107] do_syscall_64+0x3b/0x90 [ 2467.126891] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2467.127994] RIP: 0033:0x7fdba5ddfb19 [ 2467.128788] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2467.132662] RSP: 002b:00007fdba3355188 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 2467.134266] RAX: ffffffffffffffda RBX: 00007fdba5ef2f60 RCX: 00007fdba5ddfb19 [ 2467.135762] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 2467.137265] RBP: 00007fdba33551d0 R08: 0000000000000000 R09: 0000000000000000 [ 2467.138743] R10: 00000000087ffffc R11: 0000000000000246 R12: 0000000000000002 [ 2467.140242] R13: 00007ffe895a664f R14: 00007fdba3355300 R15: 0000000000022000 [ 2467.141761] [ 2467.142268] CPU: 0 PID: 12511 Comm: syz-executor.5 Not tainted 5.18.0-rc1-next-20220406 #1 [ 2467.143213] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2467.144491] Call Trace: [ 2467.144777] [ 2467.145027] dump_stack_lvl+0x8b/0xb3 [ 2467.145470] should_fail.cold+0x5/0xa [ 2467.145898] ? ext4_mb_new_blocks+0x222c/0x4b60 [ 2467.146432] should_failslab+0x5/0x10 [ 2467.146863] kmem_cache_alloc+0x5b/0x480 [ 2467.147329] ext4_mb_new_blocks+0x222c/0x4b60 [ 2467.147845] ? lock_is_held_type+0xd7/0x130 [ 2467.148330] ? rcu_read_lock_sched_held+0x3a/0x70 [ 2467.148886] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2467.149509] ? ext4_cache_extents+0x68/0x2d0 [ 2467.150003] ? ext4_discard_preallocations+0xe60/0xe60 [ 2467.150592] ? __sanitizer_cov_trace_const_cmp2+0x22/0x80 [ 2467.151220] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2467.151861] ? __sanitizer_cov_trace_const_cmp2+0x22/0x80 [ 2467.152493] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2467.153310] ? ext4_inode_to_goal_block+0x320/0x430 [ 2467.153898] ext4_ext_map_blocks+0x1fb0/0x5cd0 [ 2467.154421] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 2467.155037] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 2467.155657] ? ext4_ext_release+0x10/0x10 [ 2467.156139] ? lock_release+0x750/0x750 [ 2467.156594] ? lock_is_held_type+0xd7/0x130 [ 2467.157101] ? down_write_killable+0x170/0x170 [ 2467.157635] ext4_map_blocks+0x652/0x1970 [ 2467.158119] ? lock_is_held_type+0xd7/0x130 [ 2467.158616] ? ext4_issue_zeroout+0x1c0/0x1c0 [ 2467.159127] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 2467.159767] ? jbd2__journal_start+0xf3/0x8d0 [ 2467.160281] ? __ext4_journal_start_sb+0x392/0x470 [ 2467.160830] ? __ext4_journal_start_sb+0x1d5/0x470 [ 2467.161389] ext4_alloc_file_blocks.isra.0+0x2c1/0xb20 [ 2467.161500] FAULT_INJECTION: forcing a failure. [ 2467.161500] name failslab, interval 1, probability 0, space 0, times 0 [ 2467.161974] ? generic_update_time+0x21d/0x350 [ 2467.165374] ? ext4_ext_correct_indexes+0x440/0x440 [ 2467.165906] ? down_write_killable+0x170/0x170 [ 2467.166440] ext4_fallocate+0x1a2b/0x3c90 [ 2467.166885] ? lock_acquire+0x1b2/0x530 [ 2467.167350] ? lock_release+0x750/0x750 [ 2467.167784] ? ext4_ext_truncate+0x3e0/0x3e0 [ 2467.168292] ? lock_is_held_type+0xd7/0x130 [ 2467.168756] ? ext4_ext_truncate+0x3e0/0x3e0 [ 2467.169270] vfs_fallocate+0x489/0xe00 [ 2467.169705] __x64_sys_fallocate+0xcf/0x140 [ 2467.170200] do_syscall_64+0x3b/0x90 [ 2467.170606] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2467.171203] RIP: 0033:0x7f35817a9b19 [ 2467.171609] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2467.173722] RSP: 002b:00007f357ed1f188 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 2467.174530] RAX: ffffffffffffffda RBX: 00007f35818bcf60 RCX: 00007f35817a9b19 [ 2467.175341] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 2467.176166] RBP: 00007f357ed1f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2467.176985] R10: 00000000087ffffc R11: 0000000000000246 R12: 0000000000000002 [ 2467.177794] R13: 00007ffdd683fcbf R14: 00007f357ed1f300 R15: 0000000000022000 [ 2467.178621] [ 2467.178892] CPU: 1 PID: 12505 Comm: syz-executor.3 Not tainted 5.18.0-rc1-next-20220406 #1 [ 2467.180686] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2467.183057] Call Trace: [ 2467.183601] [ 2467.184100] dump_stack_lvl+0x8b/0xb3 [ 2467.184916] should_fail.cold+0x5/0xa [ 2467.185732] ? kvmalloc_node+0x3e/0x130 [ 2467.186598] should_failslab+0x5/0x10 [ 2467.187421] __kmalloc_node+0x76/0x470 [ 2467.188291] kvmalloc_node+0x3e/0x130 [ 2467.189271] alloc_fdtable+0x13f/0x280 [ 2467.190112] dup_fd+0x71e/0xca0 [ 2467.190979] copy_process+0x2039/0x6db0 [ 2467.191884] ? __cleanup_sighand+0xb0/0xb0 [ 2467.192985] ? lock_release+0x3b2/0x750 [ 2467.193840] ? ksys_write+0x20c/0x250 [ 2467.194811] ? kernel_clone+0x2f8/0xa60 [ 2467.195665] kernel_clone+0xe7/0xa60 [ 2467.196635] ? find_held_lock+0x2c/0x110 [ 2467.197501] ? create_io_thread+0xf0/0xf0 [ 2467.198566] ? __mutex_unlock_slowpath+0x15c/0x5e0 [ 2467.199604] ? bit_wait_io_timeout+0x160/0x160 [ 2467.200776] ? lock_is_held_type+0xd7/0x130 [ 2467.201712] __do_sys_fork+0x8a/0xc0 [ 2467.202675] ? kernel_clone+0xa60/0xa60 [ 2467.203527] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 2467.204980] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2467.206076] ? lockdep_hardirqs_on+0x79/0x100 [ 2467.207221] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2467.208331] do_syscall_64+0x3b/0x90 [ 2467.209287] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2467.210383] RIP: 0033:0x7fc1c2a89b19 [ 2467.211320] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2467.215334] RSP: 002b:00007fc1bffff188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 2467.217288] RAX: ffffffffffffffda RBX: 00007fc1c2b9cf60 RCX: 00007fc1c2a89b19 [ 2467.218793] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2467.220588] RBP: 00007fc1bffff1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2467.221986] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2467.223664] R13: 00007fff0449096f R14: 00007fc1bffff300 R15: 0000000000022000 [ 2467.225116] 07:02:59 executing program 7: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000001340)) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x204800, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x1) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002480)='fd/3\x00') r2 = dup(r1) fdatasync(r2) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x40}}, './file0\x00'}) preadv2(r3, &(0x7f0000001300)=[{&(0x7f0000000080)=""/193, 0xc1}, {&(0x7f0000000180)=""/250, 0xfa}, {&(0x7f0000000300)=""/4096, 0x1000}], 0x3, 0x80000000, 0x66, 0x18) r4 = openat(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000001380)=0x100000) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r5, 0x0, 0x0, 0x87ffffc) (fail_nth: 15) sendfile(r5, r4, 0x0, 0x80000000) 07:02:59 executing program 3: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000040)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x300000c, 0x13, r0, 0x8000000) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xa) fork() (fail_nth: 15) 07:02:59 executing program 5: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) preadv(r0, &(0x7f00000011c0)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x7, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x0, 0x0, 0x87ffffc) (fail_nth: 14) mmap$perf(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000008, 0x1010, r2, 0x4) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000100), 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r3 = syz_open_procfs(0x0, 0x0) perf_event_open(&(0x7f0000001240)={0x1, 0x80, 0x9, 0xa1, 0xf9, 0x3, 0x0, 0x7, 0xa0400, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x3, @perf_config_ext={0x58d}, 0x21, 0x1, 0x0, 0x6, 0x9, 0x0, 0x8000, 0x0, 0x80, 0x0, 0x5}, 0xffffffffffffffff, 0x4, r3, 0x0) r4 = gettid() perf_event_open(0x0, r4, 0x1, r3, 0x8) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/consoles\x00', 0x0, 0x0) 07:02:59 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f00000001c0)=0x8) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x14, 0x0, 0x5c00}, 0x14}}, 0x0) 07:02:59 executing program 0: openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r0, 0x0, 0x0, 0x87ffffc) mmap$perf(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000008, 0x10, 0xffffffffffffffff, 0x4) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x12, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = syz_open_procfs(0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001240)={0x1, 0x80, 0x0, 0xa1, 0x0, 0x0, 0x0, 0x7, 0xa0400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x3, @perf_config_ext, 0x21, 0x1, 0x0, 0x0, 0x9, 0x0, 0x8000, 0x0, 0x80, 0x0, 0x5}, 0xffffffffffffffff, 0x4, r1, 0x0) r2 = gettid() process_vm_readv(r2, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/4078, 0xfee}, {&(0x7f0000000000)=""/123, 0x7b}, {&(0x7f0000000100)=""/57, 0x39}], 0x3, &(0x7f0000000240)=[{&(0x7f0000012940)=""/102400, 0xffffff76}], 0x1, 0x0) (fail_nth: 15) perf_event_open(0x0, r2, 0x1, r1, 0x8) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/consoles\x00', 0x0, 0x0) 07:02:59 executing program 2: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x204800, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x1) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002480)='fd/3\x00') fdatasync(0xffffffffffffffff) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x40}}, './file0\x00'}) preadv2(r2, &(0x7f0000001300)=[{&(0x7f0000000080)=""/193, 0xc1}, {&(0x7f0000000180)=""/250, 0xfa}, {&(0x7f0000000300)=""/4096, 0x1000}], 0x3, 0x80000000, 0x66, 0x18) openat(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r3, 0x0, 0x0, 0x87ffffc) (fail_nth: 15) [ 2483.307946] FAULT_INJECTION: forcing a failure. [ 2483.307946] name failslab, interval 1, probability 0, space 0, times 0 [ 2483.310243] CPU: 1 PID: 12521 Comm: syz-executor.3 Not tainted 5.18.0-rc1-next-20220406 #1 [ 2483.311864] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2483.314090] Call Trace: [ 2483.314605] 07:02:59 executing program 1: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) preadv(r0, &(0x7f00000011c0)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x7, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x0, 0x0, 0x87ffffc) mmap$perf(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000008, 0x1010, r2, 0x4) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000100), 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r3 = syz_open_procfs(0x0, 0x0) preadv(r3, &(0x7f0000000080)=[{&(0x7f0000000000)=""/40, 0x40}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000001240)={0x1, 0x80, 0x9, 0xa1, 0xf9, 0x3, 0x0, 0x7, 0xa0400, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x3, @perf_config_ext={0x58d}, 0x21, 0x1, 0x0, 0x6, 0x9, 0x0, 0x8000, 0x0, 0x80, 0x0, 0x5}, 0xffffffffffffffff, 0x4, r3, 0x0) r4 = gettid() process_vm_readv(0x0, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/4078, 0xfee}, {&(0x7f0000000000)=""/123, 0x7b}, {&(0x7f0000000100)=""/57, 0x39}], 0x3, &(0x7f0000000240)=[{&(0x7f0000012940)=""/102400, 0xffffff76}], 0x1, 0x0) perf_event_open(0x0, r4, 0x1, r3, 0x8) [ 2483.315043] dump_stack_lvl+0x8b/0xb3 07:02:59 executing program 6: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) preadv(r0, &(0x7f00000011c0)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x7, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x0, 0x0, 0x87ffffc) mmap$perf(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000008, 0x1010, r2, 0x4) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000100), 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r3 = syz_open_procfs(0x0, 0x0) perf_event_open(&(0x7f0000001240)={0x1, 0x80, 0x9, 0xa1, 0xf9, 0x3, 0x0, 0x7, 0xa0400, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x3, @perf_config_ext={0x58d}, 0x21, 0x1, 0x0, 0x6, 0x9, 0x0, 0x8000, 0x0, 0x80, 0x0, 0x5}, 0xffffffffffffffff, 0x4, r3, 0x0) r4 = gettid() process_vm_readv(r4, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/4078, 0xfee}, {&(0x7f0000000000)=""/123, 0x7b}], 0x2, &(0x7f0000000240)=[{&(0x7f0000012940)=""/102400, 0x19000}], 0x1, 0x0) perf_event_open(0x0, r4, 0x1, r3, 0x8) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/consoles\x00', 0x0, 0x0) [ 2483.316081] should_fail.cold+0x5/0xa [ 2483.316955] ? create_object.isra.0+0x3a/0xa20 [ 2483.317876] should_failslab+0x5/0x10 [ 2483.318652] kmem_cache_alloc+0x5b/0x480 [ 2483.319479] create_object.isra.0+0x3a/0xa20 [ 2483.320384] ? kasan_unpoison+0x23/0x50 [ 2483.321185] __kmalloc_node+0x26f/0x470 [ 2483.321996] kvmalloc_node+0x3e/0x130 [ 2483.322770] alloc_fdtable+0x13f/0x280 [ 2483.323562] dup_fd+0x71e/0xca0 [ 2483.324246] copy_process+0x2039/0x6db0 [ 2483.325083] ? __cleanup_sighand+0xb0/0xb0 [ 2483.325941] ? lock_release+0x3b2/0x750 [ 2483.326735] ? ksys_write+0x20c/0x250 [ 2483.327524] ? kernel_clone+0x2f8/0xa60 [ 2483.328353] kernel_clone+0xe7/0xa60 [ 2483.329110] ? find_held_lock+0x2c/0x110 [ 2483.329930] ? create_io_thread+0xf0/0xf0 [ 2483.330782] ? __mutex_unlock_slowpath+0x15c/0x5e0 [ 2483.331766] ? bit_wait_io_timeout+0x160/0x160 [ 2483.332689] ? lock_is_held_type+0xd7/0x130 [ 2483.333555] __do_sys_fork+0x8a/0xc0 [ 2483.334311] ? kernel_clone+0xa60/0xa60 [ 2483.335114] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 2483.336236] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2483.337272] ? lockdep_hardirqs_on+0x79/0x100 [ 2483.338187] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2483.339220] do_syscall_64+0x3b/0x90 [ 2483.339989] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2483.340877] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12531 comm=syz-executor.4 [ 2483.341023] RIP: 0033:0x7fc1c2a89b19 [ 2483.344120] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2483.347791] RSP: 002b:00007fc1bffff188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 2483.349313] RAX: ffffffffffffffda RBX: 00007fc1c2b9cf60 RCX: 00007fc1c2a89b19 [ 2483.350751] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2483.352182] RBP: 00007fc1bffff1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2483.353606] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2483.355045] R13: 00007fff0449096f R14: 00007fc1bffff300 R15: 0000000000022000 [ 2483.356499] [ 2483.360791] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12533 comm=syz-executor.4 [ 2483.381442] FAULT_INJECTION: forcing a failure. [ 2483.381442] name failslab, interval 1, probability 0, space 0, times 0 [ 2483.384047] CPU: 0 PID: 12530 Comm: syz-executor.2 Not tainted 5.18.0-rc1-next-20220406 #1 [ 2483.385716] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2483.387999] Call Trace: [ 2483.388513] [ 2483.388958] dump_stack_lvl+0x8b/0xb3 [ 2483.389745] should_fail.cold+0x5/0xa [ 2483.390518] ? __es_insert_extent+0x3a9/0x12f0 [ 2483.391444] should_failslab+0x5/0x10 [ 2483.392233] kmem_cache_alloc+0x5b/0x480 [ 2483.393065] __es_insert_extent+0x3a9/0x12f0 [ 2483.393968] ext4_es_insert_extent+0x2dc/0xbf0 [ 2483.394894] ? ext4_es_scan_clu+0x2e0/0x2e0 [ 2483.395762] ? _raw_read_unlock+0x24/0x40 [ 2483.396629] ? ext4_es_scan_range+0x116/0x240 [ 2483.397531] ? ext4_es_find_extent_range+0x570/0x570 [ 2483.398566] ? down_write_killable+0x170/0x170 [ 2483.399504] ext4_map_blocks+0x8e1/0x1970 [ 2483.400378] ? ext4_issue_zeroout+0x1c0/0x1c0 [ 2483.401067] FAULT_INJECTION: forcing a failure. [ 2483.401067] name failslab, interval 1, probability 0, space 0, times 0 [ 2483.401279] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 2483.401320] ? jbd2__journal_start+0xf3/0x8d0 [ 2483.401357] ? __ext4_journal_start_sb+0x392/0x470 [ 2483.401379] ? __ext4_journal_start_sb+0x1d5/0x470 [ 2483.401411] ext4_alloc_file_blocks.isra.0+0x2c1/0xb20 [ 2483.408540] ? generic_update_time+0x21d/0x350 [ 2483.409474] ? ext4_ext_correct_indexes+0x440/0x440 [ 2483.410494] ? down_write_killable+0x170/0x170 [ 2483.411429] ext4_fallocate+0x1a2b/0x3c90 [ 2483.412290] ? lock_acquire+0x1b2/0x530 [ 2483.413097] ? lock_release+0x750/0x750 [ 2483.413922] ? ext4_ext_truncate+0x3e0/0x3e0 [ 2483.414807] ? lock_is_held_type+0xd7/0x130 [ 2483.415697] ? ext4_ext_truncate+0x3e0/0x3e0 [ 2483.416603] vfs_fallocate+0x489/0xe00 [ 2483.417424] __x64_sys_fallocate+0xcf/0x140 [ 2483.418303] do_syscall_64+0x3b/0x90 [ 2483.419068] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2483.420124] RIP: 0033:0x7fd845bccb19 [ 2483.420866] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2483.424633] RSP: 002b:00007fd843142188 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 2483.426146] RAX: ffffffffffffffda RBX: 00007fd845cdff60 RCX: 00007fd845bccb19 [ 2483.427607] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 2483.429069] RBP: 00007fd8431421d0 R08: 0000000000000000 R09: 0000000000000000 [ 2483.430520] R10: 00000000087ffffc R11: 0000000000000246 R12: 0000000000000002 [ 2483.431978] R13: 00007ffde12fa01f R14: 00007fd843142300 R15: 0000000000022000 [ 2483.433478] [ 2483.433941] CPU: 1 PID: 12535 Comm: syz-executor.5 Not tainted 5.18.0-rc1-next-20220406 #1 [ 2483.435639] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2483.437881] Call Trace: [ 2483.438393] [ 2483.438838] dump_stack_lvl+0x8b/0xb3 [ 2483.439614] should_fail.cold+0x5/0xa [ 2483.440397] ? create_object.isra.0+0x3a/0xa20 [ 2483.441314] should_failslab+0x5/0x10 [ 2483.442073] kmem_cache_alloc+0x5b/0x480 [ 2483.442903] create_object.isra.0+0x3a/0xa20 [ 2483.443783] ? kasan_unpoison+0x23/0x50 [ 2483.444591] kmem_cache_alloc+0x239/0x480 [ 2483.445433] ext4_mb_new_blocks+0x222c/0x4b60 [ 2483.446344] ? lock_is_held_type+0xd7/0x130 [ 2483.447214] ? rcu_read_lock_sched_held+0x3a/0x70 [ 2483.448192] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2483.449286] ? ext4_cache_extents+0x68/0x2d0 [ 2483.450155] ? ext4_discard_preallocations+0xe60/0xe60 [ 2483.451191] ? __sanitizer_cov_trace_const_cmp2+0x22/0x80 [ 2483.452307] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2483.453399] ? __sanitizer_cov_trace_const_cmp2+0x22/0x80 [ 2483.454488] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2483.455585] ? ext4_inode_to_goal_block+0x320/0x430 [ 2483.456600] ext4_ext_map_blocks+0x1fb0/0x5cd0 [ 2483.457524] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 2483.458564] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 2483.459628] ? ext4_ext_release+0x10/0x10 [ 2483.460484] ? lock_release+0x750/0x750 [ 2483.461296] ? lock_is_held_type+0xd7/0x130 [ 2483.462184] ? down_write_killable+0x170/0x170 [ 2483.463132] ext4_map_blocks+0x652/0x1970 [ 2483.464001] ? lock_is_held_type+0xd7/0x130 [ 2483.464879] ? ext4_issue_zeroout+0x1c0/0x1c0 [ 2483.465788] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 2483.466895] ? jbd2__journal_start+0xf3/0x8d0 [ 2483.467803] ? __ext4_journal_start_sb+0x392/0x470 [ 2483.468778] ? __ext4_journal_start_sb+0x1d5/0x470 [ 2483.469765] ext4_alloc_file_blocks.isra.0+0x2c1/0xb20 [ 2483.470809] ? generic_update_time+0x21d/0x350 [ 2483.471741] ? ext4_ext_correct_indexes+0x440/0x440 [ 2483.472759] ? down_write_killable+0x170/0x170 [ 2483.473682] ext4_fallocate+0x1a2b/0x3c90 [ 2483.474508] ? lock_acquire+0x1b2/0x530 [ 2483.475304] ? lock_release+0x750/0x750 [ 2483.476116] ? ext4_ext_truncate+0x3e0/0x3e0 [ 2483.476991] ? lock_is_held_type+0xd7/0x130 [ 2483.477859] ? ext4_ext_truncate+0x3e0/0x3e0 [ 2483.478734] vfs_fallocate+0x489/0xe00 [ 2483.479560] __x64_sys_fallocate+0xcf/0x140 [ 2483.480440] do_syscall_64+0x3b/0x90 [ 2483.481183] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2483.482210] RIP: 0033:0x7f35817a9b19 [ 2483.482946] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2483.486577] RSP: 002b:00007f357ed1f188 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 2483.488080] RAX: ffffffffffffffda RBX: 00007f35818bcf60 RCX: 00007f35817a9b19 [ 2483.489487] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 2483.490887] RBP: 00007f357ed1f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2483.492304] R10: 00000000087ffffc R11: 0000000000000246 R12: 0000000000000002 [ 2483.493713] R13: 00007ffdd683fcbf R14: 00007f357ed1f300 R15: 0000000000022000 [ 2483.495157] [ 2483.511951] FAULT_INJECTION: forcing a failure. [ 2483.511951] name failslab, interval 1, probability 0, space 0, times 0 [ 2483.514413] CPU: 0 PID: 12523 Comm: syz-executor.7 Not tainted 5.18.0-rc1-next-20220406 #1 [ 2483.516139] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2483.518464] Call Trace: [ 2483.518992] [ 2483.519455] dump_stack_lvl+0x8b/0xb3 [ 2483.520267] should_fail.cold+0x5/0xa [ 2483.521059] ? __es_insert_extent+0x3a9/0x12f0 [ 2483.521999] should_failslab+0x5/0x10 [ 2483.522783] kmem_cache_alloc+0x5b/0x480 [ 2483.523629] __es_insert_extent+0x3a9/0x12f0 [ 2483.524559] ext4_es_insert_extent+0x2dc/0xbf0 [ 2483.525503] ? ext4_es_scan_clu+0x2e0/0x2e0 [ 2483.526390] ? _raw_read_unlock+0x24/0x40 [ 2483.527253] ? ext4_es_scan_range+0x116/0x240 [ 2483.528185] ? ext4_es_find_extent_range+0x570/0x570 [ 2483.529225] ? down_write_killable+0x170/0x170 [ 2483.530174] ext4_map_blocks+0x8e1/0x1970 [ 2483.531048] ? ext4_issue_zeroout+0x1c0/0x1c0 [ 2483.532006] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 2483.533135] ? jbd2__journal_start+0xf3/0x8d0 [ 2483.534054] ? __ext4_journal_start_sb+0x392/0x470 [ 2483.535041] ? __ext4_journal_start_sb+0x1d5/0x470 [ 2483.536064] ext4_alloc_file_blocks.isra.0+0x2c1/0xb20 [ 2483.537130] ? generic_update_time+0x21d/0x350 [ 2483.538071] ? ext4_ext_correct_indexes+0x440/0x440 [ 2483.539089] ? down_write_killable+0x170/0x170 [ 2483.540041] ext4_fallocate+0x1a2b/0x3c90 [ 2483.540885] ? lock_acquire+0x1b2/0x530 [ 2483.541705] ? lock_release+0x750/0x750 [ 2483.542524] ? ext4_ext_truncate+0x3e0/0x3e0 [ 2483.543423] ? lock_is_held_type+0xd7/0x130 [ 2483.544329] ? ext4_ext_truncate+0x3e0/0x3e0 [ 2483.545223] vfs_fallocate+0x489/0xe00 [ 2483.546034] __x64_sys_fallocate+0xcf/0x140 [ 2483.546922] do_syscall_64+0x3b/0x90 [ 2483.547684] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2483.548744] RIP: 0033:0x7fdba5ddfb19 [ 2483.549495] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2483.553222] RSP: 002b:00007fdba3355188 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 2483.554768] RAX: ffffffffffffffda RBX: 00007fdba5ef2f60 RCX: 00007fdba5ddfb19 [ 2483.556230] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 2483.557680] RBP: 00007fdba33551d0 R08: 0000000000000000 R09: 0000000000000000 [ 2483.559112] R10: 00000000087ffffc R11: 0000000000000246 R12: 0000000000000002 [ 2483.560572] R13: 00007ffe895a664f R14: 00007fdba3355300 R15: 0000000000022000 [ 2483.562061] 07:02:59 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f00000001c0)=0x8) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x14, 0x0, 0x5e00}, 0x14}}, 0x0) 07:02:59 executing program 6: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) preadv(r0, &(0x7f00000011c0)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x7, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x0, 0x0, 0x87ffffc) mmap$perf(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000008, 0x1010, r2, 0x4) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000100), 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r3 = syz_open_procfs(0x0, 0x0) perf_event_open(&(0x7f0000001240)={0x1, 0x80, 0x9, 0xa1, 0xf9, 0x3, 0x0, 0x7, 0xa0400, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x3, @perf_config_ext={0x58d}, 0x21, 0x1, 0x0, 0x6, 0x9, 0x0, 0x8000, 0x0, 0x80, 0x0, 0x5}, 0xffffffffffffffff, 0x4, r3, 0x0) r4 = gettid() process_vm_readv(r4, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/4078, 0xfee}, {&(0x7f0000000000)=""/123, 0x7b}], 0x2, &(0x7f0000000240)=[{&(0x7f0000012940)=""/102400, 0x19000}], 0x1, 0x0) perf_event_open(0x0, r4, 0x1, r3, 0x8) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/consoles\x00', 0x0, 0x0) [ 2483.609742] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12543 comm=syz-executor.4 [ 2483.611807] FAULT_INJECTION: forcing a failure. [ 2483.611807] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2483.615046] CPU: 1 PID: 12540 Comm: syz-executor.0 Not tainted 5.18.0-rc1-next-20220406 #1 [ 2483.616699] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2483.618934] Call Trace: [ 2483.619449] [ 2483.619895] dump_stack_lvl+0x8b/0xb3 [ 2483.620691] should_fail.cold+0x5/0xa [ 2483.621461] _copy_to_user+0x2a/0x140 [ 2483.622235] simple_read_from_buffer+0xcc/0x160 [ 2483.623181] proc_fail_nth_read+0x194/0x220 [ 2483.624062] ? proc_exe_link+0x1d0/0x1d0 [ 2483.624884] ? security_file_permission+0xb1/0xd0 [ 2483.624958] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12544 comm=syz-executor.4 [ 2483.625847] ? proc_exe_link+0x1d0/0x1d0 [ 2483.629022] vfs_read+0x1ea/0x5d0 [ 2483.629732] ksys_read+0x127/0x250 [ 2483.630434] ? __ia32_sys_pwrite64+0x220/0x220 [ 2483.631354] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2483.632409] do_syscall_64+0x3b/0x90 [ 2483.633156] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2483.634187] RIP: 0033:0x7f117332b69c [ 2483.634920] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 2483.638526] RSP: 002b:00007f11708cd170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2483.640034] RAX: ffffffffffffffda RBX: 00000000000010a2 RCX: 00007f117332b69c [ 2483.641427] RDX: 000000000000000f RSI: 00007f11708cd1e0 RDI: 0000000000000006 [ 2483.642820] RBP: 00007f11708cd1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2483.644222] R10: 0000000020000240 R11: 0000000000000246 R12: 0000000000000002 [ 2483.645612] R13: 00007ffeef59581f R14: 00007f11708cd300 R15: 0000000000022000 [ 2483.647028] 07:02:59 executing program 1: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) preadv(r0, &(0x7f00000011c0)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x7, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x0, 0x0, 0x87ffffc) mmap$perf(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000008, 0x1010, r2, 0x4) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000100), 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r3 = syz_open_procfs(0x0, 0x0) preadv(r3, &(0x7f0000000080)=[{&(0x7f0000000000)=""/40, 0x40}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000001240)={0x1, 0x80, 0x9, 0xa1, 0xf9, 0x3, 0x0, 0x7, 0xa0400, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x3, @perf_config_ext={0x58d}, 0x21, 0x1, 0x0, 0x6, 0x9, 0x0, 0x8000, 0x0, 0x80, 0x0, 0x5}, 0xffffffffffffffff, 0x4, r3, 0x0) r4 = gettid() process_vm_readv(0x0, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/4078, 0xfee}, {&(0x7f0000000000)=""/123, 0x7b}, {&(0x7f0000000100)=""/57, 0x39}], 0x3, &(0x7f0000000240)=[{&(0x7f0000012940)=""/102400, 0xffffff76}], 0x1, 0x0) perf_event_open(0x0, r4, 0x1, r3, 0x8) 07:02:59 executing program 2: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x204800, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x1) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002480)='fd/3\x00') fdatasync(0xffffffffffffffff) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x40}}, './file0\x00'}) preadv2(r2, &(0x7f0000001300)=[{&(0x7f0000000080)=""/193, 0xc1}, {&(0x7f0000000180)=""/250, 0xfa}, {&(0x7f0000000300)=""/4096, 0x1000}], 0x3, 0x80000000, 0x66, 0x18) openat(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r3, 0x0, 0x0, 0x87ffffc) (fail_nth: 16) 07:02:59 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f00000001c0)=0x8) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x14, 0x0, 0x5f00}, 0x14}}, 0x0) 07:02:59 executing program 3: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000040)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x300000c, 0x13, r0, 0x8000000) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xa) fork() (fail_nth: 16) [ 2483.788223] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12553 comm=syz-executor.4 [ 2483.793926] FAULT_INJECTION: forcing a failure. [ 2483.793926] name failslab, interval 1, probability 0, space 0, times 0 [ 2483.796557] CPU: 1 PID: 12551 Comm: syz-executor.2 Not tainted 5.18.0-rc1-next-20220406 #1 [ 2483.798210] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2483.800470] Call Trace: [ 2483.800979] 07:02:59 executing program 6: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) preadv(r0, &(0x7f00000011c0)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x7, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x0, 0x0, 0x87ffffc) mmap$perf(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000008, 0x1010, r2, 0x4) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000100), 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r3 = syz_open_procfs(0x0, 0x0) perf_event_open(&(0x7f0000001240)={0x1, 0x80, 0x9, 0xa1, 0xf9, 0x3, 0x0, 0x7, 0xa0400, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x3, @perf_config_ext={0x58d}, 0x21, 0x1, 0x0, 0x6, 0x9, 0x0, 0x8000, 0x0, 0x80, 0x0, 0x5}, 0xffffffffffffffff, 0x4, r3, 0x0) r4 = gettid() process_vm_readv(r4, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/4078, 0xfee}, {&(0x7f0000000000)=""/123, 0x7b}], 0x2, &(0x7f0000000240)=[{&(0x7f0000012940)=""/102400, 0x19000}], 0x1, 0x0) perf_event_open(0x0, r4, 0x1, r3, 0x8) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/consoles\x00', 0x0, 0x0) [ 2483.801427] dump_stack_lvl+0x8b/0xb3 [ 2483.802408] should_fail.cold+0x5/0xa [ 2483.803173] ? __es_tree_search.isra.0+0x1af/0x210 [ 2483.803590] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12555 comm=syz-executor.4 [ 2483.804165] ? create_object.isra.0+0x3a/0xa20 [ 2483.807993] should_failslab+0x5/0x10 [ 2483.808751] kmem_cache_alloc+0x5b/0x480 [ 2483.809576] create_object.isra.0+0x3a/0xa20 [ 2483.810442] ? kasan_unpoison+0x23/0x50 [ 2483.811233] kmem_cache_alloc+0x239/0x480 [ 2483.812090] __es_insert_extent+0x3a9/0x12f0 [ 2483.812985] ext4_es_insert_extent+0x2dc/0xbf0 [ 2483.813902] ? ext4_es_scan_clu+0x2e0/0x2e0 [ 2483.814754] ? _raw_read_unlock+0x24/0x40 [ 2483.815577] ? ext4_es_scan_range+0x116/0x240 [ 2483.816473] ? ext4_es_find_extent_range+0x570/0x570 [ 2483.817484] ? down_write_killable+0x170/0x170 [ 2483.818402] ext4_map_blocks+0x8e1/0x1970 [ 2483.819240] ? ext4_issue_zeroout+0x1c0/0x1c0 [ 2483.820149] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 2483.821249] ? jbd2__journal_start+0xf3/0x8d0 [ 2483.822142] ? __ext4_journal_start_sb+0x392/0x470 [ 2483.823099] ? __ext4_journal_start_sb+0x1d5/0x470 [ 2483.824075] ext4_alloc_file_blocks.isra.0+0x2c1/0xb20 [ 2483.825111] ? generic_update_time+0x21d/0x350 [ 2483.826026] ? ext4_ext_correct_indexes+0x440/0x440 [ 2483.827015] ? down_write_killable+0x170/0x170 [ 2483.827085] FAULT_INJECTION: forcing a failure. [ 2483.827085] name failslab, interval 1, probability 0, space 0, times 0 [ 2483.827949] ext4_fallocate+0x1a2b/0x3c90 [ 2483.827981] ? lock_acquire+0x1b2/0x530 [ 2483.831737] ? lock_release+0x750/0x750 [ 2483.832537] ? ext4_ext_truncate+0x3e0/0x3e0 [ 2483.833406] ? lock_is_held_type+0xd7/0x130 [ 2483.834264] ? ext4_ext_truncate+0x3e0/0x3e0 [ 2483.835134] vfs_fallocate+0x489/0xe00 [ 2483.835918] __x64_sys_fallocate+0xcf/0x140 [ 2483.836788] do_syscall_64+0x3b/0x90 [ 2483.837525] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2483.838544] RIP: 0033:0x7fd845bccb19 [ 2483.839270] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2483.842868] RSP: 002b:00007fd843142188 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 2483.844366] RAX: ffffffffffffffda RBX: 00007fd845cdff60 RCX: 00007fd845bccb19 [ 2483.845757] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 2483.847151] RBP: 00007fd8431421d0 R08: 0000000000000000 R09: 0000000000000000 [ 2483.848549] R10: 00000000087ffffc R11: 0000000000000246 R12: 0000000000000002 [ 2483.849939] R13: 00007ffde12fa01f R14: 00007fd843142300 R15: 0000000000022000 [ 2483.851360] [ 2483.851815] CPU: 0 PID: 12556 Comm: syz-executor.3 Not tainted 5.18.0-rc1-next-20220406 #1 [ 2483.853538] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2483.855833] Call Trace: [ 2483.856360] [ 2483.856815] dump_stack_lvl+0x8b/0xb3 [ 2483.857602] should_fail.cold+0x5/0xa [ 2483.858383] ? copy_fs_struct+0x45/0x340 [ 2483.859207] should_failslab+0x5/0x10 [ 2483.859995] kmem_cache_alloc+0x5b/0x480 [ 2483.860845] copy_fs_struct+0x45/0x340 [ 2483.861632] ? copy_process+0x20cc/0x6db0 [ 2483.862487] copy_process+0x3356/0x6db0 [ 2483.863331] ? __cleanup_sighand+0xb0/0xb0 [ 2483.864227] ? lock_release+0x3b2/0x750 [ 2483.865040] ? ksys_write+0x20c/0x250 [ 2483.865819] ? kernel_clone+0x2f8/0xa60 [ 2483.866643] kernel_clone+0xe7/0xa60 [ 2483.867408] ? find_held_lock+0x2c/0x110 [ 2483.868244] ? create_io_thread+0xf0/0xf0 [ 2483.869102] ? __mutex_unlock_slowpath+0x15c/0x5e0 [ 2483.870107] ? bit_wait_io_timeout+0x160/0x160 [ 2483.871045] ? lock_is_held_type+0xd7/0x130 [ 2483.871973] __do_sys_fork+0x8a/0xc0 [ 2483.872745] ? kernel_clone+0xa60/0xa60 [ 2483.873564] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 2483.874709] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2483.875771] ? lockdep_hardirqs_on+0x79/0x100 [ 2483.876701] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2483.877762] do_syscall_64+0x3b/0x90 [ 2483.878529] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2483.879587] RIP: 0033:0x7fc1c2a89b19 [ 2483.880352] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2483.884701] RSP: 002b:00007fc1bffff188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 2483.886277] RAX: ffffffffffffffda RBX: 00007fc1c2b9cf60 RCX: 00007fc1c2a89b19 [ 2483.887751] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2483.889294] RBP: 00007fc1bffff1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2483.890741] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2483.892202] R13: 00007fff0449096f R14: 00007fc1bffff300 R15: 0000000000022000 [ 2483.893671] 07:02:59 executing program 0: openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r0, 0x0, 0x0, 0x87ffffc) mmap$perf(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000008, 0x10, 0xffffffffffffffff, 0x4) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x12, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = syz_open_procfs(0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001240)={0x1, 0x80, 0x0, 0xa1, 0x0, 0x0, 0x0, 0x7, 0xa0400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x3, @perf_config_ext, 0x21, 0x1, 0x0, 0x0, 0x9, 0x0, 0x8000, 0x0, 0x80, 0x0, 0x5}, 0xffffffffffffffff, 0x4, r1, 0x0) r2 = gettid() process_vm_readv(r2, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/4078, 0xfee}, {&(0x7f0000000000)=""/123, 0x7b}, {&(0x7f0000000100)=""/57, 0x39}], 0x3, &(0x7f0000000240)=[{&(0x7f0000012940)=""/102400, 0xffffff76}], 0x1, 0x0) perf_event_open(0x0, r2, 0x1, r1, 0x8) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/consoles\x00', 0x0, 0x0) 07:03:13 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f00000001c0)=0x8) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x14, 0x0, 0x6000}, 0x14}}, 0x0) 07:03:13 executing program 0: openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r0, 0x0, 0x0, 0x87ffffc) mmap$perf(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000008, 0x10, 0xffffffffffffffff, 0x4) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x12, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = syz_open_procfs(0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001240)={0x1, 0x80, 0x0, 0xa1, 0x0, 0x0, 0x0, 0x7, 0xa0400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x3, @perf_config_ext, 0x21, 0x1, 0x0, 0x0, 0x9, 0x0, 0x8000, 0x0, 0x80, 0x0, 0x5}, 0xffffffffffffffff, 0x4, r1, 0x0) r2 = gettid() process_vm_readv(r2, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/4078, 0x7ffff000}, {&(0x7f0000000000)=""/123, 0x7b}, {&(0x7f0000000100)=""/57, 0x39}], 0x3, &(0x7f0000000240)=[{&(0x7f0000012940)=""/102400, 0xffffff76}], 0x1, 0x0) perf_event_open(0x0, r2, 0x1, r1, 0x8) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/consoles\x00', 0x0, 0x0) 07:03:13 executing program 6: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) preadv(r0, &(0x7f00000011c0)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x7, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x0, 0x0, 0x87ffffc) mmap$perf(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000008, 0x1010, r2, 0x4) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000100), 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r3 = syz_open_procfs(0x0, 0x0) perf_event_open(&(0x7f0000001240)={0x1, 0x80, 0x9, 0xa1, 0xf9, 0x3, 0x0, 0x7, 0xa0400, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x3, @perf_config_ext={0x58d}, 0x21, 0x1, 0x0, 0x6, 0x9, 0x0, 0x8000, 0x0, 0x80, 0x0, 0x5}, 0xffffffffffffffff, 0x4, r3, 0x0) r4 = gettid() process_vm_readv(r4, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/4078, 0xfee}, {&(0x7f0000000000)=""/123, 0x7b}, {0x0}], 0x3, &(0x7f0000000240)=[{&(0x7f0000012940)=""/102400, 0x19000}], 0x1, 0x0) perf_event_open(0x0, r4, 0x1, r3, 0x8) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/consoles\x00', 0x0, 0x0) 07:03:13 executing program 5: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) preadv(r0, &(0x7f00000011c0)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x7, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x0, 0x0, 0x87ffffc) (fail_nth: 15) mmap$perf(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000008, 0x1010, r2, 0x4) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000100), 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r3 = syz_open_procfs(0x0, 0x0) perf_event_open(&(0x7f0000001240)={0x1, 0x80, 0x9, 0xa1, 0xf9, 0x3, 0x0, 0x7, 0xa0400, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x3, @perf_config_ext={0x58d}, 0x21, 0x1, 0x0, 0x6, 0x9, 0x0, 0x8000, 0x0, 0x80, 0x0, 0x5}, 0xffffffffffffffff, 0x4, r3, 0x0) r4 = gettid() perf_event_open(0x0, r4, 0x1, r3, 0x8) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/consoles\x00', 0x0, 0x0) 07:03:13 executing program 1: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) preadv(r0, &(0x7f00000011c0)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x7, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x0, 0x0, 0x87ffffc) mmap$perf(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000008, 0x1010, r2, 0x4) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000100), 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r3 = syz_open_procfs(0x0, 0x0) preadv(r3, &(0x7f0000000080)=[{&(0x7f0000000000)=""/40, 0x40}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000001240)={0x1, 0x80, 0x9, 0xa1, 0xf9, 0x3, 0x0, 0x7, 0xa0400, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x3, @perf_config_ext={0x58d}, 0x21, 0x1, 0x0, 0x6, 0x9, 0x0, 0x8000, 0x0, 0x80, 0x0, 0x5}, 0xffffffffffffffff, 0x4, r3, 0x0) r4 = gettid() process_vm_readv(0x0, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/4078, 0xfee}, {&(0x7f0000000000)=""/123, 0x7b}, {&(0x7f0000000100)=""/57, 0x39}], 0x3, &(0x7f0000000240)=[{&(0x7f0000012940)=""/102400, 0xffffff76}], 0x1, 0x0) perf_event_open(0x0, r4, 0x1, r3, 0x8) [ 2497.413381] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12572 comm=syz-executor.4 07:03:13 executing program 3: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000040)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x300000c, 0x13, r0, 0x8000000) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xa) fork() (fail_nth: 17) [ 2497.430235] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12580 comm=syz-executor.4 07:03:13 executing program 7: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000001340)) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x204800, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x1) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002480)='fd/3\x00') r2 = dup(r1) fdatasync(r2) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x40}}, './file0\x00'}) preadv2(r3, &(0x7f0000001300)=[{&(0x7f0000000080)=""/193, 0xc1}, {&(0x7f0000000180)=""/250, 0xfa}, {&(0x7f0000000300)=""/4096, 0x1000}], 0x3, 0x80000000, 0x66, 0x18) r4 = openat(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000001380)=0x100000) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r5, 0x0, 0x0, 0x87ffffc) (fail_nth: 16) sendfile(r5, r4, 0x0, 0x80000000) [ 2497.440231] FAULT_INJECTION: forcing a failure. [ 2497.440231] name failslab, interval 1, probability 0, space 0, times 0 [ 2497.442377] CPU: 0 PID: 12574 Comm: syz-executor.5 Not tainted 5.18.0-rc1-next-20220406 #1 [ 2497.443773] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2497.445566] Call Trace: [ 2497.446011] [ 2497.446407] dump_stack_lvl+0x8b/0xb3 [ 2497.447091] should_fail.cold+0x5/0xa [ 2497.447754] ? __es_insert_extent+0x3a9/0x12f0 [ 2497.448555] should_failslab+0x5/0x10 [ 2497.449215] kmem_cache_alloc+0x5b/0x480 [ 2497.449943] __es_insert_extent+0x3a9/0x12f0 [ 2497.450735] ext4_es_insert_extent+0x2dc/0xbf0 [ 2497.451543] ? ext4_es_scan_clu+0x2e0/0x2e0 [ 2497.452322] ? _raw_read_unlock+0x24/0x40 [ 2497.453062] ? ext4_es_scan_range+0x116/0x240 [ 2497.453821] ? ext4_es_find_extent_range+0x570/0x570 [ 2497.454726] ? down_write_killable+0x170/0x170 [ 2497.455522] ext4_map_blocks+0x8e1/0x1970 [ 2497.455897] FAULT_INJECTION: forcing a failure. [ 2497.455897] name failslab, interval 1, probability 0, space 0, times 0 [ 2497.456260] ? ext4_issue_zeroout+0x1c0/0x1c0 [ 2497.456304] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 2497.459123] ? jbd2__journal_start+0xf3/0x8d0 [ 2497.459866] ? __ext4_journal_start_sb+0x392/0x470 [ 2497.460696] ? __ext4_journal_start_sb+0x1d5/0x470 [ 2497.461509] ext4_alloc_file_blocks.isra.0+0x2c1/0xb20 [ 2497.462380] ? generic_update_time+0x21d/0x350 [ 2497.463162] ? ext4_ext_correct_indexes+0x440/0x440 [ 2497.464013] ? down_write_killable+0x170/0x170 [ 2497.464819] ext4_fallocate+0x1a2b/0x3c90 [ 2497.465534] ? lock_acquire+0x1b2/0x530 [ 2497.466203] ? lock_release+0x750/0x750 [ 2497.466880] ? ext4_ext_truncate+0x3e0/0x3e0 [ 2497.467615] ? lock_is_held_type+0xd7/0x130 [ 2497.468351] ? ext4_ext_truncate+0x3e0/0x3e0 [ 2497.469073] vfs_fallocate+0x489/0xe00 [ 2497.469736] __x64_sys_fallocate+0xcf/0x140 [ 2497.470457] do_syscall_64+0x3b/0x90 [ 2497.471072] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2497.471935] RIP: 0033:0x7f35817a9b19 [ 2497.472553] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2497.475651] RSP: 002b:00007f357ed1f188 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 2497.476949] RAX: ffffffffffffffda RBX: 00007f35818bcf60 RCX: 00007f35817a9b19 [ 2497.478126] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 2497.479305] RBP: 00007f357ed1f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2497.480484] R10: 00000000087ffffc R11: 0000000000000246 R12: 0000000000000002 [ 2497.481658] R13: 00007ffdd683fcbf R14: 00007f357ed1f300 R15: 0000000000022000 [ 2497.482862] [ 2497.483258] CPU: 1 PID: 12584 Comm: syz-executor.7 Not tainted 5.18.0-rc1-next-20220406 #1 [ 2497.484196] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2497.485438] Call Trace: [ 2497.485718] [ 2497.485963] dump_stack_lvl+0x8b/0xb3 [ 2497.486389] should_fail.cold+0x5/0xa [ 2497.486805] ? __es_tree_search.isra.0+0x1af/0x210 [ 2497.487350] ? create_object.isra.0+0x3a/0xa20 [ 2497.487853] should_failslab+0x5/0x10 [ 2497.488255] kmem_cache_alloc+0x5b/0x480 [ 2497.488713] create_object.isra.0+0x3a/0xa20 [ 2497.489156] ? kasan_unpoison+0x23/0x50 [ 2497.489605] kmem_cache_alloc+0x239/0x480 [ 2497.490065] __es_insert_extent+0x3a9/0x12f0 [ 2497.490571] ext4_es_insert_extent+0x2dc/0xbf0 [ 2497.491104] ? ext4_es_scan_clu+0x2e0/0x2e0 [ 2497.491588] ? _raw_read_unlock+0x24/0x40 [ 2497.492049] ? ext4_es_scan_range+0x116/0x240 [ 2497.492565] ? ext4_es_find_extent_range+0x570/0x570 [ 2497.492763] FAULT_INJECTION: forcing a failure. [ 2497.492763] name failslab, interval 1, probability 0, space 0, times 0 [ 2497.493126] ? down_write_killable+0x170/0x170 [ 2497.495325] ext4_map_blocks+0x8e1/0x1970 [ 2497.495747] ? ext4_issue_zeroout+0x1c0/0x1c0 [ 2497.496252] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 2497.496866] ? jbd2__journal_start+0xf3/0x8d0 [ 2497.497370] ? __ext4_journal_start_sb+0x392/0x470 [ 2497.497898] ? __ext4_journal_start_sb+0x1d5/0x470 [ 2497.498440] ext4_alloc_file_blocks.isra.0+0x2c1/0xb20 [ 2497.499009] ? generic_update_time+0x21d/0x350 [ 2497.499524] ? ext4_ext_correct_indexes+0x440/0x440 [ 2497.500067] ? down_write_killable+0x170/0x170 [ 2497.500602] ext4_fallocate+0x1a2b/0x3c90 [ 2497.501057] ? lock_acquire+0x1b2/0x530 [ 2497.501507] ? lock_release+0x750/0x750 [ 2497.501946] ? ext4_ext_truncate+0x3e0/0x3e0 [ 2497.502438] ? lock_is_held_type+0xd7/0x130 [ 2497.502921] ? ext4_ext_truncate+0x3e0/0x3e0 [ 2497.503410] vfs_fallocate+0x489/0xe00 [ 2497.503847] __x64_sys_fallocate+0xcf/0x140 [ 2497.504329] do_syscall_64+0x3b/0x90 [ 2497.504736] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2497.505314] RIP: 0033:0x7fdba5ddfb19 [ 2497.505684] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2497.507680] RSP: 002b:00007fdba3355188 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 2497.508523] RAX: ffffffffffffffda RBX: 00007fdba5ef2f60 RCX: 00007fdba5ddfb19 [ 2497.509296] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 2497.510070] RBP: 00007fdba33551d0 R08: 0000000000000000 R09: 0000000000000000 [ 2497.510844] R10: 00000000087ffffc R11: 0000000000000246 R12: 0000000000000002 [ 2497.511625] R13: 00007ffe895a664f R14: 00007fdba3355300 R15: 0000000000022000 [ 2497.512434] [ 2497.512688] CPU: 0 PID: 12585 Comm: syz-executor.2 Not tainted 5.18.0-rc1-next-20220406 #1 [ 2497.514064] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2497.515889] Call Trace: [ 2497.516316] [ 2497.516673] dump_stack_lvl+0x8b/0xb3 [ 2497.517298] should_fail.cold+0x5/0xa [ 2497.517920] ? ext4_find_extent+0xa39/0xd20 [ 2497.518632] should_failslab+0x5/0x10 [ 2497.519257] __kmalloc+0x72/0x440 [ 2497.519833] ext4_find_extent+0xa39/0xd20 [ 2497.520533] ext4_ext_map_blocks+0x1c8/0x5cd0 [ 2497.521283] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 2497.522153] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 2497.523024] ? ext4_ext_release+0x10/0x10 [ 2497.523704] ? lock_acquire+0x1b2/0x530 [ 2497.524375] ? lock_release+0x750/0x750 [ 2497.525035] ? lock_release+0x3b2/0x750 [ 2497.525694] ? lock_is_held_type+0xd7/0x130 [ 2497.526429] ? down_write+0xde/0x150 [ 2497.527046] ? down_write_killable+0x170/0x170 [ 2497.527799] ext4_map_blocks+0x652/0x1970 [ 2497.528501] ? lock_is_held_type+0xd7/0x130 [ 2497.529222] ? ext4_issue_zeroout+0x1c0/0x1c0 [ 2497.529959] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 2497.530857] ? jbd2__journal_start+0xf3/0x8d0 [ 2497.531590] ? __ext4_journal_start_sb+0x392/0x470 [ 2497.532400] ? __ext4_journal_start_sb+0x1d5/0x470 [ 2497.533207] ext4_alloc_file_blocks.isra.0+0x2c1/0xb20 [ 2497.534068] ? ext4_ext_correct_indexes+0x440/0x440 [ 2497.534879] ? down_write_killable+0x170/0x170 [ 2497.535630] ext4_fallocate+0x1a2b/0x3c90 [ 2497.536319] ? lock_acquire+0x1b2/0x530 [ 2497.536972] ? lock_release+0x750/0x750 [ 2497.537621] ? ext4_ext_truncate+0x3e0/0x3e0 [ 2497.538308] ? lock_is_held_type+0xd7/0x130 07:03:13 executing program 2: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x204800, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x1) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002480)='fd/3\x00') fdatasync(0xffffffffffffffff) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x40}}, './file0\x00'}) preadv2(r2, &(0x7f0000001300)=[{&(0x7f0000000080)=""/193, 0xc1}, {&(0x7f0000000180)=""/250, 0xfa}, {&(0x7f0000000300)=""/4096, 0x1000}], 0x3, 0x80000000, 0x66, 0x18) openat(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r3, 0x0, 0x0, 0x87ffffc) (fail_nth: 17) [ 2497.538982] ? ext4_ext_truncate+0x3e0/0x3e0 [ 2497.539852] vfs_fallocate+0x489/0xe00 [ 2497.540496] __x64_sys_fallocate+0xcf/0x140 [ 2497.541170] do_syscall_64+0x3b/0x90 [ 2497.541754] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2497.542554] RIP: 0033:0x7fd845bccb19 [ 2497.543131] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2497.546035] RSP: 002b:00007fd843142188 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 2497.547270] RAX: ffffffffffffffda RBX: 00007fd845cdff60 RCX: 00007fd845bccb19 [ 2497.548428] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 2497.549582] RBP: 00007fd8431421d0 R08: 0000000000000000 R09: 0000000000000000 [ 2497.550724] R10: 00000000087ffffc R11: 0000000000000246 R12: 0000000000000002 [ 2497.551857] R13: 00007ffde12fa01f R14: 00007fd843142300 R15: 0000000000022000 [ 2497.553009] [ 2497.559423] FAULT_INJECTION: forcing a failure. [ 2497.559423] name failslab, interval 1, probability 0, space 0, times 0 [ 2497.561266] CPU: 0 PID: 12581 Comm: syz-executor.3 Not tainted 5.18.0-rc1-next-20220406 #1 [ 2497.562577] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2497.564339] Call Trace: [ 2497.564737] [ 2497.565083] dump_stack_lvl+0x8b/0xb3 [ 2497.565672] should_fail.cold+0x5/0xa [ 2497.566266] ? create_object.isra.0+0x3a/0xa20 [ 2497.566971] should_failslab+0x5/0x10 [ 2497.567566] kmem_cache_alloc+0x5b/0x480 [ 2497.568226] create_object.isra.0+0x3a/0xa20 [ 2497.568931] ? kasan_unpoison+0x23/0x50 [ 2497.569571] kmem_cache_alloc+0x239/0x480 [ 2497.570264] copy_fs_struct+0x45/0x340 [ 2497.570890] ? copy_process+0x20cc/0x6db0 [ 2497.571547] copy_process+0x3356/0x6db0 [ 2497.572224] ? __cleanup_sighand+0xb0/0xb0 [ 2497.572924] ? lock_release+0x3b2/0x750 [ 2497.573576] ? ksys_write+0x20c/0x250 [ 2497.574195] ? kernel_clone+0x2f8/0xa60 [ 2497.574849] kernel_clone+0xe7/0xa60 [ 2497.575457] ? find_held_lock+0x2c/0x110 [ 2497.576120] ? create_io_thread+0xf0/0xf0 [ 2497.576778] ? __mutex_unlock_slowpath+0x15c/0x5e0 [ 2497.577586] ? bit_wait_io_timeout+0x160/0x160 [ 2497.578293] ? lock_is_held_type+0xd7/0x130 [ 2497.579007] __do_sys_fork+0x8a/0xc0 [ 2497.579596] ? kernel_clone+0xa60/0xa60 [ 2497.580259] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 2497.581135] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2497.581979] ? lockdep_hardirqs_on+0x79/0x100 [ 2497.582684] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2497.583527] do_syscall_64+0x3b/0x90 [ 2497.584104] entry_SYSCALL_64_after_hwframe+0x44/0xae 07:03:13 executing program 1: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) preadv(r0, &(0x7f00000011c0)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x7, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x0, 0x0, 0x87ffffc) mmap$perf(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000008, 0x1010, r2, 0x4) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000100), 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r3 = syz_open_procfs(0x0, 0x0) preadv(r3, &(0x7f0000000080)=[{&(0x7f0000000000)=""/40, 0x40}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000001240)={0x1, 0x80, 0x9, 0xa1, 0xf9, 0x3, 0x0, 0x7, 0xa0400, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x3, @perf_config_ext={0x58d}, 0x21, 0x1, 0x0, 0x6, 0x9, 0x0, 0x8000, 0x0, 0x80, 0x0, 0x5}, 0xffffffffffffffff, 0x4, r3, 0x0) r4 = gettid() process_vm_readv(r4, 0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000012940)=""/102400, 0x19000}], 0x1, 0x0) perf_event_open(0x0, r4, 0x1, r3, 0x8) [ 2497.584937] RIP: 0033:0x7fc1c2a89b19 [ 2497.585682] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2497.588787] RSP: 002b:00007fc1bffff188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 07:03:13 executing program 6: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) preadv(r0, &(0x7f00000011c0)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x7, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x0, 0x0, 0x87ffffc) mmap$perf(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000008, 0x1010, r2, 0x4) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000100), 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r3 = syz_open_procfs(0x0, 0x0) perf_event_open(&(0x7f0000001240)={0x1, 0x80, 0x9, 0xa1, 0xf9, 0x3, 0x0, 0x7, 0xa0400, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x3, @perf_config_ext={0x58d}, 0x21, 0x1, 0x0, 0x6, 0x9, 0x0, 0x8000, 0x0, 0x80, 0x0, 0x5}, 0xffffffffffffffff, 0x4, r3, 0x0) r4 = gettid() process_vm_readv(r4, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/4078, 0xfee}, {&(0x7f0000000000)=""/123, 0x7b}, {0x0}], 0x3, &(0x7f0000000240)=[{&(0x7f0000012940)=""/102400, 0x19000}], 0x1, 0x0) perf_event_open(0x0, r4, 0x1, r3, 0x8) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/consoles\x00', 0x0, 0x0) [ 2497.590082] RAX: ffffffffffffffda RBX: 00007fc1c2b9cf60 RCX: 00007fc1c2a89b19 [ 2497.591322] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2497.592534] RBP: 00007fc1bffff1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2497.593747] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2497.594936] R13: 00007fff0449096f R14: 00007fc1bffff300 R15: 0000000000022000 [ 2497.596169] 07:03:13 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f00000001c0)=0x8) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x14, 0x0, 0x6400}, 0x14}}, 0x0) [ 2497.703520] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12597 comm=syz-executor.4 07:03:13 executing program 6: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) preadv(r0, &(0x7f00000011c0)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x7, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x0, 0x0, 0x87ffffc) mmap$perf(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000008, 0x1010, r2, 0x4) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000100), 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r3 = syz_open_procfs(0x0, 0x0) perf_event_open(&(0x7f0000001240)={0x1, 0x80, 0x9, 0xa1, 0xf9, 0x3, 0x0, 0x7, 0xa0400, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x3, @perf_config_ext={0x58d}, 0x21, 0x1, 0x0, 0x6, 0x9, 0x0, 0x8000, 0x0, 0x80, 0x0, 0x5}, 0xffffffffffffffff, 0x4, r3, 0x0) r4 = gettid() process_vm_readv(r4, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/4078, 0xfee}, {&(0x7f0000000000)=""/123, 0x7b}, {0x0}], 0x3, &(0x7f0000000240)=[{&(0x7f0000012940)=""/102400, 0x19000}], 0x1, 0x0) perf_event_open(0x0, r4, 0x1, r3, 0x8) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/consoles\x00', 0x0, 0x0) [ 2497.715463] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12598 comm=syz-executor.4 07:03:13 executing program 5: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) preadv(r0, &(0x7f00000011c0)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x7, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x0, 0x0, 0x87ffffc) (fail_nth: 16) mmap$perf(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000008, 0x1010, r2, 0x4) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000100), 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r3 = syz_open_procfs(0x0, 0x0) perf_event_open(&(0x7f0000001240)={0x1, 0x80, 0x9, 0xa1, 0xf9, 0x3, 0x0, 0x7, 0xa0400, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x3, @perf_config_ext={0x58d}, 0x21, 0x1, 0x0, 0x6, 0x9, 0x0, 0x8000, 0x0, 0x80, 0x0, 0x5}, 0xffffffffffffffff, 0x4, r3, 0x0) r4 = gettid() perf_event_open(0x0, r4, 0x1, r3, 0x8) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/consoles\x00', 0x0, 0x0) [ 2497.829731] FAULT_INJECTION: forcing a failure. [ 2497.829731] name failslab, interval 1, probability 0, space 0, times 0 [ 2497.831150] CPU: 1 PID: 12602 Comm: syz-executor.5 Not tainted 5.18.0-rc1-next-20220406 #1 [ 2497.832057] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2497.833162] Call Trace: [ 2497.833428] [ 2497.833671] dump_stack_lvl+0x8b/0xb3 [ 2497.834104] should_fail.cold+0x5/0xa [ 2497.834519] ? __es_tree_search.isra.0+0x1af/0x210 [ 2497.835051] ? create_object.isra.0+0x3a/0xa20 [ 2497.835554] should_failslab+0x5/0x10 [ 2497.835992] kmem_cache_alloc+0x5b/0x480 [ 2497.836472] create_object.isra.0+0x3a/0xa20 [ 2497.836963] ? kasan_unpoison+0x23/0x50 [ 2497.837409] kmem_cache_alloc+0x239/0x480 [ 2497.837880] __es_insert_extent+0x3a9/0x12f0 [ 2497.838380] ext4_es_insert_extent+0x2dc/0xbf0 [ 2497.838894] ? ext4_es_scan_clu+0x2e0/0x2e0 [ 2497.839322] ? _raw_read_unlock+0x24/0x40 [ 2497.839788] ? ext4_es_scan_range+0x116/0x240 [ 2497.840296] ? ext4_es_find_extent_range+0x570/0x570 [ 2497.840863] ? down_write_killable+0x170/0x170 [ 2497.841383] ext4_map_blocks+0x8e1/0x1970 [ 2497.841856] ? ext4_issue_zeroout+0x1c0/0x1c0 [ 2497.842354] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 2497.842969] ? jbd2__journal_start+0xf3/0x8d0 [ 2497.843469] ? __ext4_journal_start_sb+0x392/0x470 [ 2497.844006] ? __ext4_journal_start_sb+0x1d5/0x470 [ 2497.844562] ext4_alloc_file_blocks.isra.0+0x2c1/0xb20 [ 2497.845147] ? generic_update_time+0x21d/0x350 [ 2497.845666] ? ext4_ext_correct_indexes+0x440/0x440 [ 2497.846223] ? down_write_killable+0x170/0x170 [ 2497.846743] ext4_fallocate+0x1a2b/0x3c90 [ 2497.847197] ? lock_acquire+0x1b2/0x530 [ 2497.847645] ? lock_release+0x750/0x750 [ 2497.848096] ? ext4_ext_truncate+0x3e0/0x3e0 [ 2497.848598] ? lock_is_held_type+0xd7/0x130 [ 2497.849090] ? ext4_ext_truncate+0x3e0/0x3e0 [ 2497.849574] vfs_fallocate+0x489/0xe00 [ 2497.850019] __x64_sys_fallocate+0xcf/0x140 [ 2497.850497] do_syscall_64+0x3b/0x90 [ 2497.850916] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2497.851488] RIP: 0033:0x7f35817a9b19 [ 2497.851896] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2497.853920] RSP: 002b:00007f357ed1f188 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 2497.854756] RAX: ffffffffffffffda RBX: 00007f35818bcf60 RCX: 00007f35817a9b19 [ 2497.855548] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 2497.856349] RBP: 00007f357ed1f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2497.857050] R10: 00000000087ffffc R11: 0000000000000246 R12: 0000000000000002 [ 2497.857831] R13: 00007ffdd683fcbf R14: 00007f357ed1f300 R15: 0000000000022000 [ 2497.858642] [ 2510.927626] FAULT_INJECTION: forcing a failure. [ 2510.927626] name failslab, interval 1, probability 0, space 0, times 0 [ 2510.928924] CPU: 0 PID: 12615 Comm: syz-executor.3 Not tainted 5.18.0-rc1-next-20220406 #1 [ 2510.929812] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2510.931009] Call Trace: [ 2510.931307] [ 2510.931552] dump_stack_lvl+0x8b/0xb3 [ 2510.931973] should_fail.cold+0x5/0xa [ 2510.932396] ? copy_process+0x21a3/0x6db0 [ 2510.932852] should_failslab+0x5/0x10 [ 2510.933269] kmem_cache_alloc+0x5b/0x480 [ 2510.933723] copy_process+0x21a3/0x6db0 [ 2510.934172] ? __cleanup_sighand+0xb0/0xb0 [ 2510.934643] ? lock_release+0x3b2/0x750 [ 2510.935075] ? ksys_write+0x20c/0x250 [ 2510.935491] ? kernel_clone+0x2f8/0xa60 [ 2510.935923] kernel_clone+0xe7/0xa60 [ 2510.936338] ? find_held_lock+0x2c/0x110 [ 2510.936775] ? create_io_thread+0xf0/0xf0 [ 2510.937225] ? __mutex_unlock_slowpath+0x15c/0x5e0 [ 2510.937751] ? bit_wait_io_timeout+0x160/0x160 [ 2510.938242] ? lock_is_held_type+0xd7/0x130 [ 2510.938715] __do_sys_fork+0x8a/0xc0 [ 2510.939121] ? kernel_clone+0xa60/0xa60 [ 2510.939554] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 2510.940162] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2510.940743] ? lockdep_hardirqs_on+0x79/0x100 [ 2510.941228] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2510.941785] do_syscall_64+0x3b/0x90 [ 2510.942185] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2510.942743] RIP: 0033:0x7fc1c2a89b19 [ 2510.943137] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2510.945119] RSP: 002b:00007fc1bffff188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 2510.945934] RAX: ffffffffffffffda RBX: 00007fc1c2b9cf60 RCX: 00007fc1c2a89b19 [ 2510.946703] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2510.947474] RBP: 00007fc1bffff1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2510.948229] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2510.948991] R13: 00007fff0449096f R14: 00007fc1bffff300 R15: 0000000000022000 [ 2510.949755] 07:03:26 executing program 0: openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r0, 0x0, 0x0, 0x87ffffc) mmap$perf(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000008, 0x10, 0xffffffffffffffff, 0x4) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x12, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = syz_open_procfs(0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001240)={0x1, 0x80, 0x0, 0xa1, 0x0, 0x0, 0x0, 0x7, 0xa0400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x3, @perf_config_ext, 0x21, 0x1, 0x0, 0x0, 0x9, 0x0, 0x8000, 0x0, 0x80, 0x0, 0x5}, 0xffffffffffffffff, 0x4, r1, 0x0) r2 = gettid() process_vm_readv(r2, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/4078, 0x7ffffffff000}, {&(0x7f0000000000)=""/123, 0x7b}, {&(0x7f0000000100)=""/57, 0x39}], 0x3, &(0x7f0000000240)=[{&(0x7f0000012940)=""/102400, 0xffffff76}], 0x1, 0x0) perf_event_open(0x0, r2, 0x1, r1, 0x8) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/consoles\x00', 0x0, 0x0) 07:03:26 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f00000001c0)=0x8) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x14, 0x0, 0x6500}, 0x14}}, 0x0) 07:03:26 executing program 5: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) preadv(r0, &(0x7f00000011c0)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x7, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x0, 0x0, 0x87ffffc) (fail_nth: 17) mmap$perf(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000008, 0x1010, r2, 0x4) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000100), 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r3 = syz_open_procfs(0x0, 0x0) perf_event_open(&(0x7f0000001240)={0x1, 0x80, 0x9, 0xa1, 0xf9, 0x3, 0x0, 0x7, 0xa0400, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x3, @perf_config_ext={0x58d}, 0x21, 0x1, 0x0, 0x6, 0x9, 0x0, 0x8000, 0x0, 0x80, 0x0, 0x5}, 0xffffffffffffffff, 0x4, r3, 0x0) r4 = gettid() perf_event_open(0x0, r4, 0x1, r3, 0x8) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/consoles\x00', 0x0, 0x0) 07:03:26 executing program 3: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000040)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x300000c, 0x13, r0, 0x8000000) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xa) fork() (fail_nth: 18) 07:03:26 executing program 1: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) preadv(r0, &(0x7f00000011c0)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x7, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x0, 0x0, 0x87ffffc) mmap$perf(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000008, 0x1010, r2, 0x4) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000100), 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r3 = syz_open_procfs(0x0, 0x0) preadv(r3, &(0x7f0000000080)=[{&(0x7f0000000000)=""/40, 0x40}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000001240)={0x1, 0x80, 0x9, 0xa1, 0xf9, 0x3, 0x0, 0x7, 0xa0400, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x3, @perf_config_ext={0x58d}, 0x21, 0x1, 0x0, 0x6, 0x9, 0x0, 0x8000, 0x0, 0x80, 0x0, 0x5}, 0xffffffffffffffff, 0x4, r3, 0x0) r4 = gettid() process_vm_readv(r4, 0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000012940)=""/102400, 0x19000}], 0x1, 0x0) perf_event_open(0x0, r4, 0x1, r3, 0x8) 07:03:26 executing program 2: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x204800, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x1) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002480)='fd/3\x00') fdatasync(0xffffffffffffffff) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x40}}, './file0\x00'}) preadv2(r2, &(0x7f0000001300)=[{&(0x7f0000000080)=""/193, 0xc1}, {&(0x7f0000000180)=""/250, 0xfa}, {&(0x7f0000000300)=""/4096, 0x1000}], 0x3, 0x80000000, 0x66, 0x18) openat(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r3, 0x0, 0x0, 0x87ffffc) (fail_nth: 18) 07:03:26 executing program 7: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000001340)) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x204800, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x1) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002480)='fd/3\x00') r2 = dup(r1) fdatasync(r2) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x40}}, './file0\x00'}) preadv2(r3, &(0x7f0000001300)=[{&(0x7f0000000080)=""/193, 0xc1}, {&(0x7f0000000180)=""/250, 0xfa}, {&(0x7f0000000300)=""/4096, 0x1000}], 0x3, 0x80000000, 0x66, 0x18) r4 = openat(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000001380)=0x100000) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r5, 0x0, 0x0, 0x87ffffc) (fail_nth: 17) sendfile(r5, r4, 0x0, 0x80000000) 07:03:26 executing program 6: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) preadv(r0, &(0x7f00000011c0)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x7, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x0, 0x0, 0x87ffffc) mmap$perf(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000008, 0x1010, r2, 0x4) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000100), 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r3 = syz_open_procfs(0x0, 0x0) perf_event_open(&(0x7f0000001240)={0x1, 0x80, 0x9, 0xa1, 0xf9, 0x3, 0x0, 0x7, 0xa0400, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x3, @perf_config_ext={0x58d}, 0x21, 0x1, 0x0, 0x6, 0x9, 0x0, 0x8000, 0x0, 0x80, 0x0, 0x5}, 0xffffffffffffffff, 0x4, r3, 0x0) r4 = gettid() process_vm_readv(r4, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/4078, 0xfee}, {&(0x7f0000000100)=""/57, 0x39}], 0x2, &(0x7f0000000240)=[{&(0x7f0000012940)=""/102400, 0x19000}], 0x1, 0x0) perf_event_open(0x0, r4, 0x1, r3, 0x8) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/consoles\x00', 0x0, 0x0) [ 2510.985006] FAULT_INJECTION: forcing a failure. [ 2510.985006] name failslab, interval 1, probability 0, space 0, times 0 [ 2510.986988] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12626 comm=syz-executor.4 [ 2510.987630] CPU: 0 PID: 12618 Comm: syz-executor.5 Not tainted 5.18.0-rc1-next-20220406 #1 [ 2510.992035] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2510.994619] Call Trace: [ 2510.995196] [ 2510.995696] dump_stack_lvl+0x8b/0xb3 [ 2510.996591] should_fail.cold+0x5/0xa [ 2510.997457] ? jbd2__journal_start+0x18c/0x8d0 [ 2510.998477] should_failslab+0x5/0x10 [ 2510.999328] kmem_cache_alloc+0x5b/0x480 [ 2511.000263] jbd2__journal_start+0x18c/0x8d0 [ 2511.001251] __ext4_journal_start_sb+0x392/0x470 [ 2511.002301] ? __ext4_journal_stop+0x107/0x1f0 [ 2511.003309] ext4_alloc_file_blocks.isra.0+0x286/0xb20 [ 2511.004491] ? ext4_ext_correct_indexes+0x440/0x440 [ 2511.004970] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12627 comm=syz-executor.4 [ 2511.005590] ? down_write_killable+0x170/0x170 [ 2511.009104] ext4_fallocate+0x1a2b/0x3c90 [ 2511.010023] ? lock_acquire+0x1b2/0x530 [ 2511.010037] FAULT_INJECTION: forcing a failure. [ 2511.010037] name failslab, interval 1, probability 0, space 0, times 0 [ 2511.010903] ? lock_release+0x750/0x750 [ 2511.010946] ? ext4_ext_truncate+0x3e0/0x3e0 [ 2511.010978] ? lock_is_held_type+0xd7/0x130 [ 2511.011018] ? ext4_ext_truncate+0x3e0/0x3e0 [ 2511.011049] vfs_fallocate+0x489/0xe00 [ 2511.011097] __x64_sys_fallocate+0xcf/0x140 [ 2511.018749] do_syscall_64+0x3b/0x90 [ 2511.019571] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2511.020714] RIP: 0033:0x7f35817a9b19 [ 2511.021520] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2511.025558] RSP: 002b:00007f357ed1f188 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 2511.027225] RAX: ffffffffffffffda RBX: 00007f35818bcf60 RCX: 00007f35817a9b19 [ 2511.028799] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 2511.030358] RBP: 00007f357ed1f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2511.031915] R10: 00000000087ffffc R11: 0000000000000246 R12: 0000000000000002 [ 2511.033499] R13: 00007ffdd683fcbf R14: 00007f357ed1f300 R15: 0000000000022000 [ 2511.035090] [ 2511.035602] CPU: 1 PID: 12625 Comm: syz-executor.2 Not tainted 5.18.0-rc1-next-20220406 #1 [ 2511.037344] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2511.039644] Call Trace: [ 2511.040165] [ 2511.040636] dump_stack_lvl+0x8b/0xb3 [ 2511.041434] should_fail.cold+0x5/0xa [ 2511.042219] ? create_object.isra.0+0x3a/0xa20 [ 2511.042438] FAULT_INJECTION: forcing a failure. [ 2511.042438] name failslab, interval 1, probability 0, space 0, times 0 [ 2511.043158] should_failslab+0x5/0x10 [ 2511.043191] kmem_cache_alloc+0x5b/0x480 [ 2511.047139] create_object.isra.0+0x3a/0xa20 [ 2511.048032] ? kasan_unpoison+0x23/0x50 [ 2511.048857] kmem_cache_alloc+0x239/0x480 [ 2511.049714] jbd2__journal_start+0x18c/0x8d0 [ 2511.050615] __ext4_journal_start_sb+0x392/0x470 [ 2511.051574] ? __ext4_journal_stop+0x107/0x1f0 [ 2511.052516] ext4_alloc_file_blocks.isra.0+0x286/0xb20 [ 2511.053589] ? ext4_ext_correct_indexes+0x440/0x440 [ 2511.054600] ? down_write_killable+0x170/0x170 [ 2511.055542] ext4_fallocate+0x1a2b/0x3c90 [ 2511.056389] ? lock_acquire+0x1b2/0x530 [ 2511.057197] ? lock_release+0x750/0x750 [ 2511.058013] ? ext4_ext_truncate+0x3e0/0x3e0 [ 2511.058904] ? lock_is_held_type+0xd7/0x130 [ 2511.059778] ? ext4_ext_truncate+0x3e0/0x3e0 [ 2511.060667] vfs_fallocate+0x489/0xe00 [ 2511.061466] __x64_sys_fallocate+0xcf/0x140 [ 2511.062338] do_syscall_64+0x3b/0x90 [ 2511.063083] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2511.064118] RIP: 0033:0x7fd845bccb19 [ 2511.064877] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2511.068542] RSP: 002b:00007fd843142188 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 2511.070079] RAX: ffffffffffffffda RBX: 00007fd845cdff60 RCX: 00007fd845bccb19 [ 2511.071515] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 2511.072949] RBP: 00007fd8431421d0 R08: 0000000000000000 R09: 0000000000000000 [ 2511.074378] R10: 00000000087ffffc R11: 0000000000000246 R12: 0000000000000002 [ 2511.075788] R13: 00007ffde12fa01f R14: 00007fd843142300 R15: 0000000000022000 [ 2511.077241] [ 2511.077712] CPU: 0 PID: 12623 Comm: syz-executor.7 Not tainted 5.18.0-rc1-next-20220406 #1 [ 2511.079586] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2511.082104] Call Trace: [ 2511.082675] [ 2511.083173] dump_stack_lvl+0x8b/0xb3 [ 2511.084048] should_fail.cold+0x5/0xa [ 2511.084944] ? jbd2__journal_start+0x18c/0x8d0 [ 2511.085982] should_failslab+0x5/0x10 [ 2511.086850] kmem_cache_alloc+0x5b/0x480 [ 2511.087790] jbd2__journal_start+0x18c/0x8d0 [ 2511.088801] __ext4_journal_start_sb+0x392/0x470 [ 2511.089866] ? __ext4_journal_stop+0x107/0x1f0 [ 2511.090896] ext4_alloc_file_blocks.isra.0+0x286/0xb20 [ 2511.092092] ? ext4_ext_correct_indexes+0x440/0x440 [ 2511.093242] ? down_write_killable+0x170/0x170 [ 2511.094295] ext4_fallocate+0x1a2b/0x3c90 [ 2511.095229] ? lock_acquire+0x1b2/0x530 [ 2511.096139] ? lock_release+0x750/0x750 [ 2511.097021] ? ext4_ext_truncate+0x3e0/0x3e0 [ 2511.098019] ? lock_is_held_type+0xd7/0x130 [ 2511.099020] ? ext4_ext_truncate+0x3e0/0x3e0 [ 2511.100018] vfs_fallocate+0x489/0xe00 [ 2511.100938] __x64_sys_fallocate+0xcf/0x140 [ 2511.101942] do_syscall_64+0x3b/0x90 [ 2511.102704] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2511.103908] RIP: 0033:0x7fdba5ddfb19 [ 2511.104759] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2511.108884] RSP: 002b:00007fdba3355188 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 2511.110573] RAX: ffffffffffffffda RBX: 00007fdba5ef2f60 RCX: 00007fdba5ddfb19 [ 2511.112191] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 2511.113825] RBP: 00007fdba33551d0 R08: 0000000000000000 R09: 0000000000000000 [ 2511.115385] R10: 00000000087ffffc R11: 0000000000000246 R12: 0000000000000002 [ 2511.117013] R13: 00007ffe895a664f R14: 00007fdba3355300 R15: 0000000000022000 [ 2511.118614] 07:03:26 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f00000001c0)=0x8) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x14, 0x0, 0x6600}, 0x14}}, 0x0) 07:03:26 executing program 6: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) preadv(r0, &(0x7f00000011c0)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x7, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x0, 0x0, 0x87ffffc) mmap$perf(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000008, 0x1010, r2, 0x4) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000100), 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r3 = syz_open_procfs(0x0, 0x0) perf_event_open(&(0x7f0000001240)={0x1, 0x80, 0x9, 0xa1, 0xf9, 0x3, 0x0, 0x7, 0xa0400, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x3, @perf_config_ext={0x58d}, 0x21, 0x1, 0x0, 0x6, 0x9, 0x0, 0x8000, 0x0, 0x80, 0x0, 0x5}, 0xffffffffffffffff, 0x4, r3, 0x0) r4 = gettid() process_vm_readv(r4, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/4078, 0xfee}, {&(0x7f0000000100)=""/57, 0x39}], 0x2, &(0x7f0000000240)=[{&(0x7f0000012940)=""/102400, 0x19000}], 0x1, 0x0) perf_event_open(0x0, r4, 0x1, r3, 0x8) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/consoles\x00', 0x0, 0x0) 07:03:26 executing program 0: openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r0, 0x0, 0x0, 0x87ffffc) mmap$perf(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000008, 0x10, 0xffffffffffffffff, 0x4) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x12, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = syz_open_procfs(0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001240)={0x1, 0x80, 0x0, 0xa1, 0x0, 0x0, 0x0, 0x7, 0xa0400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x3, @perf_config_ext, 0x21, 0x1, 0x0, 0x0, 0x9, 0x0, 0x8000, 0x0, 0x80, 0x0, 0x5}, 0xffffffffffffffff, 0x4, r1, 0x0) r2 = gettid() process_vm_readv(r2, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/4078, 0xfee}, {&(0x7f0000000000)=""/123, 0x7fffe012}, {&(0x7f0000000100)=""/57, 0x39}], 0x3, &(0x7f0000000240)=[{&(0x7f0000012940)=""/102400, 0xffffff76}], 0x1, 0x0) perf_event_open(0x0, r2, 0x1, r1, 0x8) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/consoles\x00', 0x0, 0x0) 07:03:26 executing program 1: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) preadv(r0, &(0x7f00000011c0)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x7, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x0, 0x0, 0x87ffffc) mmap$perf(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000008, 0x1010, r2, 0x4) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000100), 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r3 = syz_open_procfs(0x0, 0x0) preadv(r3, &(0x7f0000000080)=[{&(0x7f0000000000)=""/40, 0x40}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000001240)={0x1, 0x80, 0x9, 0xa1, 0xf9, 0x3, 0x0, 0x7, 0xa0400, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x3, @perf_config_ext={0x58d}, 0x21, 0x1, 0x0, 0x6, 0x9, 0x0, 0x8000, 0x0, 0x80, 0x0, 0x5}, 0xffffffffffffffff, 0x4, r3, 0x0) r4 = gettid() process_vm_readv(r4, 0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000012940)=""/102400, 0x19000}], 0x1, 0x0) perf_event_open(0x0, r4, 0x1, r3, 0x8) [ 2511.235909] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12636 comm=syz-executor.4 07:03:26 executing program 3: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000040)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x300000c, 0x13, r0, 0x8000000) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xa) fork() (fail_nth: 19) [ 2511.251906] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12639 comm=syz-executor.4 [ 2511.325626] FAULT_INJECTION: forcing a failure. [ 2511.325626] name failslab, interval 1, probability 0, space 0, times 0 [ 2511.328089] CPU: 0 PID: 12643 Comm: syz-executor.3 Not tainted 5.18.0-rc1-next-20220406 #1 [ 2511.329896] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2511.332360] Call Trace: [ 2511.332915] [ 2511.333405] dump_stack_lvl+0x8b/0xb3 [ 2511.334251] should_fail.cold+0x5/0xa [ 2511.335091] ? create_object.isra.0+0x3a/0xa20 [ 2511.336101] should_failslab+0x5/0x10 [ 2511.336949] kmem_cache_alloc+0x5b/0x480 [ 2511.337857] create_object.isra.0+0x3a/0xa20 [ 2511.338819] ? kasan_unpoison+0x23/0x50 [ 2511.339697] kmem_cache_alloc+0x239/0x480 [ 2511.340631] copy_process+0x21a3/0x6db0 [ 2511.341546] ? __cleanup_sighand+0xb0/0xb0 [ 2511.342497] ? lock_release+0x3b2/0x750 [ 2511.343384] ? ksys_write+0x20c/0x250 [ 2511.344229] ? kernel_clone+0x2f8/0xa60 [ 2511.345144] kernel_clone+0xe7/0xa60 [ 2511.345978] ? find_held_lock+0x2c/0x110 [ 2511.346872] ? create_io_thread+0xf0/0xf0 [ 2511.347798] ? __mutex_unlock_slowpath+0x15c/0x5e0 [ 2511.348905] ? bit_wait_io_timeout+0x160/0x160 [ 2511.349928] ? lock_is_held_type+0xd7/0x130 [ 2511.350911] __do_sys_fork+0x8a/0xc0 [ 2511.351757] ? kernel_clone+0xa60/0xa60 [ 2511.352664] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 2511.353916] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2511.355089] ? lockdep_hardirqs_on+0x79/0x100 [ 2511.356109] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2511.357285] do_syscall_64+0x3b/0x90 [ 2511.358128] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2511.359297] RIP: 0033:0x7fc1c2a89b19 [ 2511.360136] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2511.364301] RSP: 002b:00007fc1bffff188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 2511.366046] RAX: ffffffffffffffda RBX: 00007fc1c2b9cf60 RCX: 00007fc1c2a89b19 [ 2511.367668] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2511.369298] RBP: 00007fc1bffff1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2511.370923] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2511.372565] R13: 00007fff0449096f R14: 00007fc1bffff300 R15: 0000000000022000 [ 2511.374223] 07:03:27 executing program 5: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) preadv(r0, &(0x7f00000011c0)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x7, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x0, 0x0, 0x87ffffc) (fail_nth: 18) mmap$perf(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000008, 0x1010, r2, 0x4) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000100), 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r3 = syz_open_procfs(0x0, 0x0) perf_event_open(&(0x7f0000001240)={0x1, 0x80, 0x9, 0xa1, 0xf9, 0x3, 0x0, 0x7, 0xa0400, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x3, @perf_config_ext={0x58d}, 0x21, 0x1, 0x0, 0x6, 0x9, 0x0, 0x8000, 0x0, 0x80, 0x0, 0x5}, 0xffffffffffffffff, 0x4, r3, 0x0) r4 = gettid() perf_event_open(0x0, r4, 0x1, r3, 0x8) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/consoles\x00', 0x0, 0x0) 07:03:27 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f00000001c0)=0x8) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x14, 0x0, 0x6800}, 0x14}}, 0x0) 07:03:27 executing program 6: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) preadv(r0, &(0x7f00000011c0)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x7, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x0, 0x0, 0x87ffffc) mmap$perf(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000008, 0x1010, r2, 0x4) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000100), 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r3 = syz_open_procfs(0x0, 0x0) perf_event_open(&(0x7f0000001240)={0x1, 0x80, 0x9, 0xa1, 0xf9, 0x3, 0x0, 0x7, 0xa0400, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x3, @perf_config_ext={0x58d}, 0x21, 0x1, 0x0, 0x6, 0x9, 0x0, 0x8000, 0x0, 0x80, 0x0, 0x5}, 0xffffffffffffffff, 0x4, r3, 0x0) r4 = gettid() process_vm_readv(r4, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/4078, 0xfee}, {&(0x7f0000000100)=""/57, 0x39}], 0x2, &(0x7f0000000240)=[{&(0x7f0000012940)=""/102400, 0x19000}], 0x1, 0x0) perf_event_open(0x0, r4, 0x1, r3, 0x8) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/consoles\x00', 0x0, 0x0) 07:03:27 executing program 7: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000001340)) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x204800, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x1) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002480)='fd/3\x00') r2 = dup(r1) fdatasync(r2) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x40}}, './file0\x00'}) preadv2(r3, &(0x7f0000001300)=[{&(0x7f0000000080)=""/193, 0xc1}, {&(0x7f0000000180)=""/250, 0xfa}, {&(0x7f0000000300)=""/4096, 0x1000}], 0x3, 0x80000000, 0x66, 0x18) r4 = openat(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000001380)=0x100000) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r5, 0x0, 0x0, 0x87ffffc) (fail_nth: 18) sendfile(r5, r4, 0x0, 0x80000000) [ 2511.492842] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12650 comm=syz-executor.4 [ 2511.510494] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12652 comm=syz-executor.4 07:03:27 executing program 1: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) preadv(r0, &(0x7f00000011c0)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x7, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x0, 0x0, 0x87ffffc) mmap$perf(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000008, 0x1010, r2, 0x4) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000100), 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r3 = syz_open_procfs(0x0, 0x0) preadv(r3, &(0x7f0000000080)=[{&(0x7f0000000000)=""/40, 0x40}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000001240)={0x1, 0x80, 0x9, 0xa1, 0xf9, 0x3, 0x0, 0x7, 0xa0400, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x3, @perf_config_ext={0x58d}, 0x21, 0x1, 0x0, 0x6, 0x9, 0x0, 0x8000, 0x0, 0x80, 0x0, 0x5}, 0xffffffffffffffff, 0x4, r3, 0x0) r4 = gettid() process_vm_readv(r4, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/4078, 0xfee}, {&(0x7f0000000000)=""/123, 0x7b}], 0x2, &(0x7f0000000240)=[{&(0x7f0000012940)=""/102400, 0x19000}], 0x1, 0x0) perf_event_open(0x0, r4, 0x1, r3, 0x8) [ 2511.560828] FAULT_INJECTION: forcing a failure. [ 2511.560828] name failslab, interval 1, probability 0, space 0, times 0 [ 2511.563500] CPU: 1 PID: 12649 Comm: syz-executor.5 Not tainted 5.18.0-rc1-next-20220406 #1 [ 2511.565343] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2511.567780] Call Trace: [ 2511.568353] [ 2511.568837] dump_stack_lvl+0x8b/0xb3 [ 2511.569694] should_fail.cold+0x5/0xa [ 2511.570510] ? create_object.isra.0+0x3a/0xa20 [ 2511.571490] should_failslab+0x5/0x10 [ 2511.572310] kmem_cache_alloc+0x5b/0x480 [ 2511.573205] create_object.isra.0+0x3a/0xa20 [ 2511.574150] ? kasan_unpoison+0x23/0x50 [ 2511.575010] kmem_cache_alloc+0x239/0x480 [ 2511.575919] jbd2__journal_start+0x18c/0x8d0 [ 2511.576876] __ext4_journal_start_sb+0x392/0x470 [ 2511.577584] FAULT_INJECTION: forcing a failure. [ 2511.577584] name failslab, interval 1, probability 0, space 0, times 0 [ 2511.577890] ? __ext4_journal_stop+0x107/0x1f0 [ 2511.581100] ext4_alloc_file_blocks.isra.0+0x286/0xb20 [ 2511.582236] ? ext4_ext_correct_indexes+0x440/0x440 [ 2511.583306] ? down_write_killable+0x170/0x170 [ 2511.584297] ext4_fallocate+0x1a2b/0x3c90 [ 2511.585196] ? lock_acquire+0x1b2/0x530 [ 2511.586056] ? lock_release+0x750/0x750 [ 2511.586918] ? ext4_ext_truncate+0x3e0/0x3e0 [ 2511.587861] ? lock_is_held_type+0xd7/0x130 [ 2511.588802] ? ext4_ext_truncate+0x3e0/0x3e0 [ 2511.589742] vfs_fallocate+0x489/0xe00 [ 2511.590595] __x64_sys_fallocate+0xcf/0x140 [ 2511.591528] do_syscall_64+0x3b/0x90 [ 2511.592354] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2511.593462] RIP: 0033:0x7f35817a9b19 [ 2511.594252] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2511.598163] RSP: 002b:00007f357ed1f188 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 2511.599780] RAX: ffffffffffffffda RBX: 00007f35818bcf60 RCX: 00007f35817a9b19 [ 2511.601293] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 2511.602795] RBP: 00007f357ed1f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2511.604292] R10: 00000000087ffffc R11: 0000000000000246 R12: 0000000000000002 [ 2511.605812] R13: 00007ffdd683fcbf R14: 00007f357ed1f300 R15: 0000000000022000 [ 2511.607339] [ 2511.607826] CPU: 0 PID: 12655 Comm: syz-executor.7 Not tainted 5.18.0-rc1-next-20220406 #1 [ 2511.609557] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2511.611869] Call Trace: [ 2511.612410] [ 2511.612869] dump_stack_lvl+0x8b/0xb3 [ 2511.613664] should_fail.cold+0x5/0xa [ 2511.614449] ? create_object.isra.0+0x3a/0xa20 [ 2511.615394] should_failslab+0x5/0x10 [ 2511.616176] kmem_cache_alloc+0x5b/0x480 [ 2511.617038] create_object.isra.0+0x3a/0xa20 [ 2511.617937] ? kasan_unpoison+0x23/0x50 [ 2511.618759] kmem_cache_alloc+0x239/0x480 [ 2511.619624] jbd2__journal_start+0x18c/0x8d0 [ 2511.620551] __ext4_journal_start_sb+0x392/0x470 [ 2511.621523] ? __ext4_journal_stop+0x107/0x1f0 [ 2511.622448] ext4_alloc_file_blocks.isra.0+0x286/0xb20 [ 2511.623538] ? ext4_ext_correct_indexes+0x440/0x440 [ 2511.624565] ? down_write_killable+0x170/0x170 [ 2511.625523] ext4_fallocate+0x1a2b/0x3c90 [ 2511.626371] ? lock_acquire+0x1b2/0x530 [ 2511.627202] ? lock_release+0x750/0x750 [ 2511.628021] ? ext4_ext_truncate+0x3e0/0x3e0 [ 2511.628937] ? lock_is_held_type+0xd7/0x130 [ 2511.629836] ? ext4_ext_truncate+0x3e0/0x3e0 [ 2511.630730] vfs_fallocate+0x489/0xe00 [ 2511.631542] __x64_sys_fallocate+0xcf/0x140 [ 2511.632456] do_syscall_64+0x3b/0x90 [ 2511.633219] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2511.634281] RIP: 0033:0x7fdba5ddfb19 [ 2511.635035] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2511.638753] RSP: 002b:00007fdba3355188 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 2511.640303] RAX: ffffffffffffffda RBX: 00007fdba5ef2f60 RCX: 00007fdba5ddfb19 [ 2511.641756] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 2511.643200] RBP: 00007fdba33551d0 R08: 0000000000000000 R09: 0000000000000000 [ 2511.644643] R10: 00000000087ffffc R11: 0000000000000246 R12: 0000000000000002 [ 2511.646073] R13: 00007ffe895a664f R14: 00007fdba3355300 R15: 0000000000022000 [ 2511.647564] 07:03:27 executing program 2: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x204800, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x1) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002480)='fd/3\x00') fdatasync(0xffffffffffffffff) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x40}}, './file0\x00'}) preadv2(r2, &(0x7f0000001300)=[{&(0x7f0000000080)=""/193, 0xc1}, {&(0x7f0000000180)=""/250, 0xfa}, {&(0x7f0000000300)=""/4096, 0x1000}], 0x3, 0x80000000, 0x66, 0x18) openat(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r3, 0x0, 0x0, 0x87ffffc) (fail_nth: 19) 07:03:27 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f00000001c0)=0x8) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x14, 0x0, 0x6900}, 0x14}}, 0x0) [ 2511.780589] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12664 comm=syz-executor.4 07:03:27 executing program 3: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000040)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x300000c, 0x13, r0, 0x8000000) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xa) fork() (fail_nth: 20) [ 2511.848515] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12668 comm=syz-executor.4 [ 2511.879795] FAULT_INJECTION: forcing a failure. [ 2511.879795] name failslab, interval 1, probability 0, space 0, times 0 [ 2511.882418] CPU: 1 PID: 12666 Comm: syz-executor.2 Not tainted 5.18.0-rc1-next-20220406 #1 [ 2511.884188] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2511.886588] Call Trace: [ 2511.887129] [ 2511.887604] dump_stack_lvl+0x8b/0xb3 [ 2511.888440] should_fail.cold+0x5/0xa [ 2511.889256] ? ext4_find_extent+0xa39/0xd20 [ 2511.890178] should_failslab+0x5/0x10 [ 2511.890992] __kmalloc+0x72/0x440 [ 2511.891757] ext4_find_extent+0xa39/0xd20 [ 2511.892678] ext4_ext_map_blocks+0x1c8/0x5cd0 [ 2511.893649] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 2511.894762] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 2511.895875] ? ext4_ext_release+0x10/0x10 [ 2511.896752] ? lock_acquire+0x1b2/0x530 [ 2511.897588] ? lock_release+0x750/0x750 [ 2511.898424] ? lock_release+0x3b2/0x750 [ 2511.899268] ? lock_is_held_type+0xd7/0x130 [ 2511.900201] ? down_write+0xde/0x150 [ 2511.900999] ? down_write_killable+0x170/0x170 [ 2511.901979] ext4_map_blocks+0x652/0x1970 [ 2511.902868] ? lock_is_held_type+0xd7/0x130 [ 2511.903784] ? ext4_issue_zeroout+0x1c0/0x1c0 [ 2511.904740] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 2511.905897] ? jbd2__journal_start+0xf3/0x8d0 [ 2511.906847] ? __ext4_journal_start_sb+0x392/0x470 [ 2511.907874] ? __ext4_journal_start_sb+0x1d5/0x470 [ 2511.908927] ext4_alloc_file_blocks.isra.0+0x2c1/0xb20 [ 2511.910046] ? ext4_ext_correct_indexes+0x440/0x440 [ 2511.911097] ? down_write_killable+0x170/0x170 [ 2511.912073] ext4_fallocate+0x1a2b/0x3c90 [ 2511.912954] ? lock_acquire+0x1b2/0x530 [ 2511.913794] ? lock_release+0x750/0x750 [ 2511.914637] ? ext4_ext_truncate+0x3e0/0x3e0 [ 2511.915563] ? lock_is_held_type+0xd7/0x130 [ 2511.916491] ? ext4_ext_truncate+0x3e0/0x3e0 [ 2511.917419] vfs_fallocate+0x489/0xe00 [ 2511.918258] __x64_sys_fallocate+0xcf/0x140 [ 2511.919178] do_syscall_64+0x3b/0x90 [ 2511.919974] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2511.921072] RIP: 0033:0x7fd845bccb19 [ 2511.921859] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2511.925689] RSP: 002b:00007fd843142188 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 2511.927280] RAX: ffffffffffffffda RBX: 00007fd845cdff60 RCX: 00007fd845bccb19 [ 2511.928785] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 2511.930264] RBP: 00007fd8431421d0 R08: 0000000000000000 R09: 0000000000000000 [ 2511.931743] R10: 00000000087ffffc R11: 0000000000000246 R12: 0000000000000002 [ 2511.933234] R13: 00007ffde12fa01f R14: 00007fd843142300 R15: 0000000000022000 [ 2511.934751] [ 2512.020671] FAULT_INJECTION: forcing a failure. [ 2512.020671] name failslab, interval 1, probability 0, space 0, times 0 [ 2512.023177] CPU: 0 PID: 12670 Comm: syz-executor.3 Not tainted 5.18.0-rc1-next-20220406 #1 [ 2512.024893] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2512.027187] Call Trace: [ 2512.027700] [ 2512.028147] dump_stack_lvl+0x8b/0xb3 [ 2512.028960] should_fail.cold+0x5/0xa [ 2512.029739] ? copy_process+0x2322/0x6db0 [ 2512.030595] should_failslab+0x5/0x10 [ 2512.031374] kmem_cache_alloc+0x5b/0x480 [ 2512.032218] copy_process+0x2322/0x6db0 [ 2512.033082] ? __cleanup_sighand+0xb0/0xb0 [ 2512.033960] ? lock_release+0x3b2/0x750 [ 2512.034777] ? ksys_write+0x20c/0x250 [ 2512.035548] ? kernel_clone+0x2f8/0xa60 [ 2512.036372] kernel_clone+0xe7/0xa60 [ 2512.037137] ? find_held_lock+0x2c/0x110 [ 2512.037961] ? create_io_thread+0xf0/0xf0 [ 2512.038815] ? __mutex_unlock_slowpath+0x15c/0x5e0 [ 2512.039814] ? bit_wait_io_timeout+0x160/0x160 [ 2512.040752] ? lock_is_held_type+0xd7/0x130 [ 2512.041642] __do_sys_fork+0x8a/0xc0 [ 2512.042410] ? kernel_clone+0xa60/0xa60 [ 2512.043221] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 2512.044371] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2512.045429] ? lockdep_hardirqs_on+0x79/0x100 [ 2512.046345] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2512.047395] do_syscall_64+0x3b/0x90 [ 2512.048155] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2512.049212] RIP: 0033:0x7fc1c2a89b19 [ 2512.049959] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2512.053672] RSP: 002b:00007fc1bffff188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 2512.055202] RAX: ffffffffffffffda RBX: 00007fc1c2b9cf60 RCX: 00007fc1c2a89b19 [ 2512.056654] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2512.058087] RBP: 00007fc1bffff1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2512.059520] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2512.060959] R13: 00007fff0449096f R14: 00007fc1bffff300 R15: 0000000000022000 [ 2512.062418] 07:03:44 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f00000001c0)=0x8) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x14, 0x0, 0x6a00}, 0x14}}, 0x0) 07:03:44 executing program 5: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) preadv(r0, &(0x7f00000011c0)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x7, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x0, 0x0, 0x87ffffc) (fail_nth: 19) mmap$perf(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000008, 0x1010, r2, 0x4) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000100), 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r3 = syz_open_procfs(0x0, 0x0) perf_event_open(&(0x7f0000001240)={0x1, 0x80, 0x9, 0xa1, 0xf9, 0x3, 0x0, 0x7, 0xa0400, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x3, @perf_config_ext={0x58d}, 0x21, 0x1, 0x0, 0x6, 0x9, 0x0, 0x8000, 0x0, 0x80, 0x0, 0x5}, 0xffffffffffffffff, 0x4, r3, 0x0) r4 = gettid() perf_event_open(0x0, r4, 0x1, r3, 0x8) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/consoles\x00', 0x0, 0x0) 07:03:44 executing program 0: openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r0, 0x0, 0x0, 0x87ffffc) mmap$perf(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000008, 0x10, 0xffffffffffffffff, 0x4) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x12, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = syz_open_procfs(0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001240)={0x1, 0x80, 0x0, 0xa1, 0x0, 0x0, 0x0, 0x7, 0xa0400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x3, @perf_config_ext, 0x21, 0x1, 0x0, 0x0, 0x9, 0x0, 0x8000, 0x0, 0x80, 0x0, 0x5}, 0xffffffffffffffff, 0x4, r1, 0x0) r2 = gettid() process_vm_readv(r2, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/4078, 0xfee}, {&(0x7f0000000000)=""/123, 0x7ffffffff000}, {&(0x7f0000000100)=""/57, 0x39}], 0x3, &(0x7f0000000240)=[{&(0x7f0000012940)=""/102400, 0xffffff76}], 0x1, 0x0) perf_event_open(0x0, r2, 0x1, r1, 0x8) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/consoles\x00', 0x0, 0x0) 07:03:44 executing program 3: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000040)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x300000c, 0x13, r0, 0x8000000) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xa) fork() (fail_nth: 21) 07:03:44 executing program 7: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000001340)) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x204800, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x1) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002480)='fd/3\x00') r2 = dup(r1) fdatasync(r2) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x40}}, './file0\x00'}) preadv2(r3, &(0x7f0000001300)=[{&(0x7f0000000080)=""/193, 0xc1}, {&(0x7f0000000180)=""/250, 0xfa}, {&(0x7f0000000300)=""/4096, 0x1000}], 0x3, 0x80000000, 0x66, 0x18) r4 = openat(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000001380)=0x100000) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r5, 0x0, 0x0, 0x87ffffc) (fail_nth: 19) sendfile(r5, r4, 0x0, 0x80000000) 07:03:44 executing program 1: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) preadv(r0, &(0x7f00000011c0)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x7, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x0, 0x0, 0x87ffffc) mmap$perf(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000008, 0x1010, r2, 0x4) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000100), 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r3 = syz_open_procfs(0x0, 0x0) preadv(r3, &(0x7f0000000080)=[{&(0x7f0000000000)=""/40, 0x40}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000001240)={0x1, 0x80, 0x9, 0xa1, 0xf9, 0x3, 0x0, 0x7, 0xa0400, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x3, @perf_config_ext={0x58d}, 0x21, 0x1, 0x0, 0x6, 0x9, 0x0, 0x8000, 0x0, 0x80, 0x0, 0x5}, 0xffffffffffffffff, 0x4, r3, 0x0) r4 = gettid() process_vm_readv(r4, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/4078, 0xfee}, {&(0x7f0000000000)=""/123, 0x7b}], 0x2, &(0x7f0000000240)=[{&(0x7f0000012940)=""/102400, 0x19000}], 0x1, 0x0) perf_event_open(0x0, r4, 0x1, r3, 0x8) 07:03:44 executing program 2: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x204800, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x1) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002480)='fd/3\x00') fdatasync(0xffffffffffffffff) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x40}}, './file0\x00'}) preadv2(r2, &(0x7f0000001300)=[{&(0x7f0000000080)=""/193, 0xc1}, {&(0x7f0000000180)=""/250, 0xfa}, {&(0x7f0000000300)=""/4096, 0x1000}], 0x3, 0x80000000, 0x66, 0x18) openat(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r3, 0x0, 0x0, 0x87ffffc) (fail_nth: 20) 07:03:44 executing program 6: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) preadv(r0, &(0x7f00000011c0)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x7, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x0, 0x0, 0x87ffffc) mmap$perf(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000008, 0x1010, r2, 0x4) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000100), 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r3 = syz_open_procfs(0x0, 0x0) perf_event_open(&(0x7f0000001240)={0x1, 0x80, 0x9, 0xa1, 0xf9, 0x3, 0x0, 0x7, 0xa0400, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x3, @perf_config_ext={0x58d}, 0x21, 0x1, 0x0, 0x6, 0x9, 0x0, 0x8000, 0x0, 0x80, 0x0, 0x5}, 0xffffffffffffffff, 0x4, r3, 0x0) r4 = gettid() process_vm_readv(r4, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/4078, 0xfee}, {0x0}, {&(0x7f0000000100)=""/57, 0x39}], 0x3, &(0x7f0000000240)=[{&(0x7f0000012940)=""/102400, 0x19000}], 0x1, 0x0) perf_event_open(0x0, r4, 0x1, r3, 0x8) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/consoles\x00', 0x0, 0x0) [ 2528.293786] FAULT_INJECTION: forcing a failure. [ 2528.293786] name failslab, interval 1, probability 0, space 0, times 0 [ 2528.296089] CPU: 1 PID: 12685 Comm: syz-executor.3 Not tainted 5.18.0-rc1-next-20220406 #1 [ 2528.297758] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2528.300011] Call Trace: [ 2528.300523] [ 2528.300980] dump_stack_lvl+0x8b/0xb3 [ 2528.301752] should_fail.cold+0x5/0xa [ 2528.302519] ? create_object.isra.0+0x3a/0xa20 [ 2528.303435] should_failslab+0x5/0x10 [ 2528.304208] kmem_cache_alloc+0x5b/0x480 [ 2528.305051] create_object.isra.0+0x3a/0xa20 [ 2528.305936] ? kasan_unpoison+0x23/0x50 [ 2528.306738] kmem_cache_alloc+0x239/0x480 [ 2528.307575] copy_process+0x2322/0x6db0 [ 2528.308417] ? __cleanup_sighand+0xb0/0xb0 [ 2528.309284] ? lock_release+0x3b2/0x750 [ 2528.310077] ? ksys_write+0x20c/0x250 [ 2528.310835] ? kernel_clone+0x2f8/0xa60 [ 2528.311632] kernel_clone+0xe7/0xa60 [ 2528.312380] ? find_held_lock+0x2c/0x110 07:03:44 executing program 0: openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r0, 0x0, 0x0, 0x87ffffc) mmap$perf(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000008, 0x10, 0xffffffffffffffff, 0x4) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x12, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = syz_open_procfs(0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001240)={0x1, 0x80, 0x0, 0xa1, 0x0, 0x0, 0x0, 0x7, 0xa0400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x3, @perf_config_ext, 0x21, 0x1, 0x0, 0x0, 0x9, 0x0, 0x8000, 0x0, 0x80, 0x0, 0x5}, 0xffffffffffffffff, 0x4, r1, 0x0) r2 = gettid() process_vm_readv(r2, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/4078, 0xfee}, {&(0x7f0000000000)=""/123, 0x7b}, {&(0x7f0000000100)=""/57, 0x7fffdf97}], 0x3, &(0x7f0000000240)=[{&(0x7f0000012940)=""/102400, 0xffffff76}], 0x1, 0x0) perf_event_open(0x0, r2, 0x1, r1, 0x8) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/consoles\x00', 0x0, 0x0) [ 2528.313206] ? create_io_thread+0xf0/0xf0 [ 2528.314256] ? __mutex_unlock_slowpath+0x15c/0x5e0 [ 2528.315245] ? bit_wait_io_timeout+0x160/0x160 [ 2528.316176] ? lock_is_held_type+0xd7/0x130 [ 2528.317062] __do_sys_fork+0x8a/0xc0 [ 2528.317828] ? kernel_clone+0xa60/0xa60 [ 2528.318636] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 2528.319758] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2528.320814] ? lockdep_hardirqs_on+0x79/0x100 [ 2528.321732] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2528.322760] do_syscall_64+0x3b/0x90 [ 2528.323502] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2528.324532] RIP: 0033:0x7fc1c2a89b19 [ 2528.325284] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2528.328910] RSP: 002b:00007fc1bffff188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 2528.330420] RAX: ffffffffffffffda RBX: 00007fc1c2b9cf60 RCX: 00007fc1c2a89b19 [ 2528.331835] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2528.333273] RBP: 00007fc1bffff1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2528.334683] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2528.336093] R13: 00007fff0449096f R14: 00007fc1bffff300 R15: 0000000000022000 [ 2528.337579] [ 2528.351538] FAULT_INJECTION: forcing a failure. [ 2528.351538] name failslab, interval 1, probability 0, space 0, times 0 [ 2528.353674] CPU: 0 PID: 12680 Comm: syz-executor.5 Not tainted 5.18.0-rc1-next-20220406 #1 [ 2528.355113] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2528.357023] Call Trace: [ 2528.357465] [ 2528.357851] dump_stack_lvl+0x8b/0xb3 [ 2528.358541] should_fail.cold+0x5/0xa [ 2528.358617] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12695 comm=syz-executor.4 [ 2528.359205] ? ext4_find_extent+0xa39/0xd20 [ 2528.362350] should_failslab+0x5/0x10 [ 2528.362966] __kmalloc+0x72/0x440 [ 2528.363553] ext4_find_extent+0xa39/0xd20 [ 2528.363801] FAULT_INJECTION: forcing a failure. [ 2528.363801] name failslab, interval 1, probability 0, space 0, times 0 [ 2528.364295] ext4_ext_map_blocks+0x1c8/0x5cd0 [ 2528.364334] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 2528.364367] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 2528.364405] ? ext4_ext_release+0x10/0x10 [ 2528.364432] ? lock_acquire+0x1b2/0x530 [ 2528.370436] ? lock_release+0x750/0x750 [ 2528.371139] ? lock_release+0x3b2/0x750 [ 2528.371810] ? lock_is_held_type+0xd7/0x130 [ 2528.372535] ? down_write+0xde/0x150 [ 2528.373186] ? down_write_killable+0x170/0x170 [ 2528.373997] ext4_map_blocks+0x652/0x1970 [ 2528.374706] ? lock_is_held_type+0xd7/0x130 [ 2528.375412] ? ext4_issue_zeroout+0x1c0/0x1c0 [ 2528.376183] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 2528.377152] ? jbd2__journal_start+0xf3/0x8d0 [ 2528.377926] ? __ext4_journal_start_sb+0x392/0x470 [ 2528.378737] ? __ext4_journal_start_sb+0x1d5/0x470 [ 2528.379533] ext4_alloc_file_blocks.isra.0+0x2c1/0xb20 [ 2528.380455] ? ext4_ext_correct_indexes+0x440/0x440 [ 2528.381314] ? down_write_killable+0x170/0x170 [ 2528.382131] ext4_fallocate+0x1a2b/0x3c90 [ 2528.382843] ? lock_acquire+0x1b2/0x530 [ 2528.383535] ? lock_release+0x750/0x750 [ 2528.384171] ? ext4_ext_truncate+0x3e0/0x3e0 [ 2528.384933] ? lock_is_held_type+0xd7/0x130 [ 2528.385680] ? ext4_ext_truncate+0x3e0/0x3e0 [ 2528.386440] vfs_fallocate+0x489/0xe00 [ 2528.387065] __x64_sys_fallocate+0xcf/0x140 [ 2528.387808] do_syscall_64+0x3b/0x90 [ 2528.388448] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2528.389349] RIP: 0033:0x7f35817a9b19 [ 2528.389977] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2528.393139] RSP: 002b:00007f357ed1f188 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 2528.394432] RAX: ffffffffffffffda RBX: 00007f35818bcf60 RCX: 00007f35817a9b19 [ 2528.395538] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 2528.396758] RBP: 00007f357ed1f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2528.397972] R10: 00000000087ffffc R11: 0000000000000246 R12: 0000000000000002 [ 2528.399185] R13: 00007ffdd683fcbf R14: 00007f357ed1f300 R15: 0000000000022000 [ 2528.400427] [ 2528.400808] CPU: 1 PID: 12694 Comm: syz-executor.2 Not tainted 5.18.0-rc1-next-20220406 #1 [ 2528.402509] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2528.404798] Call Trace: [ 2528.405306] [ 2528.405766] dump_stack_lvl+0x8b/0xb3 [ 2528.406610] should_fail.cold+0x5/0xa [ 2528.407612] ? create_object.isra.0+0x3a/0xa20 [ 2528.408814] should_failslab+0x5/0x10 [ 2528.409820] kmem_cache_alloc+0x5b/0x480 [ 2528.410856] create_object.isra.0+0x3a/0xa20 [ 2528.411761] ? kasan_unpoison+0x23/0x50 [ 2528.412555] __kmalloc+0x25b/0x440 [ 2528.413322] ext4_find_extent+0xa39/0xd20 [ 2528.414181] ext4_ext_map_blocks+0x1c8/0x5cd0 [ 2528.415102] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 2528.416161] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 2528.417255] ? ext4_ext_release+0x10/0x10 [ 2528.418092] ? lock_acquire+0x1b2/0x530 [ 2528.418905] ? lock_release+0x750/0x750 [ 2528.419712] ? lock_release+0x3b2/0x750 [ 2528.420515] ? lock_is_held_type+0xd7/0x130 [ 2528.421431] ? down_write+0xde/0x150 [ 2528.422201] ? down_write_killable+0x170/0x170 [ 2528.423136] ext4_map_blocks+0x652/0x1970 [ 2528.423999] ? lock_is_held_type+0xd7/0x130 [ 2528.424888] ? ext4_issue_zeroout+0x1c0/0x1c0 [ 2528.425806] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 2528.426917] ? jbd2__journal_start+0xf3/0x8d0 [ 2528.427831] ? __ext4_journal_start_sb+0x392/0x470 [ 2528.428846] ? __ext4_journal_start_sb+0x1d5/0x470 07:03:44 executing program 6: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) preadv(r0, &(0x7f00000011c0)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x7, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x0, 0x0, 0x87ffffc) mmap$perf(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000008, 0x1010, r2, 0x4) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000100), 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r3 = syz_open_procfs(0x0, 0x0) perf_event_open(&(0x7f0000001240)={0x1, 0x80, 0x9, 0xa1, 0xf9, 0x3, 0x0, 0x7, 0xa0400, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x3, @perf_config_ext={0x58d}, 0x21, 0x1, 0x0, 0x6, 0x9, 0x0, 0x8000, 0x0, 0x80, 0x0, 0x5}, 0xffffffffffffffff, 0x4, r3, 0x0) r4 = gettid() process_vm_readv(r4, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/4078, 0xfee}, {0x0}, {&(0x7f0000000100)=""/57, 0x39}], 0x3, &(0x7f0000000240)=[{&(0x7f0000012940)=""/102400, 0x19000}], 0x1, 0x0) perf_event_open(0x0, r4, 0x1, r3, 0x8) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/consoles\x00', 0x0, 0x0) [ 2528.429846] ext4_alloc_file_blocks.isra.0+0x2c1/0xb20 [ 2528.431098] ? ext4_ext_correct_indexes+0x440/0x440 [ 2528.432096] ? down_write_killable+0x170/0x170 [ 2528.433054] ext4_fallocate+0x1a2b/0x3c90 [ 2528.433899] ? lock_acquire+0x1b2/0x530 [ 2528.434721] ? lock_release+0x750/0x750 [ 2528.435523] ? ext4_ext_truncate+0x3e0/0x3e0 [ 2528.436411] ? lock_is_held_type+0xd7/0x130 [ 2528.437317] ? ext4_ext_truncate+0x3e0/0x3e0 [ 2528.438212] vfs_fallocate+0x489/0xe00 [ 2528.439034] __x64_sys_fallocate+0xcf/0x140 [ 2528.439917] do_syscall_64+0x3b/0x90 [ 2528.440693] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2528.441739] RIP: 0033:0x7fd845bccb19 [ 2528.442485] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2528.446162] RSP: 002b:00007fd843142188 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 2528.447698] RAX: ffffffffffffffda RBX: 00007fd845cdff60 RCX: 00007fd845bccb19 [ 2528.449143] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 2528.450558] RBP: 00007fd8431421d0 R08: 0000000000000000 R09: 0000000000000000 [ 2528.451995] R10: 00000000087ffffc R11: 0000000000000246 R12: 0000000000000002 [ 2528.453424] R13: 00007ffde12fa01f R14: 00007fd843142300 R15: 0000000000022000 [ 2528.454877] [ 2528.471172] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12703 comm=syz-executor.4 07:03:44 executing program 7: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000001340)) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x204800, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x1) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002480)='fd/3\x00') r2 = dup(r1) fdatasync(r2) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x40}}, './file0\x00'}) preadv2(r3, &(0x7f0000001300)=[{&(0x7f0000000080)=""/193, 0xc1}, {&(0x7f0000000180)=""/250, 0xfa}, {&(0x7f0000000300)=""/4096, 0x1000}], 0x3, 0x80000000, 0x66, 0x18) r4 = openat(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000001380)=0x100000) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r5, 0x0, 0x0, 0x87ffffc) sendfile(r5, r4, 0x0, 0x80000000) 07:03:44 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f00000001c0)=0x8) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x14, 0x0, 0x6c00}, 0x14}}, 0x0) 07:03:44 executing program 1: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) preadv(r0, &(0x7f00000011c0)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x7, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x0, 0x0, 0x87ffffc) mmap$perf(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000008, 0x1010, r2, 0x4) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000100), 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r3 = syz_open_procfs(0x0, 0x0) preadv(r3, &(0x7f0000000080)=[{&(0x7f0000000000)=""/40, 0x40}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000001240)={0x1, 0x80, 0x9, 0xa1, 0xf9, 0x3, 0x0, 0x7, 0xa0400, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x3, @perf_config_ext={0x58d}, 0x21, 0x1, 0x0, 0x6, 0x9, 0x0, 0x8000, 0x0, 0x80, 0x0, 0x5}, 0xffffffffffffffff, 0x4, r3, 0x0) r4 = gettid() process_vm_readv(r4, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/4078, 0xfee}, {&(0x7f0000000000)=""/123, 0x7b}], 0x2, &(0x7f0000000240)=[{&(0x7f0000012940)=""/102400, 0x19000}], 0x1, 0x0) perf_event_open(0x0, r4, 0x1, r3, 0x8) [ 2528.620644] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12710 comm=syz-executor.4 [ 2528.630541] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12712 comm=syz-executor.4 07:03:44 executing program 6: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) preadv(r0, &(0x7f00000011c0)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x7, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x0, 0x0, 0x87ffffc) mmap$perf(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000008, 0x1010, r2, 0x4) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000100), 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r3 = syz_open_procfs(0x0, 0x0) perf_event_open(&(0x7f0000001240)={0x1, 0x80, 0x9, 0xa1, 0xf9, 0x3, 0x0, 0x7, 0xa0400, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x3, @perf_config_ext={0x58d}, 0x21, 0x1, 0x0, 0x6, 0x9, 0x0, 0x8000, 0x0, 0x80, 0x0, 0x5}, 0xffffffffffffffff, 0x4, r3, 0x0) r4 = gettid() process_vm_readv(r4, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/4078, 0xfee}, {0x0}, {&(0x7f0000000100)=""/57, 0x39}], 0x3, &(0x7f0000000240)=[{&(0x7f0000012940)=""/102400, 0x19000}], 0x1, 0x0) perf_event_open(0x0, r4, 0x1, r3, 0x8) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/consoles\x00', 0x0, 0x0) 07:03:44 executing program 3: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000040)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x300000c, 0x13, r0, 0x8000000) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xa) fork() (fail_nth: 22) 07:03:44 executing program 5: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) preadv(r0, &(0x7f00000011c0)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x7, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x0, 0x0, 0x87ffffc) (fail_nth: 20) mmap$perf(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000008, 0x1010, r2, 0x4) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000100), 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r3 = syz_open_procfs(0x0, 0x0) perf_event_open(&(0x7f0000001240)={0x1, 0x80, 0x9, 0xa1, 0xf9, 0x3, 0x0, 0x7, 0xa0400, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x3, @perf_config_ext={0x58d}, 0x21, 0x1, 0x0, 0x6, 0x9, 0x0, 0x8000, 0x0, 0x80, 0x0, 0x5}, 0xffffffffffffffff, 0x4, r3, 0x0) r4 = gettid() perf_event_open(0x0, r4, 0x1, r3, 0x8) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/consoles\x00', 0x0, 0x0) 07:03:44 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f00000001c0)=0x8) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x14, 0x0, 0x6d00}, 0x14}}, 0x0) [ 2528.745619] FAULT_INJECTION: forcing a failure. [ 2528.745619] name failslab, interval 1, probability 0, space 0, times 0 [ 2528.748139] CPU: 1 PID: 12719 Comm: syz-executor.3 Not tainted 5.18.0-rc1-next-20220406 #1 [ 2528.749943] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2528.752448] Call Trace: [ 2528.753025] [ 2528.753526] dump_stack_lvl+0x8b/0xb3 [ 2528.754385] should_fail.cold+0x5/0xa [ 2528.755256] ? dup_mm+0x88/0x1250 [ 2528.756045] should_failslab+0x5/0x10 [ 2528.756919] kmem_cache_alloc+0x5b/0x480 [ 2528.757839] dup_mm+0x88/0x1250 [ 2528.758589] ? lock_release+0x3b2/0x750 [ 2528.759475] ? copy_process+0x27ec/0x6db0 [ 2528.760410] ? replace_mm_exe_file+0x490/0x490 [ 2528.761442] ? __raw_spin_lock_init+0x36/0x110 [ 2528.762468] copy_process+0x698c/0x6db0 [ 2528.763389] ? __cleanup_sighand+0xb0/0xb0 [ 2528.764350] ? lock_release+0x3b2/0x750 [ 2528.765249] ? ksys_write+0x20c/0x250 [ 2528.766094] ? kernel_clone+0x2f8/0xa60 [ 2528.766988] kernel_clone+0xe7/0xa60 [ 2528.767826] ? find_held_lock+0x2c/0x110 [ 2528.768734] ? create_io_thread+0xf0/0xf0 [ 2528.769667] ? __mutex_unlock_slowpath+0x15c/0x5e0 [ 2528.770762] ? bit_wait_io_timeout+0x160/0x160 [ 2528.771775] ? lock_is_held_type+0xd7/0x130 [ 2528.772764] __do_sys_fork+0x8a/0xc0 [ 2528.773599] ? kernel_clone+0xa60/0xa60 [ 2528.774488] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 2528.775730] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2528.776890] ? lockdep_hardirqs_on+0x79/0x100 [ 2528.777890] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2528.779041] do_syscall_64+0x3b/0x90 [ 2528.779870] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2528.781026] RIP: 0033:0x7fc1c2a89b19 [ 2528.781843] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2528.785910] RSP: 002b:00007fc1bffff188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 2528.787107] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12721 comm=syz-executor.4 [ 2528.787582] RAX: ffffffffffffffda RBX: 00007fc1c2b9cf60 RCX: 00007fc1c2a89b19 [ 2528.787601] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2528.787616] RBP: 00007fc1bffff1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2528.794155] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2528.795724] R13: 00007fff0449096f R14: 00007fc1bffff300 R15: 0000000000022000 [ 2528.797340] [ 2528.803780] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12723 comm=syz-executor.4 [ 2528.850561] FAULT_INJECTION: forcing a failure. [ 2528.850561] name failslab, interval 1, probability 0, space 0, times 0 [ 2528.852556] CPU: 0 PID: 12725 Comm: syz-executor.5 Not tainted 5.18.0-rc1-next-20220406 #1 [ 2528.853808] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2528.855669] Call Trace: [ 2528.856098] [ 2528.856429] dump_stack_lvl+0x8b/0xb3 [ 2528.857066] should_fail.cold+0x5/0xa [ 2528.857679] ? create_object.isra.0+0x3a/0xa20 [ 2528.858451] should_failslab+0x5/0x10 [ 2528.859096] kmem_cache_alloc+0x5b/0x480 [ 2528.859747] create_object.isra.0+0x3a/0xa20 [ 2528.860461] ? kasan_unpoison+0x23/0x50 [ 2528.861102] __kmalloc+0x25b/0x440 [ 2528.861697] ext4_find_extent+0xa39/0xd20 [ 2528.862349] ext4_ext_map_blocks+0x1c8/0x5cd0 [ 2528.863082] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 2528.863916] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 2528.864825] ? ext4_ext_release+0x10/0x10 [ 2528.865480] ? lock_acquire+0x1b2/0x530 [ 2528.866113] ? lock_release+0x750/0x750 [ 2528.866724] ? lock_release+0x3b2/0x750 [ 2528.867369] ? lock_is_held_type+0xd7/0x130 [ 2528.868067] ? down_write+0xde/0x150 [ 2528.868652] ? down_write_killable+0x170/0x170 [ 2528.869382] ext4_map_blocks+0x652/0x1970 [ 2528.870027] ? lock_is_held_type+0xd7/0x130 [ 2528.870717] ? ext4_issue_zeroout+0x1c0/0x1c0 [ 2528.871435] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 2528.872310] ? jbd2__journal_start+0xf3/0x8d0 [ 2528.873028] ? __ext4_journal_start_sb+0x392/0x470 [ 2528.873777] ? __ext4_journal_start_sb+0x1d5/0x470 [ 2528.874557] ext4_alloc_file_blocks.isra.0+0x2c1/0xb20 [ 2528.875390] ? ext4_ext_correct_indexes+0x440/0x440 [ 2528.876181] ? down_write_killable+0x170/0x170 [ 2528.876931] ext4_fallocate+0x1a2b/0x3c90 [ 2528.877584] ? lock_acquire+0x1b2/0x530 [ 2528.878216] ? lock_release+0x750/0x750 [ 2528.878850] ? ext4_ext_truncate+0x3e0/0x3e0 [ 2528.879545] ? lock_is_held_type+0xd7/0x130 [ 2528.880236] ? ext4_ext_truncate+0x3e0/0x3e0 [ 2528.880939] vfs_fallocate+0x489/0xe00 [ 2528.881562] __x64_sys_fallocate+0xcf/0x140 [ 2528.882253] do_syscall_64+0x3b/0x90 [ 2528.882846] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2528.883665] RIP: 0033:0x7f35817a9b19 [ 2528.884247] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2528.887154] RSP: 002b:00007f357ed1f188 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 2528.888352] RAX: ffffffffffffffda RBX: 00007f35818bcf60 RCX: 00007f35817a9b19 [ 2528.889473] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 2528.890592] RBP: 00007f357ed1f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2528.891702] R10: 00000000087ffffc R11: 0000000000000246 R12: 0000000000000002 [ 2528.892822] R13: 00007ffdd683fcbf R14: 00007f357ed1f300 R15: 0000000000022000 [ 2528.893971] 07:03:44 executing program 1: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) preadv(r0, &(0x7f00000011c0)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x7, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x0, 0x0, 0x87ffffc) mmap$perf(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000008, 0x1010, r2, 0x4) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000100), 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r3 = syz_open_procfs(0x0, 0x0) preadv(r3, &(0x7f0000000080)=[{&(0x7f0000000000)=""/40, 0x40}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000001240)={0x1, 0x80, 0x9, 0xa1, 0xf9, 0x3, 0x0, 0x7, 0xa0400, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x3, @perf_config_ext={0x58d}, 0x21, 0x1, 0x0, 0x6, 0x9, 0x0, 0x8000, 0x0, 0x80, 0x0, 0x5}, 0xffffffffffffffff, 0x4, r3, 0x0) r4 = gettid() process_vm_readv(r4, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/4078, 0xfee}, {&(0x7f0000000000)=""/123, 0x7b}, {0x0}], 0x3, &(0x7f0000000240)=[{&(0x7f0000012940)=""/102400, 0x19000}], 0x1, 0x0) perf_event_open(0x0, r4, 0x1, r3, 0x8) 07:03:44 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f00000001c0)=0x8) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x14, 0x0, 0x7000}, 0x14}}, 0x0) [ 2529.009654] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12730 comm=syz-executor.4 [ 2529.021051] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12731 comm=syz-executor.4 07:03:44 executing program 3: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000040)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x300000c, 0x13, r0, 0x8000000) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xa) fork() (fail_nth: 23) 07:03:44 executing program 6: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) preadv(r0, &(0x7f00000011c0)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x7, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x0, 0x0, 0x87ffffc) mmap$perf(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000008, 0x1010, r2, 0x4) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000100), 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r3 = syz_open_procfs(0x0, 0x0) perf_event_open(&(0x7f0000001240)={0x1, 0x80, 0x9, 0xa1, 0xf9, 0x3, 0x0, 0x7, 0xa0400, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x3, @perf_config_ext={0x58d}, 0x21, 0x1, 0x0, 0x6, 0x9, 0x0, 0x8000, 0x0, 0x80, 0x0, 0x5}, 0xffffffffffffffff, 0x4, r3, 0x0) r4 = gettid() process_vm_readv(r4, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/123, 0x7b}, {&(0x7f0000000100)=""/57, 0x39}], 0x2, &(0x7f0000000240)=[{&(0x7f0000012940)=""/102400, 0x19000}], 0x1, 0x0) perf_event_open(0x0, r4, 0x1, r3, 0x8) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/consoles\x00', 0x0, 0x0) 07:03:44 executing program 2: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x204800, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x1) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002480)='fd/3\x00') fdatasync(0xffffffffffffffff) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x40}}, './file0\x00'}) preadv2(r2, &(0x7f0000001300)=[{&(0x7f0000000080)=""/193, 0xc1}, {&(0x7f0000000180)=""/250, 0xfa}, {&(0x7f0000000300)=""/4096, 0x1000}], 0x3, 0x80000000, 0x66, 0x18) openat(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r3, 0x0, 0x0, 0x87ffffc) (fail_nth: 21) 07:03:44 executing program 7: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000001340)) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x204800, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x1) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002480)='fd/3\x00') r2 = dup(r1) fdatasync(r2) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x40}}, './file0\x00'}) preadv2(r3, &(0x7f0000001300)=[{&(0x7f0000000080)=""/193, 0xc1}, {&(0x7f0000000180)=""/250, 0xfa}, {&(0x7f0000000300)=""/4096, 0x1000}], 0x3, 0x80000000, 0x66, 0x18) r4 = openat(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000001380)=0x100000) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r5, 0x2, 0x0, 0x87ffffc) sendfile(r5, r4, 0x0, 0x80000000) [ 2529.101375] FAULT_INJECTION: forcing a failure. [ 2529.101375] name failslab, interval 1, probability 0, space 0, times 0 [ 2529.103280] CPU: 0 PID: 12735 Comm: syz-executor.3 Not tainted 5.18.0-rc1-next-20220406 #1 [ 2529.104644] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2529.106522] Call Trace: [ 2529.106942] [ 2529.107316] dump_stack_lvl+0x8b/0xb3 [ 2529.107965] should_fail.cold+0x5/0xa [ 2529.108619] ? copy_process+0x2322/0x6db0 [ 2529.109309] should_failslab+0x5/0x10 [ 2529.109941] kmem_cache_alloc+0x5b/0x480 [ 2529.110643] copy_process+0x2322/0x6db0 [ 2529.111326] ? __cleanup_sighand+0xb0/0xb0 [ 2529.112043] ? lock_release+0x3b2/0x750 [ 2529.112712] ? ksys_write+0x20c/0x250 [ 2529.113355] ? kernel_clone+0x2f8/0xa60 [ 2529.114031] kernel_clone+0xe7/0xa60 [ 2529.114603] ? find_held_lock+0x2c/0x110 [ 2529.115265] ? create_io_thread+0xf0/0xf0 [ 2529.115971] ? __mutex_unlock_slowpath+0x15c/0x5e0 [ 2529.116744] ? bit_wait_io_timeout+0x160/0x160 [ 2529.117504] ? lock_is_held_type+0xd7/0x130 [ 2529.118176] __do_sys_fork+0x8a/0xc0 [ 2529.118792] ? kernel_clone+0xa60/0xa60 [ 2529.119462] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 2529.120405] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2529.121202] ? lockdep_hardirqs_on+0x79/0x100 [ 2529.121944] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2529.122730] do_syscall_64+0x3b/0x90 [ 2529.123344] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2529.124204] RIP: 0033:0x7fc1c2a89b19 [ 2529.124841] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2529.127900] RSP: 002b:00007fc1bffff188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 2529.129146] RAX: ffffffffffffffda RBX: 00007fc1c2b9cf60 RCX: 00007fc1c2a89b19 [ 2529.130322] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2529.131479] RBP: 00007fc1bffff1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2529.132653] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2529.133824] R13: 00007fff0449096f R14: 00007fc1bffff300 R15: 0000000000022000 [ 2529.135009] 07:03:44 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f00000001c0)=0x8) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x14, 0x0, 0x7100}, 0x14}}, 0x0) [ 2529.184214] FAULT_INJECTION: forcing a failure. [ 2529.184214] name failslab, interval 1, probability 0, space 0, times 0 [ 2529.187149] CPU: 1 PID: 12738 Comm: syz-executor.2 Not tainted 5.18.0-rc1-next-20220406 #1 [ 2529.188977] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2529.191450] Call Trace: [ 2529.192011] [ 2529.192503] dump_stack_lvl+0x8b/0xb3 [ 2529.193363] should_fail.cold+0x5/0xa [ 2529.194217] ? ext4_mb_new_blocks+0x64b/0x4b60 [ 2529.195240] should_failslab+0x5/0x10 [ 2529.196097] kmem_cache_alloc+0x5b/0x480 [ 2529.197038] ext4_mb_new_blocks+0x64b/0x4b60 [ 2529.198032] ? lock_is_held_type+0xd7/0x130 [ 2529.198997] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2529.200225] ? ext4_cache_extents+0x148/0x2d0 [ 2529.201221] ? ext4_discard_preallocations+0xe60/0xe60 [ 2529.202395] ? __sanitizer_cov_trace_const_cmp2+0x22/0x80 [ 2529.203560] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12744 comm=syz-executor.4 [ 2529.203629] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2529.206623] ? ext4_ext_search_right+0x2e3/0xbd0 [ 2529.207681] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2529.208918] ext4_ext_map_blocks+0x1fb0/0x5cd0 [ 2529.209954] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 2529.210869] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12745 comm=syz-executor.4 [ 2529.211123] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 2529.214076] ? ext4_ext_release+0x10/0x10 [ 2529.215001] ? lock_release+0x750/0x750 [ 2529.215887] ? lock_release+0x3b2/0x750 [ 2529.216795] ? lock_is_held_type+0xd7/0x130 [ 2529.217786] ? down_write_killable+0x170/0x170 [ 2529.218815] ext4_map_blocks+0x652/0x1970 [ 2529.219755] ? lock_is_held_type+0xd7/0x130 [ 2529.220727] ? ext4_issue_zeroout+0x1c0/0x1c0 [ 2529.221729] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 2529.222962] ? jbd2__journal_start+0xf3/0x8d0 [ 2529.223960] ? __ext4_journal_start_sb+0x392/0x470 [ 2529.225062] ? __ext4_journal_start_sb+0x1d5/0x470 [ 2529.226164] ext4_alloc_file_blocks.isra.0+0x2c1/0xb20 [ 2529.227340] ? ext4_ext_correct_indexes+0x440/0x440 [ 2529.228458] ? down_write_killable+0x170/0x170 [ 2529.229505] ext4_fallocate+0x1a2b/0x3c90 [ 2529.230427] ? lock_acquire+0x1b2/0x530 [ 2529.231321] ? lock_release+0x750/0x750 [ 2529.232221] ? ext4_ext_truncate+0x3e0/0x3e0 [ 2529.233202] ? lock_is_held_type+0xd7/0x130 [ 2529.234183] ? ext4_ext_truncate+0x3e0/0x3e0 [ 2529.235158] vfs_fallocate+0x489/0xe00 [ 2529.236047] __x64_sys_fallocate+0xcf/0x140 [ 2529.237018] do_syscall_64+0x3b/0x90 [ 2529.237851] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2529.239002] RIP: 0033:0x7fd845bccb19 [ 2529.239820] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2529.243888] RSP: 002b:00007fd843142188 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 2529.245602] RAX: ffffffffffffffda RBX: 00007fd845cdff60 RCX: 00007fd845bccb19 [ 2529.247180] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 2529.248784] RBP: 00007fd8431421d0 R08: 0000000000000000 R09: 0000000000000000 [ 2529.250363] R10: 00000000087ffffc R11: 0000000000000246 R12: 0000000000000002 [ 2529.251940] R13: 00007ffde12fa01f R14: 00007fd843142300 R15: 0000000000022000 [ 2529.253582] 07:03:58 executing program 2: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x204800, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x1) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002480)='fd/3\x00') fdatasync(0xffffffffffffffff) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x40}}, './file0\x00'}) preadv2(r2, &(0x7f0000001300)=[{&(0x7f0000000080)=""/193, 0xc1}, {&(0x7f0000000180)=""/250, 0xfa}, {&(0x7f0000000300)=""/4096, 0x1000}], 0x3, 0x80000000, 0x66, 0x18) openat(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r3, 0x0, 0x0, 0x87ffffc) (fail_nth: 22) 07:03:58 executing program 6: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) preadv(r0, &(0x7f00000011c0)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x7, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x0, 0x0, 0x87ffffc) mmap$perf(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000008, 0x1010, r2, 0x4) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000100), 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r3 = syz_open_procfs(0x0, 0x0) perf_event_open(&(0x7f0000001240)={0x1, 0x80, 0x9, 0xa1, 0xf9, 0x3, 0x0, 0x7, 0xa0400, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x3, @perf_config_ext={0x58d}, 0x21, 0x1, 0x0, 0x6, 0x9, 0x0, 0x8000, 0x0, 0x80, 0x0, 0x5}, 0xffffffffffffffff, 0x4, r3, 0x0) r4 = gettid() process_vm_readv(r4, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/123, 0x7b}, {&(0x7f0000000100)=""/57, 0x39}], 0x2, &(0x7f0000000240)=[{&(0x7f0000012940)=""/102400, 0x19000}], 0x1, 0x0) perf_event_open(0x0, r4, 0x1, r3, 0x8) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/consoles\x00', 0x0, 0x0) 07:03:58 executing program 1: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) preadv(r0, &(0x7f00000011c0)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x7, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x0, 0x0, 0x87ffffc) mmap$perf(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000008, 0x1010, r2, 0x4) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000100), 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r3 = syz_open_procfs(0x0, 0x0) preadv(r3, &(0x7f0000000080)=[{&(0x7f0000000000)=""/40, 0x40}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000001240)={0x1, 0x80, 0x9, 0xa1, 0xf9, 0x3, 0x0, 0x7, 0xa0400, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x3, @perf_config_ext={0x58d}, 0x21, 0x1, 0x0, 0x6, 0x9, 0x0, 0x8000, 0x0, 0x80, 0x0, 0x5}, 0xffffffffffffffff, 0x4, r3, 0x0) r4 = gettid() process_vm_readv(r4, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/4078, 0xfee}, {&(0x7f0000000000)=""/123, 0x7b}, {0x0}], 0x3, &(0x7f0000000240)=[{&(0x7f0000012940)=""/102400, 0x19000}], 0x1, 0x0) perf_event_open(0x0, r4, 0x1, r3, 0x8) 07:03:58 executing program 7: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000001340)) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x204800, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x1) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002480)='fd/3\x00') r2 = dup(r1) fdatasync(r2) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x40}}, './file0\x00'}) preadv2(r3, &(0x7f0000001300)=[{&(0x7f0000000080)=""/193, 0xc1}, {&(0x7f0000000180)=""/250, 0xfa}, {&(0x7f0000000300)=""/4096, 0x1000}], 0x3, 0x80000000, 0x66, 0x18) r4 = openat(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000001380)=0x100000) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r5, 0x3, 0x0, 0x87ffffc) sendfile(r5, r4, 0x0, 0x80000000) 07:03:58 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f00000001c0)=0x8) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x14, 0x0, 0x7200}, 0x14}}, 0x0) 07:03:58 executing program 3: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000040)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x300000c, 0x13, r0, 0x8000000) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xa) fork() (fail_nth: 24) 07:03:58 executing program 5: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) preadv(r0, &(0x7f00000011c0)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x7, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x0, 0x0, 0x87ffffc) (fail_nth: 21) mmap$perf(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000008, 0x1010, r2, 0x4) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000100), 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r3 = syz_open_procfs(0x0, 0x0) perf_event_open(&(0x7f0000001240)={0x1, 0x80, 0x9, 0xa1, 0xf9, 0x3, 0x0, 0x7, 0xa0400, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x3, @perf_config_ext={0x58d}, 0x21, 0x1, 0x0, 0x6, 0x9, 0x0, 0x8000, 0x0, 0x80, 0x0, 0x5}, 0xffffffffffffffff, 0x4, r3, 0x0) r4 = gettid() perf_event_open(0x0, r4, 0x1, r3, 0x8) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/consoles\x00', 0x0, 0x0) 07:03:58 executing program 0: openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r0, 0x0, 0x0, 0x87ffffc) mmap$perf(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000008, 0x10, 0xffffffffffffffff, 0x4) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x12, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = syz_open_procfs(0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001240)={0x1, 0x80, 0x0, 0xa1, 0x0, 0x0, 0x0, 0x7, 0xa0400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x3, @perf_config_ext, 0x21, 0x1, 0x0, 0x0, 0x9, 0x0, 0x8000, 0x0, 0x80, 0x0, 0x5}, 0xffffffffffffffff, 0x4, r1, 0x0) r2 = gettid() process_vm_readv(r2, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/4078, 0xfee}, {&(0x7f0000000000)=""/123, 0x7b}, {&(0x7f0000000100)=""/57, 0x7ffffffff000}], 0x3, &(0x7f0000000240)=[{&(0x7f0000012940)=""/102400, 0xffffff76}], 0x1, 0x0) perf_event_open(0x0, r2, 0x1, r1, 0x8) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/consoles\x00', 0x0, 0x0) [ 2542.842881] FAULT_INJECTION: forcing a failure. [ 2542.842881] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2542.844247] CPU: 1 PID: 12764 Comm: syz-executor.3 Not tainted 5.18.0-rc1-next-20220406 #1 [ 2542.845156] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2542.846407] Call Trace: [ 2542.846681] [ 2542.846933] dump_stack_lvl+0x8b/0xb3 [ 2542.847362] should_fail.cold+0x5/0xa [ 2542.847780] prepare_alloc_pages+0x17b/0x500 [ 2542.848275] __alloc_pages+0x131/0x4e0 [ 2542.848692] ? __alloc_pages_slowpath.constprop.0+0x1f10/0x1f10 [ 2542.849349] ? lock_is_held_type+0xd7/0x130 [ 2542.849841] alloc_pages+0x1a0/0x2f0 [ 2542.850253] __get_free_pages+0xc/0xa0 [ 2542.850692] pgd_alloc+0x84/0x4b0 [ 2542.851074] ? lock_downgrade+0x6d0/0x6d0 [ 2542.851503] ? pgd_page_get_mm+0x40/0x40 [ 2542.851921] ? lockdep_init_map_type+0x21a/0x7e0 [ 2542.852442] ? lockdep_init_map_type+0x21a/0x7e0 [ 2542.852996] mm_init+0x5cf/0xa70 [ 2542.853381] dup_mm+0xd5/0x1250 [ 2542.853751] ? lock_release+0x3b2/0x750 [ 2542.854191] ? copy_process+0x27ec/0x6db0 [ 2542.854648] ? replace_mm_exe_file+0x490/0x490 [ 2542.855161] ? __raw_spin_lock_init+0x36/0x110 [ 2542.855677] copy_process+0x698c/0x6db0 [ 2542.856138] ? __cleanup_sighand+0xb0/0xb0 [ 2542.856612] ? lock_release+0x3b2/0x750 [ 2542.856646] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12767 comm=syz-executor.4 [ 2542.857026] ? ksys_write+0x20c/0x250 [ 2542.859999] ? kernel_clone+0x2f8/0xa60 [ 2542.860448] kernel_clone+0xe7/0xa60 [ 2542.860850] ? find_held_lock+0x2c/0x110 [ 2542.861299] ? create_io_thread+0xf0/0xf0 [ 2542.861757] ? __mutex_unlock_slowpath+0x15c/0x5e0 [ 2542.862300] ? bit_wait_io_timeout+0x160/0x160 [ 2542.862809] ? lock_is_held_type+0xd7/0x130 [ 2542.863283] __do_sys_fork+0x8a/0xc0 [ 2542.863691] ? kernel_clone+0xa60/0xa60 [ 2542.864126] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 2542.864700] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2542.865282] ? lockdep_hardirqs_on+0x79/0x100 [ 2542.865770] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2542.866338] do_syscall_64+0x3b/0x90 [ 2542.866749] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2542.867316] RIP: 0033:0x7fc1c2a89b19 [ 2542.867714] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2542.869731] RSP: 002b:00007fc1bffff188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 2542.870558] RAX: ffffffffffffffda RBX: 00007fc1c2b9cf60 RCX: 00007fc1c2a89b19 [ 2542.871331] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2542.872057] RBP: 00007fc1bffff1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2542.872848] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2542.873633] R13: 00007fff0449096f R14: 00007fc1bffff300 R15: 0000000000022000 [ 2542.874364] [ 2542.876691] FAULT_INJECTION: forcing a failure. [ 2542.876691] name failslab, interval 1, probability 0, space 0, times 0 [ 2542.878099] CPU: 1 PID: 12762 Comm: syz-executor.2 Not tainted 5.18.0-rc1-next-20220406 #1 [ 2542.879001] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2542.880221] Call Trace: [ 2542.880499] [ 2542.880743] dump_stack_lvl+0x8b/0xb3 [ 2542.881184] should_fail.cold+0x5/0xa [ 2542.881599] ? create_object.isra.0+0x3a/0xa20 [ 2542.882103] should_failslab+0x5/0x10 [ 2542.882521] kmem_cache_alloc+0x5b/0x480 [ 2542.882979] create_object.isra.0+0x3a/0xa20 [ 2542.883469] ? kasan_unpoison+0x23/0x50 [ 2542.883916] kmem_cache_alloc+0x239/0x480 [ 2542.884380] ext4_mb_new_blocks+0x64b/0x4b60 [ 2542.884897] ? lock_is_held_type+0xd7/0x130 [ 2542.885385] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2542.885991] ? ext4_cache_extents+0x148/0x2d0 [ 2542.886482] ? ext4_discard_preallocations+0xe60/0xe60 [ 2542.887075] ? __sanitizer_cov_trace_const_cmp2+0x22/0x80 [ 2542.887675] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2542.888284] ? ext4_ext_search_right+0x2e3/0xbd0 [ 2542.888374] FAULT_INJECTION: forcing a failure. [ 2542.888374] name failslab, interval 1, probability 0, space 0, times 0 [ 2542.888813] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2542.891782] ext4_ext_map_blocks+0x1fb0/0x5cd0 [ 2542.892297] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 2542.892892] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 2542.893482] ? ext4_ext_release+0x10/0x10 [ 2542.893946] ? lock_release+0x750/0x750 [ 2542.894383] ? lock_release+0x3b2/0x750 [ 2542.894824] ? lock_is_held_type+0xd7/0x130 [ 2542.895324] ? down_write_killable+0x170/0x170 [ 2542.895827] ext4_map_blocks+0x652/0x1970 [ 2542.896292] ? lock_is_held_type+0xd7/0x130 [ 2542.896772] ? ext4_issue_zeroout+0x1c0/0x1c0 [ 2542.897283] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 2542.897892] ? jbd2__journal_start+0xf3/0x8d0 [ 2542.898391] ? __ext4_journal_start_sb+0x392/0x470 [ 2542.898917] ? __ext4_journal_start_sb+0x1d5/0x470 [ 2542.899454] ext4_alloc_file_blocks.isra.0+0x2c1/0xb20 [ 2542.900028] ? ext4_ext_correct_indexes+0x440/0x440 [ 2542.900568] ? down_write_killable+0x170/0x170 [ 2542.901109] ext4_fallocate+0x1a2b/0x3c90 [ 2542.901568] ? lock_acquire+0x1b2/0x530 [ 2542.902008] ? lock_release+0x750/0x750 [ 2542.902455] ? ext4_ext_truncate+0x3e0/0x3e0 [ 2542.902928] ? lock_is_held_type+0xd7/0x130 [ 2542.903416] ? ext4_ext_truncate+0x3e0/0x3e0 [ 2542.903896] vfs_fallocate+0x489/0xe00 [ 2542.904332] __x64_sys_fallocate+0xcf/0x140 [ 2542.904816] do_syscall_64+0x3b/0x90 [ 2542.905227] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2542.905792] RIP: 0033:0x7fd845bccb19 [ 2542.906201] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2542.908176] RSP: 002b:00007fd843142188 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 2542.909015] RAX: ffffffffffffffda RBX: 00007fd845cdff60 RCX: 00007fd845bccb19 [ 2542.909793] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 2542.910575] RBP: 00007fd8431421d0 R08: 0000000000000000 R09: 0000000000000000 [ 2542.911356] R10: 00000000087ffffc R11: 0000000000000246 R12: 0000000000000002 [ 2542.912129] R13: 00007ffde12fa01f R14: 00007fd843142300 R15: 0000000000022000 [ 2542.912937] [ 2542.913191] CPU: 0 PID: 12761 Comm: syz-executor.5 Not tainted 5.18.0-rc1-next-20220406 #1 [ 2542.915012] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2542.917483] Call Trace: [ 2542.918035] [ 2542.918522] dump_stack_lvl+0x8b/0xb3 [ 2542.919364] should_fail.cold+0x5/0xa [ 2542.920200] ? ext4_mb_new_blocks+0x64b/0x4b60 [ 2542.921210] should_failslab+0x5/0x10 [ 2542.922048] kmem_cache_alloc+0x5b/0x480 [ 2542.922953] ext4_mb_new_blocks+0x64b/0x4b60 [ 2542.923933] ? lock_is_held_type+0xd7/0x130 [ 2542.924913] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2542.926122] ? ext4_cache_extents+0x148/0x2d0 [ 2542.927100] ? ext4_discard_preallocations+0xe60/0xe60 [ 2542.928247] ? __sanitizer_cov_trace_const_cmp2+0x22/0x80 [ 2542.929464] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2542.930669] ? ext4_ext_search_right+0x2e3/0xbd0 [ 2542.931709] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2542.932949] ext4_ext_map_blocks+0x1fb0/0x5cd0 [ 2542.933965] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 2542.935122] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 2542.936286] ? ext4_ext_release+0x10/0x10 [ 2542.937216] ? lock_release+0x750/0x750 [ 2542.938092] ? lock_release+0x3b2/0x750 [ 2542.938973] ? lock_is_held_type+0xd7/0x130 [ 2542.939948] ? down_write_killable+0x170/0x170 [ 2542.940976] ext4_map_blocks+0x652/0x1970 [ 2542.941902] ? lock_is_held_type+0xd7/0x130 [ 2542.942859] ? ext4_issue_zeroout+0x1c0/0x1c0 [ 2542.943845] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 2542.945071] ? jbd2__journal_start+0xf3/0x8d0 [ 2542.946063] ? __ext4_journal_start_sb+0x392/0x470 [ 2542.947132] ? __ext4_journal_start_sb+0x1d5/0x470 [ 2542.948211] ext4_alloc_file_blocks.isra.0+0x2c1/0xb20 [ 2542.949378] ? ext4_ext_correct_indexes+0x440/0x440 [ 2542.950476] ? down_write_killable+0x170/0x170 [ 2542.951495] ext4_fallocate+0x1a2b/0x3c90 [ 2542.952403] ? lock_acquire+0x1b2/0x530 [ 2542.953299] ? lock_release+0x750/0x750 [ 2542.954180] ? ext4_ext_truncate+0x3e0/0x3e0 [ 2542.955143] ? lock_is_held_type+0xd7/0x130 [ 2542.956093] ? ext4_ext_truncate+0x3e0/0x3e0 [ 2542.957064] vfs_fallocate+0x489/0xe00 [ 2542.957883] FAULT_INJECTION: forcing a failure. [ 2542.957883] name failslab, interval 1, probability 0, space 0, times 0 [ 2542.960265] __x64_sys_fallocate+0xcf/0x140 [ 2542.961227] do_syscall_64+0x3b/0x90 [ 2542.962046] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2542.963174] RIP: 0033:0x7f35817a9b19 [ 2542.963983] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2542.967981] RSP: 002b:00007f357ed1f188 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 2542.969632] RAX: ffffffffffffffda RBX: 00007f35818bcf60 RCX: 00007f35817a9b19 [ 2542.971179] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 2542.972718] RBP: 00007f357ed1f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2542.974271] R10: 00000000087ffffc R11: 0000000000000246 R12: 0000000000000002 [ 2542.975810] R13: 00007ffdd683fcbf R14: 00007f357ed1f300 R15: 0000000000022000 [ 2542.977388] [ 2542.977886] CPU: 1 PID: 12771 Comm: syz-executor.3 Not tainted 5.18.0-rc1-next-20220406 #1 [ 2542.978951] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2542.980160] Call Trace: [ 2542.980475] [ 2542.980719] dump_stack_lvl+0x8b/0xb3 [ 2542.981164] should_fail.cold+0x5/0xa [ 2542.981583] ? vm_area_dup+0x78/0x290 [ 2542.982003] should_failslab+0x5/0x10 [ 2542.982428] kmem_cache_alloc+0x5b/0x480 [ 2542.982888] vm_area_dup+0x78/0x290 [ 2542.983298] ? __lock_acquire+0xbac/0x6120 [ 2542.983772] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 2542.984359] ? vm_area_alloc+0x110/0x110 [ 2542.984815] ? find_held_lock+0x2c/0x110 [ 2542.985234] ? lock_release+0x3b2/0x750 [ 2542.985643] ? get_mm_exe_file+0x137/0x2b0 [ 2542.986074] ? lock_downgrade+0x6d0/0x6d0 [ 2542.986507] ? get_mm_exe_file+0x159/0x2b0 [ 2542.986935] dup_mm+0x53f/0x1250 [ 2542.987293] ? replace_mm_exe_file+0x490/0x490 07:03:58 executing program 3: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000040)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x300000c, 0x13, r0, 0x8000000) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xa) fork() (fail_nth: 25) [ 2542.987757] ? __raw_spin_lock_init+0x36/0x110 [ 2542.988382] copy_process+0x698c/0x6db0 [ 2542.988829] ? __cleanup_sighand+0xb0/0xb0 [ 2542.989272] ? lock_release+0x3b2/0x750 [ 2542.989682] ? finish_task_switch.isra.0+0x221/0x870 [ 2542.990202] ? kernel_clone+0x2f8/0xa60 [ 2542.990614] kernel_clone+0xe7/0xa60 [ 2542.991010] ? create_io_thread+0xf0/0xf0 [ 2542.991439] ? finish_task_switch.isra.0+0x226/0x870 [ 2542.991950] ? lockdep_hardirqs_on+0x79/0x100 [ 2542.992407] ? finish_task_switch.isra.0+0x226/0x870 [ 2542.992954] __do_sys_fork+0x8a/0xc0 [ 2542.993336] ? kernel_clone+0xa60/0xa60 [ 2542.993754] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2542.994284] ? lockdep_hardirqs_on+0x79/0x100 [ 2542.994739] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2542.995260] do_syscall_64+0x3b/0x90 [ 2542.995637] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2542.996158] RIP: 0033:0x7fc1c2a89b19 [ 2542.996533] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2542.998357] RSP: 002b:00007fc1bffff188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 2542.999124] RAX: ffffffffffffffda RBX: 00007fc1c2b9cf60 RCX: 00007fc1c2a89b19 [ 2542.999885] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2543.000649] RBP: 00007fc1bffff1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2543.001424] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2543.002189] R13: 00007fff0449096f R14: 00007fc1bffff300 R15: 0000000000022000 [ 2543.002973] [ 2543.004973] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12774 comm=syz-executor.4 07:04:11 executing program 2: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x204800, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x1) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002480)='fd/3\x00') fdatasync(0xffffffffffffffff) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x40}}, './file0\x00'}) preadv2(r2, &(0x7f0000001300)=[{&(0x7f0000000080)=""/193, 0xc1}, {&(0x7f0000000180)=""/250, 0xfa}, {&(0x7f0000000300)=""/4096, 0x1000}], 0x3, 0x80000000, 0x66, 0x18) openat(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r3, 0x0, 0x0, 0x87ffffc) (fail_nth: 23) 07:04:11 executing program 5: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) preadv(r0, &(0x7f00000011c0)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x7, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x0, 0x0, 0x87ffffc) (fail_nth: 22) mmap$perf(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000008, 0x1010, r2, 0x4) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000100), 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r3 = syz_open_procfs(0x0, 0x0) perf_event_open(&(0x7f0000001240)={0x1, 0x80, 0x9, 0xa1, 0xf9, 0x3, 0x0, 0x7, 0xa0400, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x3, @perf_config_ext={0x58d}, 0x21, 0x1, 0x0, 0x6, 0x9, 0x0, 0x8000, 0x0, 0x80, 0x0, 0x5}, 0xffffffffffffffff, 0x4, r3, 0x0) r4 = gettid() perf_event_open(0x0, r4, 0x1, r3, 0x8) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/consoles\x00', 0x0, 0x0) 07:04:11 executing program 6: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) preadv(r0, &(0x7f00000011c0)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x7, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x0, 0x0, 0x87ffffc) mmap$perf(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000008, 0x1010, r2, 0x4) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000100), 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r3 = syz_open_procfs(0x0, 0x0) perf_event_open(&(0x7f0000001240)={0x1, 0x80, 0x9, 0xa1, 0xf9, 0x3, 0x0, 0x7, 0xa0400, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x3, @perf_config_ext={0x58d}, 0x21, 0x1, 0x0, 0x6, 0x9, 0x0, 0x8000, 0x0, 0x80, 0x0, 0x5}, 0xffffffffffffffff, 0x4, r3, 0x0) r4 = gettid() process_vm_readv(r4, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/123, 0x7b}, {&(0x7f0000000100)=""/57, 0x39}], 0x2, &(0x7f0000000240)=[{&(0x7f0000012940)=""/102400, 0x19000}], 0x1, 0x0) perf_event_open(0x0, r4, 0x1, r3, 0x8) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/consoles\x00', 0x0, 0x0) 07:04:11 executing program 7: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000001340)) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x204800, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x1) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002480)='fd/3\x00') r2 = dup(r1) fdatasync(r2) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x40}}, './file0\x00'}) preadv2(r3, &(0x7f0000001300)=[{&(0x7f0000000080)=""/193, 0xc1}, {&(0x7f0000000180)=""/250, 0xfa}, {&(0x7f0000000300)=""/4096, 0x1000}], 0x3, 0x80000000, 0x66, 0x18) r4 = openat(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000001380)=0x100000) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r5, 0x4, 0x0, 0x87ffffc) sendfile(r5, r4, 0x0, 0x80000000) 07:04:11 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f00000001c0)=0x8) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x14, 0x0, 0x7400}, 0x14}}, 0x0) 07:04:11 executing program 3: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000040)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x300000c, 0x13, r0, 0x8000000) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xa) fork() (fail_nth: 26) 07:04:11 executing program 1: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) preadv(r0, &(0x7f00000011c0)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x7, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x0, 0x0, 0x87ffffc) mmap$perf(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000008, 0x1010, r2, 0x4) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000100), 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r3 = syz_open_procfs(0x0, 0x0) preadv(r3, &(0x7f0000000080)=[{&(0x7f0000000000)=""/40, 0x40}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000001240)={0x1, 0x80, 0x9, 0xa1, 0xf9, 0x3, 0x0, 0x7, 0xa0400, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x3, @perf_config_ext={0x58d}, 0x21, 0x1, 0x0, 0x6, 0x9, 0x0, 0x8000, 0x0, 0x80, 0x0, 0x5}, 0xffffffffffffffff, 0x4, r3, 0x0) r4 = gettid() process_vm_readv(r4, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/4078, 0xfee}, {&(0x7f0000000000)=""/123, 0x7b}, {0x0}], 0x3, &(0x7f0000000240)=[{&(0x7f0000012940)=""/102400, 0x19000}], 0x1, 0x0) perf_event_open(0x0, r4, 0x1, r3, 0x8) 07:04:11 executing program 0: openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r0, 0x0, 0x0, 0x87ffffc) mmap$perf(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000008, 0x10, 0xffffffffffffffff, 0x4) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x12, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = syz_open_procfs(0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001240)={0x1, 0x80, 0x0, 0xa1, 0x0, 0x0, 0x0, 0x7, 0xa0400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x3, @perf_config_ext, 0x21, 0x1, 0x0, 0x0, 0x9, 0x0, 0x8000, 0x0, 0x80, 0x0, 0x5}, 0xffffffffffffffff, 0x4, r1, 0x0) r2 = gettid() process_vm_readv(r2, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/4078, 0xfee}, {&(0x7f0000000000)=""/123, 0x7b}, {&(0x7f0000000100)=""/57, 0x39}], 0x2, &(0x7f0000000240)=[{&(0x7f0000012940)=""/102400, 0xffffff76}], 0x1, 0x0) perf_event_open(0x0, r2, 0x1, r1, 0x8) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/consoles\x00', 0x0, 0x0) [ 2555.932454] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12790 comm=syz-executor.4 [ 2555.937678] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12793 comm=syz-executor.4 [ 2555.947093] FAULT_INJECTION: forcing a failure. [ 2555.947093] name failslab, interval 1, probability 0, space 0, times 0 [ 2555.949851] CPU: 1 PID: 12782 Comm: syz-executor.5 Not tainted 5.18.0-rc1-next-20220406 #1 [ 2555.951975] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2555.954352] Call Trace: [ 2555.955013] [ 2555.955494] dump_stack_lvl+0x8b/0xb3 [ 2555.956484] should_fail.cold+0x5/0xa [ 2555.957316] ? create_object.isra.0+0x3a/0xa20 [ 2555.958280] should_failslab+0x5/0x10 [ 2555.959083] kmem_cache_alloc+0x5b/0x480 [ 2555.959951] create_object.isra.0+0x3a/0xa20 [ 2555.960867] ? kasan_unpoison+0x23/0x50 [ 2555.961724] kmem_cache_alloc+0x239/0x480 [ 2555.962614] ext4_mb_new_blocks+0x64b/0x4b60 [ 2555.963561] ? lock_is_held_type+0xd7/0x130 [ 2555.964481] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2555.965907] ? ext4_cache_extents+0x148/0x2d0 [ 2555.966915] ? ext4_discard_preallocations+0xe60/0xe60 [ 2555.968020] ? __sanitizer_cov_trace_const_cmp2+0x22/0x80 [ 2555.969184] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2555.970338] ? ext4_ext_search_right+0x2e3/0xbd0 [ 2555.971335] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2555.972500] ext4_ext_map_blocks+0x1fb0/0x5cd0 [ 2555.973498] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 2555.974599] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 2555.975721] ? ext4_ext_release+0x10/0x10 [ 2555.976604] ? lock_release+0x750/0x750 [ 2555.977454] ? lock_release+0x3b2/0x750 [ 2555.978300] ? lock_is_held_type+0xd7/0x130 [ 2555.979233] ? down_write_killable+0x170/0x170 [ 2555.980210] ext4_map_blocks+0x652/0x1970 [ 2555.981117] ? lock_is_held_type+0xd7/0x130 [ 2555.982033] ? ext4_issue_zeroout+0x1c0/0x1c0 [ 2555.982983] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 2555.984144] ? jbd2__journal_start+0xf3/0x8d0 [ 2555.985104] ? __ext4_journal_start_sb+0x392/0x470 [ 2555.986126] ? __ext4_journal_start_sb+0x1d5/0x470 [ 2555.987157] ext4_alloc_file_blocks.isra.0+0x2c1/0xb20 [ 2555.988265] ? ext4_ext_correct_indexes+0x440/0x440 [ 2555.989336] ? down_write_killable+0x170/0x170 [ 2555.990311] ext4_fallocate+0x1a2b/0x3c90 [ 2555.991184] ? lock_acquire+0x1b2/0x530 [ 2555.992027] ? lock_release+0x750/0x750 [ 2555.992876] ? ext4_ext_truncate+0x3e0/0x3e0 [ 2555.993820] ? lock_is_held_type+0xd7/0x130 [ 2555.994740] ? ext4_ext_truncate+0x3e0/0x3e0 [ 2555.995671] vfs_fallocate+0x489/0xe00 [ 2555.996507] __x64_sys_fallocate+0xcf/0x140 [ 2555.997430] do_syscall_64+0x3b/0x90 [ 2555.998222] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2555.999302] RIP: 0033:0x7f35817a9b19 [ 2556.000078] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2556.003897] RSP: 002b:00007f357ed1f188 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 2556.005488] RAX: ffffffffffffffda RBX: 00007f35818bcf60 RCX: 00007f35817a9b19 [ 2556.006979] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 2556.008462] RBP: 00007f357ed1f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2556.009950] R10: 00000000087ffffc R11: 0000000000000246 R12: 0000000000000002 [ 2556.011423] R13: 00007ffdd683fcbf R14: 00007f357ed1f300 R15: 0000000000022000 [ 2556.012932] 07:04:11 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f00000001c0)=0x8) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x14, 0x0, 0x7500}, 0x14}}, 0x0) [ 2556.040589] FAULT_INJECTION: forcing a failure. [ 2556.040589] name failslab, interval 1, probability 0, space 0, times 0 [ 2556.041930] CPU: 0 PID: 12794 Comm: syz-executor.2 Not tainted 5.18.0-rc1-next-20220406 #1 [ 2556.042407] FAULT_INJECTION: forcing a failure. [ 2556.042407] name failslab, interval 1, probability 0, space 0, times 0 [ 2556.042851] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2556.042861] Call Trace: [ 2556.046676] [ 2556.046926] dump_stack_lvl+0x8b/0xb3 [ 2556.047358] should_fail.cold+0x5/0xa [ 2556.047778] ? create_object.isra.0+0x3a/0xa20 [ 2556.048292] should_failslab+0x5/0x10 [ 2556.048718] kmem_cache_alloc+0x5b/0x480 [ 2556.049199] create_object.isra.0+0x3a/0xa20 [ 2556.049695] ? kasan_unpoison+0x23/0x50 [ 2556.050145] kmem_cache_alloc+0x239/0x480 [ 2556.050617] ext4_mb_new_blocks+0x64b/0x4b60 [ 2556.051116] ? lock_is_held_type+0xd7/0x130 [ 2556.051605] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2556.052220] ? ext4_cache_extents+0x148/0x2d0 [ 2556.052757] ? ext4_discard_preallocations+0xe60/0xe60 [ 2556.053369] ? __sanitizer_cov_trace_const_cmp2+0x22/0x80 [ 2556.053989] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2556.054599] ? ext4_ext_search_right+0x2e3/0xbd0 [ 2556.055125] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2556.055755] ext4_ext_map_blocks+0x1fb0/0x5cd0 [ 2556.056276] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 2556.056866] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 2556.057483] ? ext4_ext_release+0x10/0x10 [ 2556.057953] ? lock_release+0x750/0x750 [ 2556.058401] ? lock_release+0x3b2/0x750 [ 2556.058850] ? lock_is_held_type+0xd7/0x130 [ 2556.059343] ? down_write_killable+0x170/0x170 [ 2556.059865] ext4_map_blocks+0x652/0x1970 [ 2556.060333] ? lock_is_held_type+0xd7/0x130 [ 2556.060819] ? ext4_issue_zeroout+0x1c0/0x1c0 [ 2556.061337] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 2556.061953] ? jbd2__journal_start+0xf3/0x8d0 [ 2556.062453] ? __ext4_journal_start_sb+0x392/0x470 [ 2556.062997] ? __ext4_journal_start_sb+0x1d5/0x470 [ 2556.063549] ext4_alloc_file_blocks.isra.0+0x2c1/0xb20 [ 2556.064140] ? ext4_ext_correct_indexes+0x440/0x440 [ 2556.064702] ? down_write_killable+0x170/0x170 [ 2556.065233] ext4_fallocate+0x1a2b/0x3c90 [ 2556.065701] ? lock_acquire+0x1b2/0x530 [ 2556.066152] ? lock_release+0x750/0x750 [ 2556.066601] ? ext4_ext_truncate+0x3e0/0x3e0 [ 2556.067089] ? lock_is_held_type+0xd7/0x130 [ 2556.067574] ? ext4_ext_truncate+0x3e0/0x3e0 [ 2556.068066] vfs_fallocate+0x489/0xe00 [ 2556.068513] __x64_sys_fallocate+0xcf/0x140 [ 2556.069013] do_syscall_64+0x3b/0x90 [ 2556.069435] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2556.070012] RIP: 0033:0x7fd845bccb19 [ 2556.070422] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2556.072445] RSP: 002b:00007fd843142188 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 2556.073308] RAX: ffffffffffffffda RBX: 00007fd845cdff60 RCX: 00007fd845bccb19 [ 2556.074097] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 2556.074891] RBP: 00007fd8431421d0 R08: 0000000000000000 R09: 0000000000000000 [ 2556.075681] R10: 00000000087ffffc R11: 0000000000000246 R12: 0000000000000002 [ 2556.076466] R13: 00007ffde12fa01f R14: 00007fd843142300 R15: 0000000000022000 [ 2556.077287] [ 2556.077546] CPU: 1 PID: 12799 Comm: syz-executor.3 Not tainted 5.18.0-rc1-next-20220406 #1 [ 2556.079288] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2556.081465] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12801 comm=syz-executor.4 [ 2556.081642] Call Trace: [ 2556.083474] [ 2556.083949] dump_stack_lvl+0x8b/0xb3 [ 2556.084755] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12802 comm=syz-executor.4 [ 2556.084759] should_fail.cold+0x5/0xa [ 2556.086863] ? create_object.isra.0+0x3a/0xa20 [ 2556.087828] should_failslab+0x5/0x10 [ 2556.088633] kmem_cache_alloc+0x5b/0x480 [ 2556.089520] create_object.isra.0+0x3a/0xa20 [ 2556.090441] ? kasan_unpoison+0x23/0x50 [ 2556.091292] kmem_cache_alloc+0x239/0x480 [ 2556.092179] vm_area_dup+0x78/0x290 [ 2556.092964] ? __lock_acquire+0xbac/0x6120 [ 2556.093912] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 2556.095036] ? vm_area_alloc+0x110/0x110 [ 2556.095890] ? find_held_lock+0x2c/0x110 [ 2556.096748] ? lock_release+0x3b2/0x750 [ 2556.097596] ? get_mm_exe_file+0x137/0x2b0 [ 2556.098491] ? lock_downgrade+0x6d0/0x6d0 [ 2556.099389] ? get_mm_exe_file+0x159/0x2b0 [ 2556.100283] dup_mm+0x53f/0x1250 [ 2556.101037] ? replace_mm_exe_file+0x490/0x490 [ 2556.102005] ? __raw_spin_lock_init+0x36/0x110 [ 2556.102981] copy_process+0x698c/0x6db0 [ 2556.103864] ? __cleanup_sighand+0xb0/0xb0 [ 2556.104771] ? lock_release+0x3b2/0x750 [ 2556.105622] ? ksys_write+0x20c/0x250 [ 2556.106418] ? kernel_clone+0x2f8/0xa60 [ 2556.107262] kernel_clone+0xe7/0xa60 [ 2556.108053] ? find_held_lock+0x2c/0x110 [ 2556.108900] ? create_io_thread+0xf0/0xf0 [ 2556.109796] ? __mutex_unlock_slowpath+0x15c/0x5e0 [ 2556.110834] ? bit_wait_io_timeout+0x160/0x160 [ 2556.111794] ? lock_is_held_type+0xd7/0x130 [ 2556.112714] __do_sys_fork+0x8a/0xc0 [ 2556.113514] ? kernel_clone+0xa60/0xa60 [ 2556.114359] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 2556.115529] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2556.116619] ? lockdep_hardirqs_on+0x79/0x100 [ 2556.117587] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2556.118674] do_syscall_64+0x3b/0x90 [ 2556.119465] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2556.120546] RIP: 0033:0x7fc1c2a89b19 [ 2556.121328] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2556.125133] RSP: 002b:00007fc1bffff188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 2556.126706] RAX: ffffffffffffffda RBX: 00007fc1c2b9cf60 RCX: 00007fc1c2a89b19 [ 2556.128182] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2556.129689] RBP: 00007fc1bffff1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2556.131164] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2556.132639] R13: 00007fff0449096f R14: 00007fc1bffff300 R15: 0000000000022000 [ 2556.134157] 07:04:31 executing program 3: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000040)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x300000c, 0x13, r0, 0x8000000) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xa) fork() (fail_nth: 27) 07:04:31 executing program 2: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x204800, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x1) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002480)='fd/3\x00') fdatasync(0xffffffffffffffff) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x40}}, './file0\x00'}) preadv2(r2, &(0x7f0000001300)=[{&(0x7f0000000080)=""/193, 0xc1}, {&(0x7f0000000180)=""/250, 0xfa}, {&(0x7f0000000300)=""/4096, 0x1000}], 0x3, 0x80000000, 0x66, 0x18) openat(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r3, 0x0, 0x0, 0x87ffffc) (fail_nth: 24) 07:04:31 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f00000001c0)=0x8) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x14, 0x0, 0x7600}, 0x14}}, 0x0) 07:04:31 executing program 6: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) preadv(r0, &(0x7f00000011c0)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x7, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x0, 0x0, 0x87ffffc) mmap$perf(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000008, 0x1010, r2, 0x4) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000100), 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r3 = syz_open_procfs(0x0, 0x0) perf_event_open(&(0x7f0000001240)={0x1, 0x80, 0x9, 0xa1, 0xf9, 0x3, 0x0, 0x7, 0xa0400, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x3, @perf_config_ext={0x58d}, 0x21, 0x1, 0x0, 0x6, 0x9, 0x0, 0x8000, 0x0, 0x80, 0x0, 0x5}, 0xffffffffffffffff, 0x4, r3, 0x0) r4 = gettid() process_vm_readv(r4, &(0x7f00000000c0)=[{0x0}, {&(0x7f0000000000)=""/123, 0x7b}, {&(0x7f0000000100)=""/57, 0x39}], 0x3, &(0x7f0000000240)=[{&(0x7f0000012940)=""/102400, 0x19000}], 0x1, 0x0) perf_event_open(0x0, r4, 0x1, r3, 0x8) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/consoles\x00', 0x0, 0x0) 07:04:31 executing program 1: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) preadv(r0, &(0x7f00000011c0)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x7, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x0, 0x0, 0x87ffffc) mmap$perf(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000008, 0x1010, r2, 0x4) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000100), 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r3 = syz_open_procfs(0x0, 0x0) preadv(r3, &(0x7f0000000080)=[{&(0x7f0000000000)=""/40, 0x40}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000001240)={0x1, 0x80, 0x9, 0xa1, 0xf9, 0x3, 0x0, 0x7, 0xa0400, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x3, @perf_config_ext={0x58d}, 0x21, 0x1, 0x0, 0x6, 0x9, 0x0, 0x8000, 0x0, 0x80, 0x0, 0x5}, 0xffffffffffffffff, 0x4, r3, 0x0) r4 = gettid() process_vm_readv(r4, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/4078, 0xfee}, {&(0x7f0000000100)=""/57, 0x39}], 0x2, &(0x7f0000000240)=[{&(0x7f0000012940)=""/102400, 0x19000}], 0x1, 0x0) perf_event_open(0x0, r4, 0x1, r3, 0x8) 07:04:31 executing program 5: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) preadv(r0, &(0x7f00000011c0)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x7, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x0, 0x0, 0x87ffffc) (fail_nth: 23) mmap$perf(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000008, 0x1010, r2, 0x4) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000100), 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r3 = syz_open_procfs(0x0, 0x0) perf_event_open(&(0x7f0000001240)={0x1, 0x80, 0x9, 0xa1, 0xf9, 0x3, 0x0, 0x7, 0xa0400, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x3, @perf_config_ext={0x58d}, 0x21, 0x1, 0x0, 0x6, 0x9, 0x0, 0x8000, 0x0, 0x80, 0x0, 0x5}, 0xffffffffffffffff, 0x4, r3, 0x0) r4 = gettid() perf_event_open(0x0, r4, 0x1, r3, 0x8) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/consoles\x00', 0x0, 0x0) 07:04:31 executing program 7: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000001340)) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x204800, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x1) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002480)='fd/3\x00') r2 = dup(r1) fdatasync(r2) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x40}}, './file0\x00'}) preadv2(r3, &(0x7f0000001300)=[{&(0x7f0000000080)=""/193, 0xc1}, {&(0x7f0000000180)=""/250, 0xfa}, {&(0x7f0000000300)=""/4096, 0x1000}], 0x3, 0x80000000, 0x66, 0x18) r4 = openat(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000001380)=0x100000) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r5, 0x5, 0x0, 0x87ffffc) sendfile(r5, r4, 0x0, 0x80000000) 07:04:31 executing program 0: openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r0, 0x0, 0x0, 0x87ffffc) mmap$perf(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000008, 0x10, 0xffffffffffffffff, 0x4) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x12, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = syz_open_procfs(0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001240)={0x1, 0x80, 0x0, 0xa1, 0x0, 0x0, 0x0, 0x7, 0xa0400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x3, @perf_config_ext, 0x21, 0x1, 0x0, 0x0, 0x9, 0x0, 0x8000, 0x0, 0x80, 0x0, 0x5}, 0xffffffffffffffff, 0x4, r1, 0x0) r2 = gettid() process_vm_readv(r2, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/4078, 0xfee}, {&(0x7f0000000000)=""/123, 0x7b}, {&(0x7f0000000100)=""/57, 0x39}], 0x4, &(0x7f0000000240)=[{&(0x7f0000012940)=""/102400, 0xffffff76}], 0x1, 0x0) perf_event_open(0x0, r2, 0x1, r1, 0x8) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/consoles\x00', 0x0, 0x0) [ 2575.683352] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12812 comm=syz-executor.4 [ 2575.699004] FAULT_INJECTION: forcing a failure. [ 2575.699004] name failslab, interval 1, probability 0, space 0, times 0 [ 2575.700327] CPU: 1 PID: 12818 Comm: syz-executor.3 Not tainted 5.18.0-rc1-next-20220406 #1 [ 2575.701188] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2575.702379] Call Trace: [ 2575.702654] [ 2575.702888] dump_stack_lvl+0x8b/0xb3 [ 2575.703307] should_fail.cold+0x5/0xa [ 2575.703722] ? vm_area_dup+0x78/0x290 [ 2575.704132] should_failslab+0x5/0x10 [ 2575.704542] kmem_cache_alloc+0x5b/0x480 [ 2575.704980] vm_area_dup+0x78/0x290 [ 2575.705378] ? lock_release+0x3b2/0x750 [ 2575.705809] ? avc_has_perm_noaudit+0x1c8/0x390 [ 2575.706310] ? lock_downgrade+0x6d0/0x6d0 [ 2575.706754] ? copy_page_range+0x2d29/0x4cc0 [ 2575.707224] ? __sanitizer_cov_trace_cmp2+0x22/0x80 [ 2575.707766] ? avc_has_perm_noaudit+0x1ef/0x390 [ 2575.708268] ? avc_has_extended_perms+0xeb0/0xeb0 [ 2575.708790] ? vm_area_alloc+0x110/0x110 [ 2575.709221] ? find_held_lock+0x2c/0x110 [ 2575.709689] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2575.710284] ? selinux_vm_enough_memory+0x10f/0x170 [ 2575.710837] ? selinux_sctp_sk_clone+0x370/0x370 [ 2575.711340] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2575.711949] ? percpu_counter_add_batch+0xb4/0x170 [ 2575.712503] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 2575.713069] ? __vm_enough_memory+0x184/0x360 [ 2575.713595] ? security_vm_enough_memory_mm+0x8b/0xc0 [ 2575.714168] dup_mm+0x53f/0x1250 [ 2575.714556] ? replace_mm_exe_file+0x490/0x490 [ 2575.715073] ? __raw_spin_lock_init+0x36/0x110 [ 2575.715587] copy_process+0x698c/0x6db0 [ 2575.716054] ? __cleanup_sighand+0xb0/0xb0 [ 2575.716543] ? lock_release+0x3b2/0x750 [ 2575.716964] ? ksys_write+0x20c/0x250 [ 2575.717401] ? kernel_clone+0x2f8/0xa60 [ 2575.717842] kernel_clone+0xe7/0xa60 [ 2575.718257] ? find_held_lock+0x2c/0x110 [ 2575.718711] ? create_io_thread+0xf0/0xf0 [ 2575.719183] ? __mutex_unlock_slowpath+0x15c/0x5e0 [ 2575.719729] ? bit_wait_io_timeout+0x160/0x160 [ 2575.720245] ? lock_is_held_type+0xd7/0x130 [ 2575.720736] __do_sys_fork+0x8a/0xc0 [ 2575.721150] ? kernel_clone+0xa60/0xa60 [ 2575.721606] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 2575.722219] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2575.722802] ? lockdep_hardirqs_on+0x79/0x100 [ 2575.723305] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2575.723880] do_syscall_64+0x3b/0x90 [ 2575.724294] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2575.724861] RIP: 0033:0x7fc1c2a89b19 [ 2575.725277] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2575.727342] RSP: 002b:00007fc1bffff188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 2575.728193] RAX: ffffffffffffffda RBX: 00007fc1c2b9cf60 RCX: 00007fc1c2a89b19 [ 2575.728992] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2575.729773] RBP: 00007fc1bffff1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2575.730555] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2575.731339] R13: 00007fff0449096f R14: 00007fc1bffff300 R15: 0000000000022000 [ 2575.732130] [ 2575.739572] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12828 comm=syz-executor.4 [ 2575.756697] FAULT_INJECTION: forcing a failure. [ 2575.756697] name failslab, interval 1, probability 0, space 0, times 0 [ 2575.759350] CPU: 0 PID: 12825 Comm: syz-executor.2 Not tainted 5.18.0-rc1-next-20220406 #1 07:04:31 executing program 7: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000001340)) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x204800, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x1) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002480)='fd/3\x00') r2 = dup(r1) fdatasync(r2) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x40}}, './file0\x00'}) preadv2(r3, &(0x7f0000001300)=[{&(0x7f0000000080)=""/193, 0xc1}, {&(0x7f0000000180)=""/250, 0xfa}, {&(0x7f0000000300)=""/4096, 0x1000}], 0x3, 0x80000000, 0x66, 0x18) r4 = openat(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000001380)=0x100000) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r5, 0x6, 0x0, 0x87ffffc) sendfile(r5, r4, 0x0, 0x80000000) [ 2575.761238] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2575.764044] Call Trace: [ 2575.764635] [ 2575.765150] dump_stack_lvl+0x8b/0xb3 [ 2575.766014] should_fail.cold+0x5/0xa [ 2575.766797] ? create_object.isra.0+0x3a/0xa20 [ 2575.767742] should_failslab+0x5/0x10 [ 2575.768526] kmem_cache_alloc+0x5b/0x480 [ 2575.769386] create_object.isra.0+0x3a/0xa20 [ 2575.770287] ? kasan_unpoison+0x23/0x50 [ 2575.771109] kmem_cache_alloc+0x239/0x480 [ 2575.771973] ext4_mb_new_blocks+0x222c/0x4b60 [ 2575.772908] ? lock_is_held_type+0xd7/0x130 [ 2575.773831] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2575.774969] ? ext4_cache_extents+0x148/0x2d0 [ 2575.775891] ? ext4_discard_preallocations+0xe60/0xe60 [ 2575.776960] ? __sanitizer_cov_trace_const_cmp2+0x22/0x80 [ 2575.778097] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2575.779225] ? ext4_ext_search_right+0x2e3/0xbd0 [ 2575.780199] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2575.781357] ext4_ext_map_blocks+0x1fb0/0x5cd0 [ 2575.782308] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 2575.783389] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 2575.784476] ? ext4_ext_release+0x10/0x10 [ 2575.785348] ? lock_release+0x750/0x750 [ 2575.786166] ? lock_release+0x3b2/0x750 [ 2575.787001] ? lock_is_held_type+0xd7/0x130 [ 2575.787917] ? down_write_killable+0x170/0x170 [ 2575.788877] ext4_map_blocks+0x652/0x1970 [ 2575.789775] ? lock_is_held_type+0xd7/0x130 [ 2575.790665] ? ext4_issue_zeroout+0x1c0/0x1c0 [ 2575.791591] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 2575.792724] ? jbd2__journal_start+0xf3/0x8d0 [ 2575.793651] ? __ext4_journal_start_sb+0x392/0x470 [ 2575.794654] ? __ext4_journal_start_sb+0x1d5/0x470 [ 2575.795654] ext4_alloc_file_blocks.isra.0+0x2c1/0xb20 [ 2575.796752] ? ext4_ext_correct_indexes+0x440/0x440 [ 2575.797784] ? down_write_killable+0x170/0x170 [ 2575.798735] ext4_fallocate+0x1a2b/0x3c90 [ 2575.799585] ? lock_acquire+0x1b2/0x530 [ 2575.800408] ? lock_release+0x750/0x750 [ 2575.801232] ? ext4_ext_truncate+0x3e0/0x3e0 [ 2575.802156] ? lock_is_held_type+0xd7/0x130 [ 2575.803057] ? ext4_ext_truncate+0x3e0/0x3e0 [ 2575.803962] vfs_fallocate+0x489/0xe00 [ 2575.804786] __x64_sys_fallocate+0xcf/0x140 [ 2575.805696] do_syscall_64+0x3b/0x90 [ 2575.806466] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2575.807527] RIP: 0033:0x7fd845bccb19 [ 2575.808282] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2575.812018] RSP: 002b:00007fd843142188 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 2575.813596] RAX: ffffffffffffffda RBX: 00007fd845cdff60 RCX: 00007fd845bccb19 [ 2575.815045] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 2575.816498] RBP: 00007fd8431421d0 R08: 0000000000000000 R09: 0000000000000000 [ 2575.816665] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12834 comm=syz-executor.4 [ 2575.817953] R10: 00000000087ffffc R11: 0000000000000246 R12: 0000000000000002 [ 2575.817970] R13: 00007ffde12fa01f R14: 00007fd843142300 R15: 0000000000022000 [ 2575.818017] 07:04:31 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f00000001c0)=0x8) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x14, 0x0, 0x7800}, 0x14}}, 0x0) 07:04:31 executing program 7: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000001340)) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x204800, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x1) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002480)='fd/3\x00') r2 = dup(r1) fdatasync(r2) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x40}}, './file0\x00'}) preadv2(r3, &(0x7f0000001300)=[{&(0x7f0000000080)=""/193, 0xc1}, {&(0x7f0000000180)=""/250, 0xfa}, {&(0x7f0000000300)=""/4096, 0x1000}], 0x3, 0x80000000, 0x66, 0x18) r4 = openat(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000001380)=0x100000) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r5, 0x7, 0x0, 0x87ffffc) sendfile(r5, r4, 0x0, 0x80000000) [ 2575.831759] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12836 comm=syz-executor.4 [ 2575.844545] FAULT_INJECTION: forcing a failure. [ 2575.844545] name failslab, interval 1, probability 0, space 0, times 0 [ 2575.846976] CPU: 0 PID: 12827 Comm: syz-executor.5 Not tainted 5.18.0-rc1-next-20220406 #1 [ 2575.848666] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2575.850977] Call Trace: [ 2575.851499] [ 2575.851951] dump_stack_lvl+0x8b/0xb3 [ 2575.852739] should_fail.cold+0x5/0xa [ 2575.853537] ? ext4_mb_new_blocks+0x222c/0x4b60 [ 2575.854489] should_failslab+0x5/0x10 [ 2575.855268] kmem_cache_alloc+0x5b/0x480 [ 2575.856116] ext4_mb_new_blocks+0x222c/0x4b60 [ 2575.857052] ? lock_is_held_type+0xd7/0x130 [ 2575.857964] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2575.859092] ? ext4_cache_extents+0x148/0x2d0 [ 2575.860007] ? ext4_discard_preallocations+0xe60/0xe60 [ 2575.861103] ? __sanitizer_cov_trace_const_cmp2+0x22/0x80 [ 2575.862244] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2575.863378] ? ext4_ext_search_right+0x2e3/0xbd0 [ 2575.864345] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2575.865488] ext4_ext_map_blocks+0x1fb0/0x5cd0 07:04:31 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f00000001c0)=0x8) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x14, 0x0, 0x7900}, 0x14}}, 0x0) [ 2575.866456] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 2575.867776] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 2575.868992] ? ext4_ext_release+0x10/0x10 [ 2575.869964] ? lock_release+0x750/0x750 [ 2575.870881] ? lock_release+0x3b2/0x750 [ 2575.871788] ? lock_is_held_type+0xd7/0x130 [ 2575.872806] ? down_write_killable+0x170/0x170 [ 2575.873877] ext4_map_blocks+0x652/0x1970 [ 2575.874842] ? lock_is_held_type+0xd7/0x130 [ 2575.875830] ? ext4_issue_zeroout+0x1c0/0x1c0 [ 2575.876765] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 2575.877894] ? jbd2__journal_start+0xf3/0x8d0 07:04:31 executing program 3: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000040)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x300000c, 0x13, r0, 0x8000000) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xa) fork() (fail_nth: 28) [ 2575.878805] ? __ext4_journal_start_sb+0x392/0x470 [ 2575.879836] ? __ext4_journal_start_sb+0x1d5/0x470 [ 2575.880836] ext4_alloc_file_blocks.isra.0+0x2c1/0xb20 [ 2575.881940] ? ext4_ext_correct_indexes+0x440/0x440 [ 2575.882973] ? down_write_killable+0x170/0x170 [ 2575.883925] ext4_fallocate+0x1a2b/0x3c90 [ 2575.884774] ? lock_acquire+0x1b2/0x530 [ 2575.885589] ? lock_release+0x750/0x750 [ 2575.886411] ? ext4_ext_truncate+0x3e0/0x3e0 [ 2575.887300] ? lock_is_held_type+0xd7/0x130 [ 2575.888192] ? ext4_ext_truncate+0x3e0/0x3e0 [ 2575.889080] vfs_fallocate+0x489/0xe00 [ 2575.889916] __x64_sys_fallocate+0xcf/0x140 [ 2575.890816] do_syscall_64+0x3b/0x90 [ 2575.891588] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2575.892635] RIP: 0033:0x7f35817a9b19 [ 2575.893399] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2575.897078] RSP: 002b:00007f357ed1f188 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 2575.898644] RAX: ffffffffffffffda RBX: 00007f35818bcf60 RCX: 00007f35817a9b19 [ 2575.900094] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 2575.901568] RBP: 00007f357ed1f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2575.903018] R10: 00000000087ffffc R11: 0000000000000246 R12: 0000000000000002 [ 2575.904475] R13: 00007ffdd683fcbf R14: 00007f357ed1f300 R15: 0000000000022000 [ 2575.905970] [ 2575.923728] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12844 comm=syz-executor.4 [ 2575.933948] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12846 comm=syz-executor.4 07:04:31 executing program 7: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000001340)) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x204800, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x1) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002480)='fd/3\x00') r2 = dup(r1) fdatasync(r2) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x40}}, './file0\x00'}) preadv2(r3, &(0x7f0000001300)=[{&(0x7f0000000080)=""/193, 0xc1}, {&(0x7f0000000180)=""/250, 0xfa}, {&(0x7f0000000300)=""/4096, 0x1000}], 0x3, 0x80000000, 0x66, 0x18) r4 = openat(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000001380)=0x100000) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r5, 0x8, 0x0, 0x87ffffc) sendfile(r5, r4, 0x0, 0x80000000) [ 2575.948139] FAULT_INJECTION: forcing a failure. [ 2575.948139] name failslab, interval 1, probability 0, space 0, times 0 [ 2575.949400] CPU: 1 PID: 12847 Comm: syz-executor.3 Not tainted 5.18.0-rc1-next-20220406 #1 [ 2575.950281] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2575.951476] Call Trace: [ 2575.951742] [ 2575.951979] dump_stack_lvl+0x8b/0xb3 [ 2575.952404] should_fail.cold+0x5/0xa [ 2575.952815] ? create_object.isra.0+0x3a/0xa20 [ 2575.953323] should_failslab+0x5/0x10 [ 2575.953736] kmem_cache_alloc+0x5b/0x480 [ 2575.954186] create_object.isra.0+0x3a/0xa20 [ 2575.954657] ? kasan_unpoison+0x23/0x50 [ 2575.955093] kmem_cache_alloc+0x239/0x480 [ 2575.955546] vm_area_dup+0x78/0x290 [ 2575.955943] ? lock_release+0x3b2/0x750 [ 2575.956371] ? avc_has_perm_noaudit+0x1c8/0x390 [ 2575.956874] ? lock_downgrade+0x6d0/0x6d0 [ 2575.957331] ? copy_page_range+0x2d29/0x4cc0 [ 2575.957808] ? __sanitizer_cov_trace_cmp2+0x22/0x80 [ 2575.958340] ? avc_has_perm_noaudit+0x1ef/0x390 [ 2575.958835] ? avc_has_extended_perms+0xeb0/0xeb0 [ 2575.959352] ? vm_area_alloc+0x110/0x110 [ 2575.959777] ? find_held_lock+0x2c/0x110 [ 2575.960207] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2575.960785] ? selinux_vm_enough_memory+0x10f/0x170 [ 2575.961314] ? selinux_sctp_sk_clone+0x370/0x370 [ 2575.961815] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2575.962400] ? percpu_counter_add_batch+0xb4/0x170 [ 2575.962927] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 2575.963453] ? __vm_enough_memory+0x184/0x360 [ 2575.963925] ? security_vm_enough_memory_mm+0x8b/0xc0 [ 2575.964469] dup_mm+0x53f/0x1250 [ 2575.964841] ? replace_mm_exe_file+0x490/0x490 [ 2575.965333] ? __raw_spin_lock_init+0x36/0x110 [ 2575.965820] copy_process+0x698c/0x6db0 [ 2575.966272] ? __cleanup_sighand+0xb0/0xb0 [ 2575.966728] ? lock_release+0x3b2/0x750 [ 2575.967147] ? ksys_write+0x20c/0x250 [ 2575.967546] ? kernel_clone+0x2f8/0xa60 [ 2575.967972] kernel_clone+0xe7/0xa60 [ 2575.968366] ? find_held_lock+0x2c/0x110 [ 2575.968788] ? create_io_thread+0xf0/0xf0 [ 2575.969231] ? __mutex_unlock_slowpath+0x15c/0x5e0 [ 2575.969771] ? bit_wait_io_timeout+0x160/0x160 [ 2575.970258] ? lock_is_held_type+0xd7/0x130 [ 2575.970723] __do_sys_fork+0x8a/0xc0 [ 2575.971115] ? kernel_clone+0xa60/0xa60 [ 2575.971533] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 2575.972123] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2575.972670] ? lockdep_hardirqs_on+0x79/0x100 [ 2575.973149] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2575.973701] do_syscall_64+0x3b/0x90 [ 2575.974094] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2575.974636] RIP: 0033:0x7fc1c2a89b19 [ 2575.975033] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2575.976995] RSP: 002b:00007fc1bffff188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 2575.977813] RAX: ffffffffffffffda RBX: 00007fc1c2b9cf60 RCX: 00007fc1c2a89b19 [ 2575.978564] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2575.979306] RBP: 00007fc1bffff1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2575.980056] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2575.980810] R13: 00007fff0449096f R14: 00007fc1bffff300 R15: 0000000000022000 [ 2575.981588] 07:04:31 executing program 2: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x204800, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x1) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002480)='fd/3\x00') fdatasync(0xffffffffffffffff) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x40}}, './file0\x00'}) preadv2(r2, &(0x7f0000001300)=[{&(0x7f0000000080)=""/193, 0xc1}, {&(0x7f0000000180)=""/250, 0xfa}, {&(0x7f0000000300)=""/4096, 0x1000}], 0x3, 0x80000000, 0x66, 0x18) openat(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r3, 0x0, 0x0, 0x87ffffc) (fail_nth: 25) 07:04:31 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f00000001c0)=0x8) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x14, 0x0, 0x7a00}, 0x14}}, 0x0) [ 2576.033369] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12851 comm=syz-executor.4 07:04:31 executing program 6: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) preadv(r0, &(0x7f00000011c0)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x7, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x0, 0x0, 0x87ffffc) mmap$perf(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000008, 0x1010, r2, 0x4) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000100), 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r3 = syz_open_procfs(0x0, 0x0) perf_event_open(&(0x7f0000001240)={0x1, 0x80, 0x9, 0xa1, 0xf9, 0x3, 0x0, 0x7, 0xa0400, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x3, @perf_config_ext={0x58d}, 0x21, 0x1, 0x0, 0x6, 0x9, 0x0, 0x8000, 0x0, 0x80, 0x0, 0x5}, 0xffffffffffffffff, 0x4, r3, 0x0) r4 = gettid() process_vm_readv(r4, &(0x7f00000000c0)=[{0x0}, {&(0x7f0000000000)=""/123, 0x7b}, {&(0x7f0000000100)=""/57, 0x39}], 0x3, &(0x7f0000000240)=[{&(0x7f0000012940)=""/102400, 0x19000}], 0x1, 0x0) perf_event_open(0x0, r4, 0x1, r3, 0x8) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/consoles\x00', 0x0, 0x0) 07:04:31 executing program 1: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) preadv(r0, &(0x7f00000011c0)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x7, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x0, 0x0, 0x87ffffc) mmap$perf(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000008, 0x1010, r2, 0x4) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000100), 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r3 = syz_open_procfs(0x0, 0x0) preadv(r3, &(0x7f0000000080)=[{&(0x7f0000000000)=""/40, 0x40}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000001240)={0x1, 0x80, 0x9, 0xa1, 0xf9, 0x3, 0x0, 0x7, 0xa0400, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x3, @perf_config_ext={0x58d}, 0x21, 0x1, 0x0, 0x6, 0x9, 0x0, 0x8000, 0x0, 0x80, 0x0, 0x5}, 0xffffffffffffffff, 0x4, r3, 0x0) r4 = gettid() process_vm_readv(r4, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/4078, 0xfee}, {&(0x7f0000000100)=""/57, 0x39}], 0x2, &(0x7f0000000240)=[{&(0x7f0000012940)=""/102400, 0x19000}], 0x1, 0x0) perf_event_open(0x0, r4, 0x1, r3, 0x8) [ 2576.054495] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12855 comm=syz-executor.4 07:04:31 executing program 5: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) preadv(r0, &(0x7f00000011c0)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x7, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x0, 0x0, 0x87ffffc) (fail_nth: 24) mmap$perf(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000008, 0x1010, r2, 0x4) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000100), 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r3 = syz_open_procfs(0x0, 0x0) perf_event_open(&(0x7f0000001240)={0x1, 0x80, 0x9, 0xa1, 0xf9, 0x3, 0x0, 0x7, 0xa0400, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x3, @perf_config_ext={0x58d}, 0x21, 0x1, 0x0, 0x6, 0x9, 0x0, 0x8000, 0x0, 0x80, 0x0, 0x5}, 0xffffffffffffffff, 0x4, r3, 0x0) r4 = gettid() perf_event_open(0x0, r4, 0x1, r3, 0x8) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/consoles\x00', 0x0, 0x0) 07:04:31 executing program 0: openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r0, 0x0, 0x0, 0x87ffffc) mmap$perf(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000008, 0x10, 0xffffffffffffffff, 0x4) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x12, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = syz_open_procfs(0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001240)={0x1, 0x80, 0x0, 0xa1, 0x0, 0x0, 0x0, 0x7, 0xa0400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x3, @perf_config_ext, 0x21, 0x1, 0x0, 0x0, 0x9, 0x0, 0x8000, 0x0, 0x80, 0x0, 0x5}, 0xffffffffffffffff, 0x4, r1, 0x0) r2 = gettid() process_vm_readv(r2, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/4078, 0xfee}, {&(0x7f0000000000)=""/123, 0x7b}, {&(0x7f0000000100)=""/57, 0x39}], 0x8, &(0x7f0000000240)=[{&(0x7f0000012940)=""/102400, 0xffffff76}], 0x1, 0x0) perf_event_open(0x0, r2, 0x1, r1, 0x8) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/consoles\x00', 0x0, 0x0) 07:04:31 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f00000001c0)=0x8) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x14, 0x0, 0x8700}, 0x14}}, 0x0) [ 2576.121734] FAULT_INJECTION: forcing a failure. [ 2576.121734] name failslab, interval 1, probability 0, space 0, times 0 [ 2576.123024] CPU: 1 PID: 12860 Comm: syz-executor.2 Not tainted 5.18.0-rc1-next-20220406 #1 [ 2576.123927] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2576.125127] Call Trace: [ 2576.125421] [ 2576.125661] dump_stack_lvl+0x8b/0xb3 [ 2576.126084] should_fail.cold+0x5/0xa [ 2576.126494] ? __es_insert_extent+0x3a9/0x12f0 [ 2576.126985] should_failslab+0x5/0x10 [ 2576.127397] kmem_cache_alloc+0x5b/0x480 [ 2576.127840] __es_insert_extent+0x3a9/0x12f0 [ 2576.128332] ext4_es_insert_extent+0x2dc/0xbf0 [ 2576.128837] ? ext4_es_scan_clu+0x2e0/0x2e0 [ 2576.129299] ? _raw_read_unlock+0x24/0x40 [ 2576.129757] ? ext4_es_scan_range+0x116/0x240 [ 2576.130236] ? ext4_es_find_extent_range+0x570/0x570 [ 2576.130774] ? down_write_killable+0x170/0x170 [ 2576.131260] ext4_map_blocks+0x8e1/0x1970 [ 2576.131718] ? ext4_issue_zeroout+0x1c0/0x1c0 [ 2576.132193] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 2576.132781] ? jbd2__journal_start+0xf3/0x8d0 [ 2576.133254] ? __ext4_journal_start_sb+0x392/0x470 [ 2576.133781] ? __ext4_journal_start_sb+0x1d5/0x470 [ 2576.134308] ext4_alloc_file_blocks.isra.0+0x2c1/0xb20 [ 2576.134872] ? ext4_ext_correct_indexes+0x440/0x440 [ 2576.135407] ? down_write_killable+0x170/0x170 [ 2576.135898] ext4_fallocate+0x1a2b/0x3c90 [ 2576.136337] ? lock_acquire+0x1b2/0x530 [ 2576.136765] ? lock_release+0x750/0x750 [ 2576.137191] ? ext4_ext_truncate+0x3e0/0x3e0 [ 2576.137659] ? lock_is_held_type+0xd7/0x130 [ 2576.138125] ? ext4_ext_truncate+0x3e0/0x3e0 [ 2576.138585] vfs_fallocate+0x489/0xe00 [ 2576.139004] __x64_sys_fallocate+0xcf/0x140 [ 2576.139468] do_syscall_64+0x3b/0x90 [ 2576.139866] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2576.140415] RIP: 0033:0x7fd845bccb19 [ 2576.140808] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2576.142741] RSP: 002b:00007fd843142188 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 2576.143546] RAX: ffffffffffffffda RBX: 00007fd845cdff60 RCX: 00007fd845bccb19 [ 2576.144309] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 2576.145056] RBP: 00007fd8431421d0 R08: 0000000000000000 R09: 0000000000000000 [ 2576.145822] R10: 00000000087ffffc R11: 0000000000000246 R12: 0000000000000002 [ 2576.146572] R13: 00007ffde12fa01f R14: 00007fd843142300 R15: 0000000000022000 [ 2576.147332] 07:04:31 executing program 6: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) preadv(r0, &(0x7f00000011c0)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x7, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x0, 0x0, 0x87ffffc) mmap$perf(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000008, 0x1010, r2, 0x4) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000100), 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r3 = syz_open_procfs(0x0, 0x0) perf_event_open(&(0x7f0000001240)={0x1, 0x80, 0x9, 0xa1, 0xf9, 0x3, 0x0, 0x7, 0xa0400, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x3, @perf_config_ext={0x58d}, 0x21, 0x1, 0x0, 0x6, 0x9, 0x0, 0x8000, 0x0, 0x80, 0x0, 0x5}, 0xffffffffffffffff, 0x4, r3, 0x0) r4 = gettid() process_vm_readv(r4, &(0x7f00000000c0)=[{0x0}, {&(0x7f0000000000)=""/123, 0x7b}, {&(0x7f0000000100)=""/57, 0x39}], 0x3, &(0x7f0000000240)=[{&(0x7f0000012940)=""/102400, 0x19000}], 0x1, 0x0) perf_event_open(0x0, r4, 0x1, r3, 0x8) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/consoles\x00', 0x0, 0x0) [ 2576.175537] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12866 comm=syz-executor.4 07:04:31 executing program 3: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000040)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x300000c, 0x13, r0, 0x8000000) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xa) fork() (fail_nth: 29) [ 2576.182434] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12867 comm=syz-executor.4 07:04:31 executing program 7: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000001340)) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x204800, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x1) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002480)='fd/3\x00') r2 = dup(r1) fdatasync(r2) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x40}}, './file0\x00'}) preadv2(r3, &(0x7f0000001300)=[{&(0x7f0000000080)=""/193, 0xc1}, {&(0x7f0000000180)=""/250, 0xfa}, {&(0x7f0000000300)=""/4096, 0x1000}], 0x3, 0x80000000, 0x66, 0x18) r4 = openat(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000001380)=0x100000) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r5, 0x9, 0x0, 0x87ffffc) sendfile(r5, r4, 0x0, 0x80000000) 07:04:31 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f00000001c0)=0x8) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x14, 0x0, 0xae09}, 0x14}}, 0x0) [ 2576.216627] FAULT_INJECTION: forcing a failure. [ 2576.216627] name failslab, interval 1, probability 0, space 0, times 0 [ 2576.219414] CPU: 0 PID: 12865 Comm: syz-executor.5 Not tainted 5.18.0-rc1-next-20220406 #1 [ 2576.221118] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2576.223433] Call Trace: [ 2576.223955] [ 2576.224419] dump_stack_lvl+0x8b/0xb3 [ 2576.225211] should_fail.cold+0x5/0xa [ 2576.226026] ? create_object.isra.0+0x3a/0xa20 [ 2576.226978] should_failslab+0x5/0x10 [ 2576.227765] kmem_cache_alloc+0x5b/0x480 [ 2576.228634] create_object.isra.0+0x3a/0xa20 [ 2576.229549] ? kasan_unpoison+0x23/0x50 [ 2576.230387] kmem_cache_alloc+0x239/0x480 [ 2576.231266] ext4_mb_new_blocks+0x222c/0x4b60 [ 2576.232220] ? lock_is_held_type+0xd7/0x130 [ 2576.233124] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2576.234277] ? ext4_cache_extents+0x148/0x2d0 [ 2576.235197] ? ext4_discard_preallocations+0xe60/0xe60 [ 2576.236272] ? __sanitizer_cov_trace_const_cmp2+0x22/0x80 [ 2576.237448] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2576.238575] ? ext4_ext_search_right+0x2e3/0xbd0 [ 2576.239555] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2576.240690] ext4_ext_map_blocks+0x1fb0/0x5cd0 [ 2576.241654] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 2576.242724] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 2576.243811] ? ext4_ext_release+0x10/0x10 [ 2576.244671] ? lock_release+0x750/0x750 [ 2576.245507] ? lock_release+0x3b2/0x750 [ 2576.246333] ? lock_is_held_type+0xd7/0x130 [ 2576.247237] ? down_write_killable+0x170/0x170 [ 2576.248191] ext4_map_blocks+0x652/0x1970 [ 2576.249050] ? lock_is_held_type+0xd7/0x130 [ 2576.249952] ? ext4_issue_zeroout+0x1c0/0x1c0 [ 2576.250878] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 2576.252007] ? jbd2__journal_start+0xf3/0x8d0 [ 2576.252929] ? __ext4_journal_start_sb+0x392/0x470 [ 2576.253926] ? __ext4_journal_start_sb+0x1d5/0x470 [ 2576.254928] ext4_alloc_file_blocks.isra.0+0x2c1/0xb20 [ 2576.256012] ? ext4_ext_correct_indexes+0x440/0x440 [ 2576.257040] ? down_write_killable+0x170/0x170 [ 2576.258002] ext4_fallocate+0x1a2b/0x3c90 [ 2576.258851] ? lock_acquire+0x1b2/0x530 [ 2576.258885] FAULT_INJECTION: forcing a failure. [ 2576.258885] name failslab, interval 1, probability 0, space 0, times 0 [ 2576.259667] ? lock_release+0x750/0x750 [ 2576.261721] ? ext4_ext_truncate+0x3e0/0x3e0 [ 2576.262631] ? lock_is_held_type+0xd7/0x130 [ 2576.263530] ? ext4_ext_truncate+0x3e0/0x3e0 [ 2576.264436] vfs_fallocate+0x489/0xe00 [ 2576.265254] __x64_sys_fallocate+0xcf/0x140 [ 2576.266164] do_syscall_64+0x3b/0x90 [ 2576.266933] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2576.267997] RIP: 0033:0x7f35817a9b19 [ 2576.268753] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2576.272495] RSP: 002b:00007f357ed1f188 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 2576.274047] RAX: ffffffffffffffda RBX: 00007f35818bcf60 RCX: 00007f35817a9b19 [ 2576.275501] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 2576.276945] RBP: 00007f357ed1f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2576.278405] R10: 00000000087ffffc R11: 0000000000000246 R12: 0000000000000002 [ 2576.279848] R13: 00007ffdd683fcbf R14: 00007f357ed1f300 R15: 0000000000022000 [ 2576.281341] [ 2576.281818] CPU: 1 PID: 12874 Comm: syz-executor.3 Not tainted 5.18.0-rc1-next-20220406 #1 [ 2576.282852] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2576.284137] Call Trace: [ 2576.284434] [ 2576.284684] dump_stack_lvl+0x8b/0xb3 [ 2576.285124] should_fail.cold+0x5/0xa [ 2576.285579] ? anon_vma_clone+0xdc/0x580 [ 2576.286042] should_failslab+0x5/0x10 [ 2576.286484] kmem_cache_alloc+0x5b/0x480 [ 2576.286959] anon_vma_clone+0xdc/0x580 [ 2576.287402] anon_vma_fork+0x82/0x630 [ 2576.287838] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 2576.288403] ? __vm_enough_memory+0x184/0x360 [ 2576.288913] dup_mm+0x91b/0x1250 [ 2576.289324] ? replace_mm_exe_file+0x490/0x490 [ 2576.289852] ? __raw_spin_lock_init+0x36/0x110 [ 2576.290381] copy_process+0x698c/0x6db0 [ 2576.290855] ? __cleanup_sighand+0xb0/0xb0 [ 2576.291343] ? lock_release+0x3b2/0x750 [ 2576.291800] ? ksys_write+0x20c/0x250 [ 2576.292228] ? kernel_clone+0x2f8/0xa60 [ 2576.292687] kernel_clone+0xe7/0xa60 [ 2576.293120] ? find_held_lock+0x2c/0x110 [ 2576.293576] ? create_io_thread+0xf0/0xf0 [ 2576.294068] ? __mutex_unlock_slowpath+0x15c/0x5e0 [ 2576.294645] ? bit_wait_io_timeout+0x160/0x160 [ 2576.295174] ? lock_is_held_type+0xd7/0x130 [ 2576.295683] __do_sys_fork+0x8a/0xc0 [ 2576.296120] ? kernel_clone+0xa60/0xa60 [ 2576.296586] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 2576.297241] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2576.297865] ? lockdep_hardirqs_on+0x79/0x100 [ 2576.298399] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2576.299015] do_syscall_64+0x3b/0x90 [ 2576.299460] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2576.300067] RIP: 0033:0x7fc1c2a89b19 [ 2576.300507] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2576.302603] RSP: 002b:00007fc1bffff188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 2576.303461] RAX: ffffffffffffffda RBX: 00007fc1c2b9cf60 RCX: 00007fc1c2a89b19 [ 2576.304269] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2576.305069] RBP: 00007fc1bffff1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2576.305888] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2576.306689] R13: 00007fff0449096f R14: 00007fc1bffff300 R15: 0000000000022000 [ 2576.307509] 07:04:32 executing program 1: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) preadv(r0, &(0x7f00000011c0)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x7, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x0, 0x0, 0x87ffffc) mmap$perf(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000008, 0x1010, r2, 0x4) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000100), 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r3 = syz_open_procfs(0x0, 0x0) preadv(r3, &(0x7f0000000080)=[{&(0x7f0000000000)=""/40, 0x40}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000001240)={0x1, 0x80, 0x9, 0xa1, 0xf9, 0x3, 0x0, 0x7, 0xa0400, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x3, @perf_config_ext={0x58d}, 0x21, 0x1, 0x0, 0x6, 0x9, 0x0, 0x8000, 0x0, 0x80, 0x0, 0x5}, 0xffffffffffffffff, 0x4, r3, 0x0) r4 = gettid() process_vm_readv(r4, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/4078, 0xfee}, {&(0x7f0000000100)=""/57, 0x39}], 0x2, &(0x7f0000000240)=[{&(0x7f0000012940)=""/102400, 0x19000}], 0x1, 0x0) perf_event_open(0x0, r4, 0x1, r3, 0x8) 07:04:32 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f00000001c0)=0x8) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x14, 0x0, 0xf000}, 0x14}}, 0x0) 07:04:32 executing program 7: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000001340)) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x204800, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x1) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002480)='fd/3\x00') r2 = dup(r1) fdatasync(r2) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x40}}, './file0\x00'}) preadv2(r3, &(0x7f0000001300)=[{&(0x7f0000000080)=""/193, 0xc1}, {&(0x7f0000000180)=""/250, 0xfa}, {&(0x7f0000000300)=""/4096, 0x1000}], 0x3, 0x80000000, 0x66, 0x18) r4 = openat(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000001380)=0x100000) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r5, 0xa, 0x0, 0x87ffffc) sendfile(r5, r4, 0x0, 0x80000000) 07:04:32 executing program 6: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) preadv(r0, &(0x7f00000011c0)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x7, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x0, 0x0, 0x87ffffc) mmap$perf(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000008, 0x1010, r2, 0x4) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000100), 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r3 = syz_open_procfs(0x0, 0x0) perf_event_open(&(0x7f0000001240)={0x1, 0x80, 0x9, 0xa1, 0xf9, 0x3, 0x0, 0x7, 0xa0400, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x3, @perf_config_ext={0x58d}, 0x21, 0x1, 0x0, 0x6, 0x9, 0x0, 0x8000, 0x0, 0x80, 0x0, 0x5}, 0xffffffffffffffff, 0x4, r3, 0x0) r4 = gettid() process_vm_readv(r4, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/4078, 0xfee}, {&(0x7f0000000000)=""/123, 0x7b}, {&(0x7f0000000100)=""/57, 0x39}], 0x3, 0x0, 0x0, 0x0) perf_event_open(0x0, r4, 0x1, r3, 0x8) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/consoles\x00', 0x0, 0x0) 07:04:32 executing program 3: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000040)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x300000c, 0x13, r0, 0x8000000) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xa) fork() (fail_nth: 30) [ 2576.635983] FAULT_INJECTION: forcing a failure. [ 2576.635983] name failslab, interval 1, probability 0, space 0, times 0 [ 2576.638307] CPU: 1 PID: 12896 Comm: syz-executor.3 Not tainted 5.18.0-rc1-next-20220406 #1 [ 2576.639967] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2576.642253] Call Trace: [ 2576.642762] [ 2576.643206] dump_stack_lvl+0x8b/0xb3 [ 2576.643984] should_fail.cold+0x5/0xa [ 2576.644768] ? create_object.isra.0+0x3a/0xa20 [ 2576.645709] should_failslab+0x5/0x10 [ 2576.646472] kmem_cache_alloc+0x5b/0x480 [ 2576.647293] create_object.isra.0+0x3a/0xa20 [ 2576.648161] ? kasan_unpoison+0x23/0x50 [ 2576.648956] kmem_cache_alloc+0x239/0x480 [ 2576.649803] anon_vma_clone+0xdc/0x580 [ 2576.650591] anon_vma_fork+0x82/0x630 [ 2576.651347] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 2576.652338] ? __vm_enough_memory+0x184/0x360 [ 2576.653244] dup_mm+0x91b/0x1250 [ 2576.653962] ? replace_mm_exe_file+0x490/0x490 [ 2576.654881] ? __raw_spin_lock_init+0x36/0x110 [ 2576.655807] copy_process+0x698c/0x6db0 [ 2576.656638] ? __cleanup_sighand+0xb0/0xb0 [ 2576.657503] ? lock_release+0x3b2/0x750 [ 2576.658304] ? ksys_write+0x20c/0x250 [ 2576.659057] ? kernel_clone+0x2f8/0xa60 [ 2576.659864] kernel_clone+0xe7/0xa60 [ 2576.660610] ? find_held_lock+0x2c/0x110 [ 2576.661432] ? create_io_thread+0xf0/0xf0 [ 2576.662271] ? __mutex_unlock_slowpath+0x15c/0x5e0 [ 2576.663263] ? bit_wait_io_timeout+0x160/0x160 [ 2576.664169] ? lock_is_held_type+0xd7/0x130 [ 2576.665047] __do_sys_fork+0x8a/0xc0 [ 2576.665811] ? kernel_clone+0xa60/0xa60 [ 2576.666604] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 2576.667715] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2576.668741] ? lockdep_hardirqs_on+0x79/0x100 [ 2576.669656] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2576.670688] do_syscall_64+0x3b/0x90 [ 2576.671432] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2576.672455] RIP: 0033:0x7fc1c2a89b19 [ 2576.673185] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2576.676815] RSP: 002b:00007fc1bffff188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 2576.678326] RAX: ffffffffffffffda RBX: 00007fc1c2b9cf60 RCX: 00007fc1c2a89b19 [ 2576.679730] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2576.681134] RBP: 00007fc1bffff1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2576.682551] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2576.683955] R13: 00007fff0449096f R14: 00007fc1bffff300 R15: 0000000000022000 [ 2576.685398] 07:04:45 executing program 2: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x204800, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x1) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002480)='fd/3\x00') fdatasync(0xffffffffffffffff) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x40}}, './file0\x00'}) preadv2(r2, &(0x7f0000001300)=[{&(0x7f0000000080)=""/193, 0xc1}, {&(0x7f0000000180)=""/250, 0xfa}, {&(0x7f0000000300)=""/4096, 0x1000}], 0x3, 0x80000000, 0x66, 0x18) openat(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r3, 0x0, 0x0, 0x87ffffc) (fail_nth: 26) 07:04:45 executing program 3: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000040)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x300000c, 0x13, r0, 0x8000000) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xa) fork() (fail_nth: 31) 07:04:45 executing program 6: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) preadv(r0, &(0x7f00000011c0)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x7, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x0, 0x0, 0x87ffffc) mmap$perf(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000008, 0x1010, r2, 0x4) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000100), 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r3 = syz_open_procfs(0x0, 0x0) perf_event_open(&(0x7f0000001240)={0x1, 0x80, 0x9, 0xa1, 0xf9, 0x3, 0x0, 0x7, 0xa0400, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x3, @perf_config_ext={0x58d}, 0x21, 0x1, 0x0, 0x6, 0x9, 0x0, 0x8000, 0x0, 0x80, 0x0, 0x5}, 0xffffffffffffffff, 0x4, r3, 0x0) r4 = gettid() process_vm_readv(r4, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/4078, 0xfee}, {&(0x7f0000000000)=""/123, 0x7b}, {&(0x7f0000000100)=""/57, 0x39}], 0x3, 0x0, 0x0, 0x0) perf_event_open(0x0, r4, 0x1, r3, 0x8) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/consoles\x00', 0x0, 0x0) 07:04:45 executing program 0: openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r0, 0x0, 0x0, 0x87ffffc) mmap$perf(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000008, 0x10, 0xffffffffffffffff, 0x4) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x12, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = syz_open_procfs(0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001240)={0x1, 0x80, 0x0, 0xa1, 0x0, 0x0, 0x0, 0x7, 0xa0400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x3, @perf_config_ext, 0x21, 0x1, 0x0, 0x0, 0x9, 0x0, 0x8000, 0x0, 0x80, 0x0, 0x5}, 0xffffffffffffffff, 0x4, r1, 0x0) r2 = gettid() process_vm_readv(r2, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/4078, 0xfee}, {&(0x7f0000000000)=""/123, 0x7b}, {&(0x7f0000000100)=""/57, 0x39}], 0x3, &(0x7f0000000240)=[{&(0x7f0000012940)=""/102400, 0xffffff76}], 0x2, 0x0) perf_event_open(0x0, r2, 0x1, r1, 0x8) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/consoles\x00', 0x0, 0x0) 07:04:45 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f00000001c0)=0x8) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x14, 0x0, 0xffff}, 0x14}}, 0x0) 07:04:45 executing program 7: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000001340)) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x204800, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x1) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002480)='fd/3\x00') r2 = dup(r1) fdatasync(r2) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x40}}, './file0\x00'}) preadv2(r3, &(0x7f0000001300)=[{&(0x7f0000000080)=""/193, 0xc1}, {&(0x7f0000000180)=""/250, 0xfa}, {&(0x7f0000000300)=""/4096, 0x1000}], 0x3, 0x80000000, 0x66, 0x18) r4 = openat(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000001380)=0x100000) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r5, 0xb, 0x0, 0x87ffffc) sendfile(r5, r4, 0x0, 0x80000000) 07:04:45 executing program 5: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) preadv(r0, &(0x7f00000011c0)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x7, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x0, 0x0, 0x87ffffc) (fail_nth: 25) mmap$perf(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000008, 0x1010, r2, 0x4) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000100), 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r3 = syz_open_procfs(0x0, 0x0) perf_event_open(&(0x7f0000001240)={0x1, 0x80, 0x9, 0xa1, 0xf9, 0x3, 0x0, 0x7, 0xa0400, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x3, @perf_config_ext={0x58d}, 0x21, 0x1, 0x0, 0x6, 0x9, 0x0, 0x8000, 0x0, 0x80, 0x0, 0x5}, 0xffffffffffffffff, 0x4, r3, 0x0) r4 = gettid() perf_event_open(0x0, r4, 0x1, r3, 0x8) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/consoles\x00', 0x0, 0x0) 07:04:45 executing program 1: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) preadv(r0, &(0x7f00000011c0)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x7, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x0, 0x0, 0x87ffffc) mmap$perf(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000008, 0x1010, r2, 0x4) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000100), 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r3 = syz_open_procfs(0x0, 0x0) preadv(r3, &(0x7f0000000080)=[{&(0x7f0000000000)=""/40, 0x40}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000001240)={0x1, 0x80, 0x9, 0xa1, 0xf9, 0x3, 0x0, 0x7, 0xa0400, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x3, @perf_config_ext={0x58d}, 0x21, 0x1, 0x0, 0x6, 0x9, 0x0, 0x8000, 0x0, 0x80, 0x0, 0x5}, 0xffffffffffffffff, 0x4, r3, 0x0) r4 = gettid() process_vm_readv(r4, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/4078, 0xfee}, {0x0}, {&(0x7f0000000100)=""/57, 0x39}], 0x3, &(0x7f0000000240)=[{&(0x7f0000012940)=""/102400, 0x19000}], 0x1, 0x0) perf_event_open(0x0, r4, 0x1, r3, 0x8) [ 2589.922364] selinux_netlink_send: 4 callbacks suppressed [ 2589.922378] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12917 comm=syz-executor.4 [ 2589.925250] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12918 comm=syz-executor.4 [ 2589.938556] FAULT_INJECTION: forcing a failure. [ 2589.938556] name failslab, interval 1, probability 0, space 0, times 0 [ 2589.939874] CPU: 1 PID: 12920 Comm: syz-executor.5 Not tainted 5.18.0-rc1-next-20220406 #1 [ 2589.940763] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2589.941976] Call Trace: [ 2589.942248] [ 2589.942481] dump_stack_lvl+0x8b/0xb3 [ 2589.942893] should_fail.cold+0x5/0xa [ 2589.943309] ? jbd2__journal_start+0x18c/0x8d0 [ 2589.943805] should_failslab+0x5/0x10 [ 2589.944209] kmem_cache_alloc+0x5b/0x480 [ 2589.944647] jbd2__journal_start+0x18c/0x8d0 [ 2589.945119] __ext4_journal_start_sb+0x392/0x470 [ 2589.945639] ? __ext4_journal_stop+0x107/0x1f0 [ 2589.946116] ext4_alloc_file_blocks.isra.0+0x286/0xb20 [ 2589.946686] ? ext4_ext_correct_indexes+0x440/0x440 [ 2589.947207] ? down_write_killable+0x170/0x170 [ 2589.947714] ext4_fallocate+0x1a2b/0x3c90 [ 2589.948178] ? lock_acquire+0x1b2/0x530 [ 2589.948614] ? lock_release+0x750/0x750 [ 2589.949051] ? ext4_ext_truncate+0x3e0/0x3e0 [ 2589.949547] ? lock_is_held_type+0xd7/0x130 [ 2589.950023] ? ext4_ext_truncate+0x3e0/0x3e0 [ 2589.950504] vfs_fallocate+0x489/0xe00 [ 2589.950946] __x64_sys_fallocate+0xcf/0x140 [ 2589.951423] do_syscall_64+0x3b/0x90 [ 2589.951829] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2589.952393] RIP: 0033:0x7f35817a9b19 [ 2589.952796] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2589.954776] RSP: 002b:00007f357ed1f188 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 2589.955597] RAX: ffffffffffffffda RBX: 00007f35818bcf60 RCX: 00007f35817a9b19 [ 2589.956364] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 2589.957140] RBP: 00007f357ed1f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2589.957929] R10: 00000000087ffffc R11: 0000000000000246 R12: 0000000000000002 [ 2589.958707] R13: 00007ffdd683fcbf R14: 00007f357ed1f300 R15: 0000000000022000 [ 2589.959501] 07:04:45 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f00000001c0)=0x8) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) [ 2589.981120] FAULT_INJECTION: forcing a failure. [ 2589.981120] name failslab, interval 1, probability 0, space 0, times 0 [ 2589.983742] CPU: 0 PID: 12923 Comm: syz-executor.3 Not tainted 5.18.0-rc1-next-20220406 #1 [ 2589.985549] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2589.987998] Call Trace: [ 2589.988554] [ 2589.989040] dump_stack_lvl+0x8b/0xb3 [ 2589.989907] should_fail.cold+0x5/0xa [ 2589.990742] ? anon_vma_fork+0xed/0x630 [ 2589.991614] should_failslab+0x5/0x10 [ 2589.992445] kmem_cache_alloc+0x5b/0x480 [ 2589.993349] anon_vma_fork+0xed/0x630 [ 2589.994186] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 2589.995280] ? __vm_enough_memory+0x184/0x360 [ 2589.996273] dup_mm+0x91b/0x1250 [ 2589.997042] ? replace_mm_exe_file+0x490/0x490 [ 2589.998070] ? __raw_spin_lock_init+0x36/0x110 [ 2589.999089] copy_process+0x698c/0x6db0 [ 2590.000003] ? __cleanup_sighand+0xb0/0xb0 [ 2590.000965] ? lock_release+0x3b2/0x750 [ 2590.001844] ? ksys_write+0x20c/0x250 [ 2590.002670] ? kernel_clone+0x2f8/0xa60 [ 2590.003548] kernel_clone+0xe7/0xa60 [ 2590.003707] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12929 comm=syz-executor.4 [ 2590.004365] ? find_held_lock+0x2c/0x110 [ 2590.004395] ? create_io_thread+0xf0/0xf0 [ 2590.007423] ? __mutex_unlock_slowpath+0x15c/0x5e0 [ 2590.008497] ? bit_wait_io_timeout+0x160/0x160 [ 2590.009509] ? lock_is_held_type+0xd7/0x130 [ 2590.009808] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12930 comm=syz-executor.4 [ 2590.010465] __do_sys_fork+0x8a/0xc0 [ 2590.012545] ? kernel_clone+0xa60/0xa60 [ 2590.013422] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 2590.014655] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2590.015791] ? lockdep_hardirqs_on+0x79/0x100 [ 2590.016785] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2590.017945] do_syscall_64+0x3b/0x90 [ 2590.018770] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2590.019899] RIP: 0033:0x7fc1c2a89b19 [ 2590.020707] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2590.024675] RSP: 002b:00007fc1bffff188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 2590.026343] RAX: ffffffffffffffda RBX: 00007fc1c2b9cf60 RCX: 00007fc1c2a89b19 [ 2590.027883] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2590.029434] RBP: 00007fc1bffff1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2590.030985] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2590.032532] R13: 00007fff0449096f R14: 00007fc1bffff300 R15: 0000000000022000 [ 2590.034125] 07:04:45 executing program 5: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) preadv(r0, &(0x7f00000011c0)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x7, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x0, 0x0, 0x87ffffc) (fail_nth: 26) mmap$perf(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000008, 0x1010, r2, 0x4) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000100), 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r3 = syz_open_procfs(0x0, 0x0) perf_event_open(&(0x7f0000001240)={0x1, 0x80, 0x9, 0xa1, 0xf9, 0x3, 0x0, 0x7, 0xa0400, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x3, @perf_config_ext={0x58d}, 0x21, 0x1, 0x0, 0x6, 0x9, 0x0, 0x8000, 0x0, 0x80, 0x0, 0x5}, 0xffffffffffffffff, 0x4, r3, 0x0) r4 = gettid() perf_event_open(0x0, r4, 0x1, r3, 0x8) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/consoles\x00', 0x0, 0x0) [ 2590.042969] FAULT_INJECTION: forcing a failure. [ 2590.042969] name failslab, interval 1, probability 0, space 0, times 0 07:04:45 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f00000001c0)=0x8) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x14, 0x0, 0x0, 0x2}, 0x14}}, 0x0) [ 2590.045709] CPU: 0 PID: 12913 Comm: syz-executor.2 Not tainted 5.18.0-rc1-next-20220406 #1 [ 2590.047590] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2590.050088] Call Trace: [ 2590.050644] [ 2590.051132] dump_stack_lvl+0x8b/0xb3 [ 2590.051973] should_fail.cold+0x5/0xa [ 2590.052824] ? __es_tree_search.isra.0+0x1af/0x210 [ 2590.053908] ? create_object.isra.0+0x3a/0xa20 [ 2590.054911] should_failslab+0x5/0x10 [ 2590.055745] kmem_cache_alloc+0x5b/0x480 [ 2590.056660] create_object.isra.0+0x3a/0xa20 [ 2590.057632] ? kasan_unpoison+0x23/0x50 [ 2590.058529] kmem_cache_alloc+0x239/0x480 [ 2590.059452] __es_insert_extent+0x3a9/0x12f0 [ 2590.060465] ext4_es_insert_extent+0x2dc/0xbf0 [ 2590.061497] ? ext4_es_scan_clu+0x2e0/0x2e0 [ 2590.062452] ? _raw_read_unlock+0x24/0x40 [ 2590.063367] ? ext4_es_scan_range+0x116/0x240 [ 2590.064324] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12932 comm=syz-executor.4 [ 2590.064378] ? ext4_es_find_extent_range+0x570/0x570 [ 2590.066754] ? down_write_killable+0x170/0x170 [ 2590.067770] ext4_map_blocks+0x8e1/0x1970 [ 2590.068699] ? ext4_issue_zeroout+0x1c0/0x1c0 [ 2590.069149] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12933 comm=syz-executor.4 [ 2590.069696] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 2590.069738] ? jbd2__journal_start+0xf3/0x8d0 [ 2590.073126] ? __ext4_journal_start_sb+0x392/0x470 [ 2590.074211] ? __ext4_journal_start_sb+0x1d5/0x470 [ 2590.075285] ext4_alloc_file_blocks.isra.0+0x2c1/0xb20 [ 2590.076449] ? ext4_ext_correct_indexes+0x440/0x440 [ 2590.077550] ? down_write_killable+0x170/0x170 [ 2590.078558] ext4_fallocate+0x1a2b/0x3c90 [ 2590.079465] ? lock_acquire+0x1b2/0x530 [ 2590.080343] ? lock_release+0x750/0x750 [ 2590.081230] ? ext4_ext_truncate+0x3e0/0x3e0 [ 2590.082200] ? lock_is_held_type+0xd7/0x130 [ 2590.083156] ? ext4_ext_truncate+0x3e0/0x3e0 [ 2590.084124] vfs_fallocate+0x489/0xe00 [ 2590.084994] __x64_sys_fallocate+0xcf/0x140 [ 2590.085961] do_syscall_64+0x3b/0x90 [ 2590.086784] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2590.087919] RIP: 0033:0x7fd845bccb19 [ 2590.088727] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2590.092736] RSP: 002b:00007fd843142188 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 2590.094417] RAX: ffffffffffffffda RBX: 00007fd845cdff60 RCX: 00007fd845bccb19 [ 2590.095964] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 2590.097520] RBP: 00007fd8431421d0 R08: 0000000000000000 R09: 0000000000000000 [ 2590.099068] R10: 00000000087ffffc R11: 0000000000000246 R12: 0000000000000002 [ 2590.100611] R13: 00007ffde12fa01f R14: 00007fd843142300 R15: 0000000000022000 [ 2590.102205] 07:04:45 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f00000001c0)=0x8) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x14, 0x0, 0x0, 0x3}, 0x14}}, 0x0) 07:04:45 executing program 1: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) preadv(r0, &(0x7f00000011c0)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x7, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x0, 0x0, 0x87ffffc) mmap$perf(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000008, 0x1010, r2, 0x4) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000100), 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r3 = syz_open_procfs(0x0, 0x0) preadv(r3, &(0x7f0000000080)=[{&(0x7f0000000000)=""/40, 0x40}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000001240)={0x1, 0x80, 0x9, 0xa1, 0xf9, 0x3, 0x0, 0x7, 0xa0400, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x3, @perf_config_ext={0x58d}, 0x21, 0x1, 0x0, 0x6, 0x9, 0x0, 0x8000, 0x0, 0x80, 0x0, 0x5}, 0xffffffffffffffff, 0x4, r3, 0x0) r4 = gettid() process_vm_readv(r4, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/4078, 0xfee}, {0x0}, {&(0x7f0000000100)=""/57, 0x39}], 0x3, &(0x7f0000000240)=[{&(0x7f0000012940)=""/102400, 0x19000}], 0x1, 0x0) perf_event_open(0x0, r4, 0x1, r3, 0x8) 07:04:45 executing program 6: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) preadv(r0, &(0x7f00000011c0)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x7, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x0, 0x0, 0x87ffffc) mmap$perf(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000008, 0x1010, r2, 0x4) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000100), 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r3 = syz_open_procfs(0x0, 0x0) perf_event_open(&(0x7f0000001240)={0x1, 0x80, 0x9, 0xa1, 0xf9, 0x3, 0x0, 0x7, 0xa0400, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x3, @perf_config_ext={0x58d}, 0x21, 0x1, 0x0, 0x6, 0x9, 0x0, 0x8000, 0x0, 0x80, 0x0, 0x5}, 0xffffffffffffffff, 0x4, r3, 0x0) r4 = gettid() process_vm_readv(r4, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/4078, 0xfee}, {&(0x7f0000000000)=""/123, 0x7b}, {&(0x7f0000000100)=""/57, 0x39}], 0x3, 0x0, 0x0, 0x0) perf_event_open(0x0, r4, 0x1, r3, 0x8) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/consoles\x00', 0x0, 0x0) [ 2590.181564] FAULT_INJECTION: forcing a failure. [ 2590.181564] name failslab, interval 1, probability 0, space 0, times 0 [ 2590.184199] CPU: 0 PID: 12937 Comm: syz-executor.5 Not tainted 5.18.0-rc1-next-20220406 #1 [ 2590.186031] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2590.188499] Call Trace: [ 2590.189061] [ 2590.189555] dump_stack_lvl+0x8b/0xb3 [ 2590.190399] should_fail.cold+0x5/0xa 07:04:45 executing program 7: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000001340)) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x204800, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x1) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002480)='fd/3\x00') r2 = dup(r1) fdatasync(r2) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x40}}, './file0\x00'}) preadv2(r3, &(0x7f0000001300)=[{&(0x7f0000000080)=""/193, 0xc1}, {&(0x7f0000000180)=""/250, 0xfa}, {&(0x7f0000000300)=""/4096, 0x1000}], 0x3, 0x80000000, 0x66, 0x18) r4 = openat(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000001380)=0x100000) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r5, 0xc, 0x0, 0x87ffffc) sendfile(r5, r4, 0x0, 0x80000000) 07:04:45 executing program 0: openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r0, 0x0, 0x0, 0x87ffffc) mmap$perf(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000008, 0x10, 0xffffffffffffffff, 0x4) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x12, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = syz_open_procfs(0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001240)={0x1, 0x80, 0x0, 0xa1, 0x0, 0x0, 0x0, 0x7, 0xa0400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x3, @perf_config_ext, 0x21, 0x1, 0x0, 0x0, 0x9, 0x0, 0x8000, 0x0, 0x80, 0x0, 0x5}, 0xffffffffffffffff, 0x4, r1, 0x0) r2 = gettid() process_vm_readv(r2, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/4078, 0xfee}, {&(0x7f0000000000)=""/123, 0x7b}, {&(0x7f0000000100)=""/57, 0x39}], 0x3, &(0x7f0000000240)=[{&(0x7f0000012940)=""/102400, 0xffffff76}], 0x3, 0x0) perf_event_open(0x0, r2, 0x1, r1, 0x8) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/consoles\x00', 0x0, 0x0) [ 2590.191351] ? create_object.isra.0+0x3a/0xa20 [ 2590.192076] should_failslab+0x5/0x10 [ 2590.192623] kmem_cache_alloc+0x5b/0x480 [ 2590.193240] create_object.isra.0+0x3a/0xa20 [ 2590.193903] ? kasan_unpoison+0x23/0x50 [ 2590.194070] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12940 comm=syz-executor.4 [ 2590.194436] kmem_cache_alloc+0x239/0x480 [ 2590.194475] jbd2__journal_start+0x18c/0x8d0 [ 2590.197054] __ext4_journal_start_sb+0x392/0x470 [ 2590.197753] ? __ext4_journal_stop+0x107/0x1f0 [ 2590.198417] ext4_alloc_file_blocks.isra.0+0x286/0xb20 [ 2590.199196] ? ext4_ext_correct_indexes+0x440/0x440 [ 2590.199912] ? down_write_killable+0x170/0x170 [ 2590.200620] ext4_fallocate+0x1a2b/0x3c90 [ 2590.201204] ? lock_acquire+0x1b2/0x530 [ 2590.201806] ? lock_release+0x750/0x750 [ 2590.202398] ? ext4_ext_truncate+0x3e0/0x3e0 [ 2590.203027] ? lock_is_held_type+0xd7/0x130 [ 2590.203661] ? ext4_ext_truncate+0x3e0/0x3e0 [ 2590.204298] vfs_fallocate+0x489/0xe00 [ 2590.204890] __x64_sys_fallocate+0xcf/0x140 [ 2590.205542] do_syscall_64+0x3b/0x90 [ 2590.206092] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2590.206692] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12941 comm=syz-executor.4 [ 2590.206814] RIP: 0033:0x7f35817a9b19 [ 2590.208798] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2590.211455] RSP: 002b:00007f357ed1f188 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 2590.212560] RAX: ffffffffffffffda RBX: 00007f35818bcf60 RCX: 00007f35817a9b19 [ 2590.213630] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 2590.214661] RBP: 00007f357ed1f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2590.215697] R10: 00000000087ffffc R11: 0000000000000246 R12: 0000000000000002 [ 2590.216717] R13: 00007ffdd683fcbf R14: 00007f357ed1f300 R15: 0000000000022000 [ 2590.217726] 07:04:58 executing program 3: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000040)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x300000c, 0x13, r0, 0x8000000) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xa) fork() (fail_nth: 32) 07:04:58 executing program 2: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x204800, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x1) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002480)='fd/3\x00') fdatasync(0xffffffffffffffff) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x40}}, './file0\x00'}) preadv2(r2, &(0x7f0000001300)=[{&(0x7f0000000080)=""/193, 0xc1}, {&(0x7f0000000180)=""/250, 0xfa}, {&(0x7f0000000300)=""/4096, 0x1000}], 0x3, 0x80000000, 0x66, 0x18) openat(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r3, 0x0, 0x0, 0x87ffffc) (fail_nth: 27) 07:04:58 executing program 0: openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r0, 0x0, 0x0, 0x87ffffc) mmap$perf(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000008, 0x10, 0xffffffffffffffff, 0x4) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x12, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = syz_open_procfs(0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001240)={0x1, 0x80, 0x0, 0xa1, 0x0, 0x0, 0x0, 0x7, 0xa0400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x3, @perf_config_ext, 0x21, 0x1, 0x0, 0x0, 0x9, 0x0, 0x8000, 0x0, 0x80, 0x0, 0x5}, 0xffffffffffffffff, 0x4, r1, 0x0) r2 = gettid() process_vm_readv(r2, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/4078, 0xfee}, {&(0x7f0000000000)=""/123, 0x7b}, {&(0x7f0000000100)=""/57, 0x39}], 0x3, &(0x7f0000000240)=[{&(0x7f0000012940)=""/102400, 0xffffff76}], 0x4, 0x0) perf_event_open(0x0, r2, 0x1, r1, 0x8) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/consoles\x00', 0x0, 0x0) 07:04:58 executing program 6: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) preadv(r0, &(0x7f00000011c0)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x7, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x0, 0x0, 0x87ffffc) mmap$perf(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000008, 0x1010, r2, 0x4) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000100), 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r3 = syz_open_procfs(0x0, 0x0) perf_event_open(&(0x7f0000001240)={0x1, 0x80, 0x9, 0xa1, 0xf9, 0x3, 0x0, 0x7, 0xa0400, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x3, @perf_config_ext={0x58d}, 0x21, 0x1, 0x0, 0x6, 0x9, 0x0, 0x8000, 0x0, 0x80, 0x0, 0x5}, 0xffffffffffffffff, 0x4, r3, 0x0) r4 = gettid() process_vm_readv(r4, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/4078, 0xfee}, {&(0x7f0000000000)=""/123, 0x7b}, {&(0x7f0000000100)=""/57, 0x39}], 0x3, &(0x7f0000000240), 0x0, 0x0) perf_event_open(0x0, r4, 0x1, r3, 0x8) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/consoles\x00', 0x0, 0x0) 07:04:58 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f00000001c0)=0x8) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x14, 0x0, 0x0, 0x4}, 0x14}}, 0x0) 07:04:58 executing program 5: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) preadv(r0, &(0x7f00000011c0)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x7, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x0, 0x0, 0x87ffffc) (fail_nth: 27) mmap$perf(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000008, 0x1010, r2, 0x4) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000100), 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r3 = syz_open_procfs(0x0, 0x0) perf_event_open(&(0x7f0000001240)={0x1, 0x80, 0x9, 0xa1, 0xf9, 0x3, 0x0, 0x7, 0xa0400, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x3, @perf_config_ext={0x58d}, 0x21, 0x1, 0x0, 0x6, 0x9, 0x0, 0x8000, 0x0, 0x80, 0x0, 0x5}, 0xffffffffffffffff, 0x4, r3, 0x0) r4 = gettid() perf_event_open(0x0, r4, 0x1, r3, 0x8) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/consoles\x00', 0x0, 0x0) 07:04:58 executing program 7: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000001340)) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x204800, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x1) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002480)='fd/3\x00') r2 = dup(r1) fdatasync(r2) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x40}}, './file0\x00'}) preadv2(r3, &(0x7f0000001300)=[{&(0x7f0000000080)=""/193, 0xc1}, {&(0x7f0000000180)=""/250, 0xfa}, {&(0x7f0000000300)=""/4096, 0x1000}], 0x3, 0x80000000, 0x66, 0x18) r4 = openat(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000001380)=0x100000) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r5, 0xd, 0x0, 0x87ffffc) sendfile(r5, r4, 0x0, 0x80000000) 07:04:58 executing program 1: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) preadv(r0, &(0x7f00000011c0)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x7, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x0, 0x0, 0x87ffffc) mmap$perf(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000008, 0x1010, r2, 0x4) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000100), 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r3 = syz_open_procfs(0x0, 0x0) preadv(r3, &(0x7f0000000080)=[{&(0x7f0000000000)=""/40, 0x40}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000001240)={0x1, 0x80, 0x9, 0xa1, 0xf9, 0x3, 0x0, 0x7, 0xa0400, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x3, @perf_config_ext={0x58d}, 0x21, 0x1, 0x0, 0x6, 0x9, 0x0, 0x8000, 0x0, 0x80, 0x0, 0x5}, 0xffffffffffffffff, 0x4, r3, 0x0) r4 = gettid() process_vm_readv(r4, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/4078, 0xfee}, {0x0}, {&(0x7f0000000100)=""/57, 0x39}], 0x3, &(0x7f0000000240)=[{&(0x7f0000012940)=""/102400, 0x19000}], 0x1, 0x0) perf_event_open(0x0, r4, 0x1, r3, 0x8) [ 2603.199915] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12968 comm=syz-executor.4 [ 2603.210137] FAULT_INJECTION: forcing a failure. [ 2603.210137] name failslab, interval 1, probability 0, space 0, times 0 [ 2603.212633] CPU: 0 PID: 12971 Comm: syz-executor.3 Not tainted 5.18.0-rc1-next-20220406 #1 [ 2603.214442] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2603.216887] Call Trace: [ 2603.217445] [ 2603.217942] dump_stack_lvl+0x8b/0xb3 [ 2603.218789] should_fail.cold+0x5/0xa [ 2603.219622] ? create_object.isra.0+0x3a/0xa20 [ 2603.220627] should_failslab+0x5/0x10 [ 2603.221460] kmem_cache_alloc+0x5b/0x480 [ 2603.222385] create_object.isra.0+0x3a/0xa20 [ 2603.223345] ? kasan_unpoison+0x23/0x50 [ 2603.224221] kmem_cache_alloc+0x239/0x480 [ 2603.225138] anon_vma_fork+0xed/0x630 [ 2603.225973] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 2603.227063] ? __vm_enough_memory+0x184/0x360 [ 2603.228049] dup_mm+0x91b/0x1250 [ 2603.228816] ? replace_mm_exe_file+0x490/0x490 [ 2603.229836] ? __raw_spin_lock_init+0x36/0x110 [ 2603.230846] copy_process+0x698c/0x6db0 07:04:58 executing program 7: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000001340)) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x204800, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x1) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002480)='fd/3\x00') r2 = dup(r1) fdatasync(r2) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x40}}, './file0\x00'}) preadv2(r3, &(0x7f0000001300)=[{&(0x7f0000000080)=""/193, 0xc1}, {&(0x7f0000000180)=""/250, 0xfa}, {&(0x7f0000000300)=""/4096, 0x1000}], 0x3, 0x80000000, 0x66, 0x18) r4 = openat(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000001380)=0x100000) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r5, 0xe, 0x0, 0x87ffffc) sendfile(r5, r4, 0x0, 0x80000000) [ 2603.231757] ? __cleanup_sighand+0xb0/0xb0 [ 2603.232817] ? lock_release+0x3b2/0x750 [ 2603.233695] ? ksys_write+0x20c/0x250 [ 2603.234521] ? kernel_clone+0x2f8/0xa60 [ 2603.235397] kernel_clone+0xe7/0xa60 [ 2603.236241] ? find_held_lock+0x2c/0x110 [ 2603.237120] ? create_io_thread+0xf0/0xf0 [ 2603.238056] ? __mutex_unlock_slowpath+0x15c/0x5e0 [ 2603.239124] ? bit_wait_io_timeout+0x160/0x160 [ 2603.240123] ? lock_is_held_type+0xd7/0x130 [ 2603.241071] __do_sys_fork+0x8a/0xc0 [ 2603.241897] ? kernel_clone+0xa60/0xa60 [ 2603.242782] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 2603.244001] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2603.245126] ? lockdep_hardirqs_on+0x79/0x100 [ 2603.246121] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2603.247250] do_syscall_64+0x3b/0x90 [ 2603.248063] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2603.249188] RIP: 0033:0x7fc1c2a89b19 [ 2603.249999] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2603.253956] RSP: 002b:00007fc1bffff188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 2603.255593] RAX: ffffffffffffffda RBX: 00007fc1c2b9cf60 RCX: 00007fc1c2a89b19 [ 2603.257126] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2603.258674] RBP: 00007fc1bffff1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2603.260207] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2603.261748] R13: 00007fff0449096f R14: 00007fc1bffff300 R15: 0000000000022000 [ 2603.263312] 07:04:59 executing program 1: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) preadv(r0, &(0x7f00000011c0)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x7, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x0, 0x0, 0x87ffffc) mmap$perf(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000008, 0x1010, r2, 0x4) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000100), 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r3 = syz_open_procfs(0x0, 0x0) preadv(r3, &(0x7f0000000080)=[{&(0x7f0000000000)=""/40, 0x40}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000001240)={0x1, 0x80, 0x9, 0xa1, 0xf9, 0x3, 0x0, 0x7, 0xa0400, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x3, @perf_config_ext={0x58d}, 0x21, 0x1, 0x0, 0x6, 0x9, 0x0, 0x8000, 0x0, 0x80, 0x0, 0x5}, 0xffffffffffffffff, 0x4, r3, 0x0) r4 = gettid() process_vm_readv(r4, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/123, 0x7b}, {&(0x7f0000000100)=""/57, 0x39}], 0x2, &(0x7f0000000240)=[{&(0x7f0000012940)=""/102400, 0x19000}], 0x1, 0x0) perf_event_open(0x0, r4, 0x1, r3, 0x8) [ 2603.280736] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12978 comm=syz-executor.4 [ 2603.290364] FAULT_INJECTION: forcing a failure. 07:04:59 executing program 0: openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r0, 0x0, 0x0, 0x87ffffc) mmap$perf(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000008, 0x10, 0xffffffffffffffff, 0x4) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x12, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = syz_open_procfs(0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001240)={0x1, 0x80, 0x0, 0xa1, 0x0, 0x0, 0x0, 0x7, 0xa0400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x3, @perf_config_ext, 0x21, 0x1, 0x0, 0x0, 0x9, 0x0, 0x8000, 0x0, 0x80, 0x0, 0x5}, 0xffffffffffffffff, 0x4, r1, 0x0) r2 = gettid() process_vm_readv(r2, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/4078, 0xfee}, {&(0x7f0000000000)=""/123, 0x7b}, {&(0x7f0000000100)=""/57, 0x39}], 0x3, &(0x7f0000000240)=[{&(0x7f0000012940)=""/102400, 0xffffff76}], 0x5, 0x0) perf_event_open(0x0, r2, 0x1, r1, 0x8) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/consoles\x00', 0x0, 0x0) [ 2603.290364] name failslab, interval 1, probability 0, space 0, times 0 [ 2603.293522] CPU: 0 PID: 12958 Comm: syz-executor.5 Not tainted 5.18.0-rc1-next-20220406 #1 [ 2603.295338] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2603.297784] Call Trace: [ 2603.298333] [ 2603.298814] dump_stack_lvl+0x8b/0xb3 [ 2603.299652] should_fail.cold+0x5/0xa [ 2603.300477] ? ext4_find_extent+0xa39/0xd20 [ 2603.301413] should_failslab+0x5/0x10 [ 2603.302246] __kmalloc+0x72/0x440 [ 2603.303019] ext4_find_extent+0xa39/0xd20 [ 2603.303931] ext4_ext_map_blocks+0x1c8/0x5cd0 [ 2603.304917] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 2603.306075] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 2603.307228] ? ext4_ext_release+0x10/0x10 [ 2603.308129] ? lock_acquire+0x1b2/0x530 [ 2603.308992] ? lock_release+0x750/0x750 [ 2603.309867] ? lock_release+0x3b2/0x750 [ 2603.310742] ? lock_is_held_type+0xd7/0x130 [ 2603.311700] ? down_write+0xde/0x150 [ 2603.312509] ? down_write_killable+0x170/0x170 [ 2603.313521] ext4_map_blocks+0x652/0x1970 [ 2603.314453] ? lock_is_held_type+0xd7/0x130 [ 2603.315399] ? ext4_issue_zeroout+0x1c0/0x1c0 [ 2603.316383] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 2603.317579] ? jbd2__journal_start+0xf3/0x8d0 [ 2603.318562] ? __ext4_journal_start_sb+0x392/0x470 [ 2603.319612] ? __ext4_journal_start_sb+0x1d5/0x470 [ 2603.320677] ext4_alloc_file_blocks.isra.0+0x2c1/0xb20 [ 2603.321841] ? ext4_ext_correct_indexes+0x440/0x440 [ 2603.322929] ? down_write_killable+0x170/0x170 [ 2603.323935] ext4_fallocate+0x1a2b/0x3c90 [ 2603.324843] ? lock_acquire+0x1b2/0x530 [ 2603.325714] ? lock_release+0x750/0x750 [ 2603.326587] ? ext4_ext_truncate+0x3e0/0x3e0 [ 2603.327541] ? lock_is_held_type+0xd7/0x130 [ 2603.328487] ? ext4_ext_truncate+0x3e0/0x3e0 [ 2603.329438] vfs_fallocate+0x489/0xe00 [ 2603.330318] __x64_sys_fallocate+0xcf/0x140 [ 2603.331262] do_syscall_64+0x3b/0x90 [ 2603.332073] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2603.333190] RIP: 0033:0x7f35817a9b19 [ 2603.333999] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2603.337951] RSP: 002b:00007f357ed1f188 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 2603.339584] RAX: ffffffffffffffda RBX: 00007f35818bcf60 RCX: 00007f35817a9b19 [ 2603.341126] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 2603.342676] RBP: 00007f357ed1f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2603.344209] R10: 00000000087ffffc R11: 0000000000000246 R12: 0000000000000002 [ 2603.345746] R13: 00007ffdd683fcbf R14: 00007f357ed1f300 R15: 0000000000022000 [ 2603.347311] [ 2603.350793] FAULT_INJECTION: forcing a failure. [ 2603.350793] name failslab, interval 1, probability 0, space 0, times 0 07:04:59 executing program 7: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000001340)) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x204800, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x1) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002480)='fd/3\x00') r2 = dup(r1) fdatasync(r2) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x40}}, './file0\x00'}) preadv2(r3, &(0x7f0000001300)=[{&(0x7f0000000080)=""/193, 0xc1}, {&(0x7f0000000180)=""/250, 0xfa}, {&(0x7f0000000300)=""/4096, 0x1000}], 0x3, 0x80000000, 0x66, 0x18) r4 = openat(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000001380)=0x100000) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r5, 0xf, 0x0, 0x87ffffc) sendfile(r5, r4, 0x0, 0x80000000) [ 2603.353421] CPU: 0 PID: 12970 Comm: syz-executor.2 Not tainted 5.18.0-rc1-next-20220406 #1 [ 2603.355345] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2603.357826] Call Trace: [ 2603.358376] [ 2603.358862] dump_stack_lvl+0x8b/0xb3 [ 2603.359694] should_fail.cold+0x5/0xa [ 2603.360531] ? jbd2__journal_start+0x18c/0x8d0 [ 2603.361518] should_failslab+0x5/0x10 [ 2603.362357] kmem_cache_alloc+0x5b/0x480 [ 2603.363253] jbd2__journal_start+0x18c/0x8d0 [ 2603.364218] __ext4_journal_start_sb+0x392/0x470 [ 2603.365244] ? __ext4_journal_stop+0x107/0x1f0 [ 2603.366247] ext4_alloc_file_blocks.isra.0+0x286/0xb20 [ 2603.367401] ? ext4_ext_correct_indexes+0x440/0x440 [ 2603.368489] ? down_write_killable+0x170/0x170 [ 2603.369503] ext4_fallocate+0x1a2b/0x3c90 [ 2603.370433] ? lock_acquire+0x1b2/0x530 [ 2603.371307] ? lock_release+0x750/0x750 [ 2603.372185] ? ext4_ext_truncate+0x3e0/0x3e0 [ 2603.373144] ? lock_is_held_type+0xd7/0x130 [ 2603.374112] ? ext4_ext_truncate+0x3e0/0x3e0 [ 2603.375069] vfs_fallocate+0x489/0xe00 [ 2603.375927] __x64_sys_fallocate+0xcf/0x140 [ 2603.376870] do_syscall_64+0x3b/0x90 [ 2603.377708] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2603.378834] RIP: 0033:0x7fd845bccb19 [ 2603.379645] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2603.383608] RSP: 002b:00007fd843142188 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 2603.385239] RAX: ffffffffffffffda RBX: 00007fd845cdff60 RCX: 00007fd845bccb19 [ 2603.386783] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 2603.388310] RBP: 00007fd8431421d0 R08: 0000000000000000 R09: 0000000000000000 [ 2603.389843] R10: 00000000087ffffc R11: 0000000000000246 R12: 0000000000000002 [ 2603.391363] R13: 00007ffde12fa01f R14: 00007fd843142300 R15: 0000000000022000 [ 2603.392918] 07:04:59 executing program 1: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) preadv(r0, &(0x7f00000011c0)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x7, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x0, 0x0, 0x87ffffc) mmap$perf(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000008, 0x1010, r2, 0x4) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000100), 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r3 = syz_open_procfs(0x0, 0x0) preadv(r3, &(0x7f0000000080)=[{&(0x7f0000000000)=""/40, 0x40}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000001240)={0x1, 0x80, 0x9, 0xa1, 0xf9, 0x3, 0x0, 0x7, 0xa0400, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x3, @perf_config_ext={0x58d}, 0x21, 0x1, 0x0, 0x6, 0x9, 0x0, 0x8000, 0x0, 0x80, 0x0, 0x5}, 0xffffffffffffffff, 0x4, r3, 0x0) r4 = gettid() process_vm_readv(r4, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/123, 0x7b}, {&(0x7f0000000100)=""/57, 0x39}], 0x2, &(0x7f0000000240)=[{&(0x7f0000012940)=""/102400, 0x19000}], 0x1, 0x0) perf_event_open(0x0, r4, 0x1, r3, 0x8) 07:04:59 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f00000001c0)=0x8) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x14, 0x0, 0x0, 0x5}, 0x14}}, 0x0) 07:04:59 executing program 6: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) preadv(r0, &(0x7f00000011c0)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x7, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x0, 0x0, 0x87ffffc) mmap$perf(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000008, 0x1010, r2, 0x4) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000100), 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r3 = syz_open_procfs(0x0, 0x0) perf_event_open(&(0x7f0000001240)={0x1, 0x80, 0x9, 0xa1, 0xf9, 0x3, 0x0, 0x7, 0xa0400, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x3, @perf_config_ext={0x58d}, 0x21, 0x1, 0x0, 0x6, 0x9, 0x0, 0x8000, 0x0, 0x80, 0x0, 0x5}, 0xffffffffffffffff, 0x4, r3, 0x0) r4 = gettid() process_vm_readv(r4, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/4078, 0xfee}, {&(0x7f0000000000)=""/123, 0x7b}, {&(0x7f0000000100)=""/57, 0x39}], 0x3, &(0x7f0000000240), 0x0, 0x0) perf_event_open(0x0, r4, 0x1, r3, 0x8) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/consoles\x00', 0x0, 0x0) 07:04:59 executing program 0: openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r0, 0x0, 0x0, 0x87ffffc) mmap$perf(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000008, 0x10, 0xffffffffffffffff, 0x4) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x12, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = syz_open_procfs(0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001240)={0x1, 0x80, 0x0, 0xa1, 0x0, 0x0, 0x0, 0x7, 0xa0400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x3, @perf_config_ext, 0x21, 0x1, 0x0, 0x0, 0x9, 0x0, 0x8000, 0x0, 0x80, 0x0, 0x5}, 0xffffffffffffffff, 0x4, r1, 0x0) r2 = gettid() process_vm_readv(r2, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/4078, 0xfee}, {&(0x7f0000000000)=""/123, 0x7b}, {&(0x7f0000000100)=""/57, 0x39}], 0x3, &(0x7f0000000240)=[{&(0x7f0000012940)=""/102400, 0xffffff76}], 0x8, 0x0) perf_event_open(0x0, r2, 0x1, r1, 0x8) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/consoles\x00', 0x0, 0x0) [ 2603.512803] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12995 comm=syz-executor.4 [ 2603.533897] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12999 comm=syz-executor.4 07:05:14 executing program 3: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000040)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x300000c, 0x13, r0, 0x8000000) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xa) fork() (fail_nth: 33) [ 2618.284082] FAULT_INJECTION: forcing a failure. [ 2618.284082] name failslab, interval 1, probability 0, space 0, times 0 [ 2618.286690] CPU: 1 PID: 13009 Comm: syz-executor.3 Not tainted 5.18.0-rc1-next-20220406 #1 [ 2618.288669] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2618.291326] Call Trace: [ 2618.291928] [ 2618.292450] dump_stack_lvl+0x8b/0xb3 [ 2618.293355] should_fail.cold+0x5/0xa [ 2618.294276] ? anon_vma_fork+0x1dd/0x630 [ 2618.295237] should_failslab+0x5/0x10 07:05:14 executing program 6: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) preadv(r0, &(0x7f00000011c0)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x7, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x0, 0x0, 0x87ffffc) mmap$perf(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000008, 0x1010, r2, 0x4) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000100), 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r3 = syz_open_procfs(0x0, 0x0) perf_event_open(&(0x7f0000001240)={0x1, 0x80, 0x9, 0xa1, 0xf9, 0x3, 0x0, 0x7, 0xa0400, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x3, @perf_config_ext={0x58d}, 0x21, 0x1, 0x0, 0x6, 0x9, 0x0, 0x8000, 0x0, 0x80, 0x0, 0x5}, 0xffffffffffffffff, 0x4, r3, 0x0) r4 = gettid() process_vm_readv(r4, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/4078, 0xfee}, {&(0x7f0000000000)=""/123, 0x7b}, {&(0x7f0000000100)=""/57, 0x39}], 0x3, &(0x7f0000000240), 0x0, 0x0) perf_event_open(0x0, r4, 0x1, r3, 0x8) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/consoles\x00', 0x0, 0x0) 07:05:14 executing program 1: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) preadv(r0, &(0x7f00000011c0)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x7, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x0, 0x0, 0x87ffffc) mmap$perf(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000008, 0x1010, r2, 0x4) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000100), 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r3 = syz_open_procfs(0x0, 0x0) preadv(r3, &(0x7f0000000080)=[{&(0x7f0000000000)=""/40, 0x40}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000001240)={0x1, 0x80, 0x9, 0xa1, 0xf9, 0x3, 0x0, 0x7, 0xa0400, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x3, @perf_config_ext={0x58d}, 0x21, 0x1, 0x0, 0x6, 0x9, 0x0, 0x8000, 0x0, 0x80, 0x0, 0x5}, 0xffffffffffffffff, 0x4, r3, 0x0) r4 = gettid() process_vm_readv(r4, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/123, 0x7b}, {&(0x7f0000000100)=""/57, 0x39}], 0x2, &(0x7f0000000240)=[{&(0x7f0000012940)=""/102400, 0x19000}], 0x1, 0x0) perf_event_open(0x0, r4, 0x1, r3, 0x8) [ 2618.296127] kmem_cache_alloc+0x5b/0x480 [ 2618.297370] anon_vma_fork+0x1dd/0x630 07:05:14 executing program 7: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000001340)) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x204800, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x1) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002480)='fd/3\x00') r2 = dup(r1) fdatasync(r2) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x40}}, './file0\x00'}) preadv2(r3, &(0x7f0000001300)=[{&(0x7f0000000080)=""/193, 0xc1}, {&(0x7f0000000180)=""/250, 0xfa}, {&(0x7f0000000300)=""/4096, 0x1000}], 0x3, 0x80000000, 0x66, 0x18) r4 = openat(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000001380)=0x100000) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r5, 0x10, 0x0, 0x87ffffc) sendfile(r5, r4, 0x0, 0x80000000) 07:05:14 executing program 5: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) preadv(r0, &(0x7f00000011c0)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x7, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x0, 0x0, 0x87ffffc) (fail_nth: 28) mmap$perf(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000008, 0x1010, r2, 0x4) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000100), 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r3 = syz_open_procfs(0x0, 0x0) perf_event_open(&(0x7f0000001240)={0x1, 0x80, 0x9, 0xa1, 0xf9, 0x3, 0x0, 0x7, 0xa0400, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x3, @perf_config_ext={0x58d}, 0x21, 0x1, 0x0, 0x6, 0x9, 0x0, 0x8000, 0x0, 0x80, 0x0, 0x5}, 0xffffffffffffffff, 0x4, r3, 0x0) r4 = gettid() perf_event_open(0x0, r4, 0x1, r3, 0x8) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/consoles\x00', 0x0, 0x0) [ 2618.298335] dup_mm+0x91b/0x1250 [ 2618.299287] ? replace_mm_exe_file+0x490/0x490 [ 2618.300372] ? __raw_spin_lock_init+0x36/0x110 [ 2618.301454] copy_process+0x698c/0x6db0 [ 2618.302445] ? __cleanup_sighand+0xb0/0xb0 [ 2618.303461] ? lock_release+0x3b2/0x750 [ 2618.304383] ? ksys_write+0x20c/0x250 [ 2618.305265] ? kernel_clone+0x2f8/0xa60 07:05:14 executing program 2: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x204800, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x1) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002480)='fd/3\x00') fdatasync(0xffffffffffffffff) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x40}}, './file0\x00'}) preadv2(r2, &(0x7f0000001300)=[{&(0x7f0000000080)=""/193, 0xc1}, {&(0x7f0000000180)=""/250, 0xfa}, {&(0x7f0000000300)=""/4096, 0x1000}], 0x3, 0x80000000, 0x66, 0x18) openat(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r3, 0x0, 0x0, 0x87ffffc) (fail_nth: 28) [ 2618.306208] kernel_clone+0xe7/0xa60 07:05:14 executing program 0: openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r0, 0x0, 0x0, 0x87ffffc) mmap$perf(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000008, 0x10, 0xffffffffffffffff, 0x4) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x12, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = syz_open_procfs(0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001240)={0x1, 0x80, 0x0, 0xa1, 0x0, 0x0, 0x0, 0x7, 0xa0400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x3, @perf_config_ext, 0x21, 0x1, 0x0, 0x0, 0x9, 0x0, 0x8000, 0x0, 0x80, 0x0, 0x5}, 0xffffffffffffffff, 0x4, r1, 0x0) r2 = gettid() process_vm_readv(r2, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/4078, 0xfee}, {&(0x7f0000000000)=""/123, 0x7b}, {&(0x7f0000000100)=""/57, 0x39}], 0x3, &(0x7f0000000240)=[{&(0x7f0000012940)=""/102400, 0xffffff76}], 0x1f9, 0x0) perf_event_open(0x0, r2, 0x1, r1, 0x8) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/consoles\x00', 0x0, 0x0) 07:05:14 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f00000001c0)=0x8) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x14, 0x0, 0x0, 0x6}, 0x14}}, 0x0) [ 2618.307169] ? find_held_lock+0x2c/0x110 [ 2618.308234] ? create_io_thread+0xf0/0xf0 [ 2618.309208] ? __mutex_unlock_slowpath+0x15c/0x5e0 [ 2618.310371] ? bit_wait_io_timeout+0x160/0x160 [ 2618.311426] ? lock_is_held_type+0xd7/0x130 [ 2618.312437] __do_sys_fork+0x8a/0xc0 [ 2618.313312] ? kernel_clone+0xa60/0xa60 [ 2618.314251] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 2618.315546] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2618.316741] ? lockdep_hardirqs_on+0x79/0x100 [ 2618.317776] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2618.318980] do_syscall_64+0x3b/0x90 [ 2618.319829] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2618.321012] RIP: 0033:0x7fc1c2a89b19 [ 2618.321849] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2618.326045] RSP: 002b:00007fc1bffff188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 2618.327751] RAX: ffffffffffffffda RBX: 00007fc1c2b9cf60 RCX: 00007fc1c2a89b19 [ 2618.329368] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2618.330981] RBP: 00007fc1bffff1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2618.332569] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2618.334183] R13: 00007fff0449096f R14: 00007fc1bffff300 R15: 0000000000022000 [ 2618.335802] [ 2618.405955] FAULT_INJECTION: forcing a failure. [ 2618.405955] name failslab, interval 1, probability 0, space 0, times 0 [ 2618.407420] CPU: 0 PID: 13015 Comm: syz-executor.5 Not tainted 5.18.0-rc1-next-20220406 #1 [ 2618.408392] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2618.409627] Call Trace: [ 2618.409930] [ 2618.410178] dump_stack_lvl+0x8b/0xb3 [ 2618.410617] should_fail.cold+0x5/0xa [ 2618.411041] ? create_object.isra.0+0x3a/0xa20 [ 2618.411567] should_failslab+0x5/0x10 [ 2618.411994] kmem_cache_alloc+0x5b/0x480 [ 2618.412457] create_object.isra.0+0x3a/0xa20 [ 2618.412944] ? kasan_unpoison+0x23/0x50 [ 2618.413383] __kmalloc+0x25b/0x440 [ 2618.413792] ext4_find_extent+0xa39/0xd20 [ 2618.414272] ext4_ext_map_blocks+0x1c8/0x5cd0 [ 2618.414775] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 2618.415356] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 2618.415924] ? ext4_ext_release+0x10/0x10 [ 2618.416379] ? lock_acquire+0x1b2/0x530 [ 2618.416810] ? lock_release+0x750/0x750 [ 2618.417240] ? lock_release+0x3b2/0x750 [ 2618.417669] ? lock_is_held_type+0xd7/0x130 [ 2618.418186] ? down_write+0xde/0x150 [ 2618.418593] ? down_write_killable+0x170/0x170 [ 2618.419113] ext4_map_blocks+0x652/0x1970 [ 2618.419574] ? lock_is_held_type+0xd7/0x130 [ 2618.420059] ? ext4_issue_zeroout+0x1c0/0x1c0 [ 2618.420564] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 2618.421167] ? jbd2__journal_start+0xf3/0x8d0 [ 2618.421673] ? __ext4_journal_start_sb+0x392/0x470 [ 2618.422216] ? __ext4_journal_start_sb+0x1d5/0x470 [ 2618.422743] ext4_alloc_file_blocks.isra.0+0x2c1/0xb20 [ 2618.423318] ? ext4_ext_correct_indexes+0x440/0x440 [ 2618.423862] ? down_write_killable+0x170/0x170 [ 2618.424369] ext4_fallocate+0x1a2b/0x3c90 [ 2618.424828] ? lock_acquire+0x1b2/0x530 [ 2618.425255] ? lock_release+0x750/0x750 [ 2618.425696] ? ext4_ext_truncate+0x3e0/0x3e0 [ 2618.426191] ? lock_is_held_type+0xd7/0x130 [ 2618.426676] ? ext4_ext_truncate+0x3e0/0x3e0 [ 2618.427161] vfs_fallocate+0x489/0xe00 [ 2618.427589] __x64_sys_fallocate+0xcf/0x140 [ 2618.428073] do_syscall_64+0x3b/0x90 [ 2618.428481] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2618.429054] RIP: 0033:0x7f35817a9b19 [ 2618.429466] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2618.429537] FAULT_INJECTION: forcing a failure. [ 2618.429537] name failslab, interval 1, probability 0, space 0, times 0 [ 2618.431461] RSP: 002b:00007f357ed1f188 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 2618.431478] RAX: ffffffffffffffda RBX: 00007f35818bcf60 RCX: 00007f35817a9b19 [ 2618.431489] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 2618.431497] RBP: 00007f357ed1f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2618.431506] R10: 00000000087ffffc R11: 0000000000000246 R12: 0000000000000002 [ 2618.431515] R13: 00007ffdd683fcbf R14: 00007f357ed1f300 R15: 0000000000022000 [ 2618.431541] [ 2618.446882] CPU: 1 PID: 13022 Comm: syz-executor.2 Not tainted 5.18.0-rc1-next-20220406 #1 [ 2618.448601] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2618.450935] Call Trace: [ 2618.451466] [ 2618.451927] dump_stack_lvl+0x8b/0xb3 [ 2618.452750] should_fail.cold+0x5/0xa [ 2618.453549] ? create_object.isra.0+0x3a/0xa20 [ 2618.454544] should_failslab+0x5/0x10 [ 2618.455343] kmem_cache_alloc+0x5b/0x480 [ 2618.456218] create_object.isra.0+0x3a/0xa20 [ 2618.457137] ? kasan_unpoison+0x23/0x50 [ 2618.457994] __kmalloc+0x25b/0x440 [ 2618.458748] ext4_find_extent+0xa39/0xd20 [ 2618.459627] ext4_ext_map_blocks+0x1c8/0x5cd0 [ 2618.460573] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 2618.461673] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 2618.462775] ? ext4_ext_release+0x10/0x10 [ 2618.463644] ? lock_acquire+0x1b2/0x530 [ 2618.464472] ? lock_release+0x750/0x750 [ 2618.465305] ? lock_release+0x3b2/0x750 [ 2618.466160] ? lock_is_held_type+0xd7/0x130 [ 2618.467093] ? down_write+0xde/0x150 [ 2618.467865] ? down_write_killable+0x170/0x170 [ 2618.468835] ext4_map_blocks+0x652/0x1970 [ 2618.469708] ? lock_is_held_type+0xd7/0x130 [ 2618.470610] ? ext4_issue_zeroout+0x1c0/0x1c0 [ 2618.471541] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 2618.472667] ? jbd2__journal_start+0xf3/0x8d0 [ 2618.473607] ? __ext4_journal_start_sb+0x392/0x470 [ 2618.474621] ? __ext4_journal_start_sb+0x1d5/0x470 [ 2618.475641] ext4_alloc_file_blocks.isra.0+0x2c1/0xb20 [ 2618.476730] ? ext4_ext_correct_indexes+0x440/0x440 [ 2618.477766] ? down_write_killable+0x170/0x170 [ 2618.478724] ext4_fallocate+0x1a2b/0x3c90 [ 2618.479579] ? lock_acquire+0x1b2/0x530 [ 2618.480409] ? lock_release+0x750/0x750 [ 2618.481236] ? ext4_ext_truncate+0x3e0/0x3e0 [ 2618.482145] ? lock_is_held_type+0xd7/0x130 [ 2618.483040] ? ext4_ext_truncate+0x3e0/0x3e0 [ 2618.483942] vfs_fallocate+0x489/0xe00 [ 2618.484748] __x64_sys_fallocate+0xcf/0x140 [ 2618.485644] do_syscall_64+0x3b/0x90 [ 2618.486429] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2618.487489] RIP: 0033:0x7fd845bccb19 [ 2618.488239] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2618.491973] RSP: 002b:00007fd843142188 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 2618.493505] RAX: ffffffffffffffda RBX: 00007fd845cdff60 RCX: 00007fd845bccb19 [ 2618.494972] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 2618.496419] RBP: 00007fd8431421d0 R08: 0000000000000000 R09: 0000000000000000 [ 2618.497853] R10: 00000000087ffffc R11: 0000000000000246 R12: 0000000000000002 [ 2618.499289] R13: 00007ffde12fa01f R14: 00007fd843142300 R15: 0000000000022000 [ 2618.500759] [ 2618.503469] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13021 comm=syz-executor.4 [ 2618.510094] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13026 comm=syz-executor.4 07:05:27 executing program 3: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000040)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x300000c, 0x13, r0, 0x8000000) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xa) fork() (fail_nth: 34) 07:05:27 executing program 7: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000001340)) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x204800, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x1) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002480)='fd/3\x00') r2 = dup(r1) fdatasync(r2) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x40}}, './file0\x00'}) preadv2(r3, &(0x7f0000001300)=[{&(0x7f0000000080)=""/193, 0xc1}, {&(0x7f0000000180)=""/250, 0xfa}, {&(0x7f0000000300)=""/4096, 0x1000}], 0x3, 0x80000000, 0x66, 0x18) r4 = openat(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000001380)=0x100000) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r5, 0x12, 0x0, 0x87ffffc) sendfile(r5, r4, 0x0, 0x80000000) 07:05:27 executing program 1: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) preadv(r0, &(0x7f00000011c0)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x7, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x0, 0x0, 0x87ffffc) mmap$perf(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000008, 0x1010, r2, 0x4) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000100), 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r3 = syz_open_procfs(0x0, 0x0) preadv(r3, &(0x7f0000000080)=[{&(0x7f0000000000)=""/40, 0x40}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000001240)={0x1, 0x80, 0x9, 0xa1, 0xf9, 0x3, 0x0, 0x7, 0xa0400, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x3, @perf_config_ext={0x58d}, 0x21, 0x1, 0x0, 0x6, 0x9, 0x0, 0x8000, 0x0, 0x80, 0x0, 0x5}, 0xffffffffffffffff, 0x4, r3, 0x0) r4 = gettid() process_vm_readv(r4, &(0x7f00000000c0)=[{0x0}, {&(0x7f0000000000)=""/123, 0x7b}, {&(0x7f0000000100)=""/57, 0x39}], 0x3, &(0x7f0000000240)=[{&(0x7f0000012940)=""/102400, 0x19000}], 0x1, 0x0) perf_event_open(0x0, r4, 0x1, r3, 0x8) 07:05:27 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f00000001c0)=0x8) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x14, 0x0, 0x0, 0x7}, 0x14}}, 0x0) 07:05:27 executing program 6: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) preadv(r0, &(0x7f00000011c0)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x7, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x0, 0x0, 0x87ffffc) mmap$perf(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000008, 0x1010, r2, 0x4) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000100), 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r3 = syz_open_procfs(0x0, 0x0) perf_event_open(&(0x7f0000001240)={0x1, 0x80, 0x9, 0xa1, 0xf9, 0x3, 0x0, 0x7, 0xa0400, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x3, @perf_config_ext={0x58d}, 0x21, 0x1, 0x0, 0x6, 0x9, 0x0, 0x8000, 0x0, 0x80, 0x0, 0x5}, 0xffffffffffffffff, 0x4, r3, 0x0) r4 = gettid() process_vm_readv(r4, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/4078, 0xfee}, {&(0x7f0000000000)=""/123, 0x7b}, {&(0x7f0000000100)=""/57, 0x39}], 0x3, &(0x7f0000000240)=[{0x0}], 0x1, 0x0) perf_event_open(0x0, r4, 0x1, r3, 0x8) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/consoles\x00', 0x0, 0x0) 07:05:27 executing program 0: openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r0, 0x0, 0x0, 0x87ffffc) mmap$perf(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000008, 0x10, 0xffffffffffffffff, 0x4) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x12, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = syz_open_procfs(0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001240)={0x1, 0x80, 0x0, 0xa1, 0x0, 0x0, 0x0, 0x7, 0xa0400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x3, @perf_config_ext, 0x21, 0x1, 0x0, 0x0, 0x9, 0x0, 0x8000, 0x0, 0x80, 0x0, 0x5}, 0xffffffffffffffff, 0x4, r1, 0x0) r2 = gettid() process_vm_readv(r2, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/4078, 0xfee}, {&(0x7f0000000000)=""/123, 0x7b}, {&(0x7f0000000100)=""/57, 0x39}], 0x3, &(0x7f0000000240)=[{&(0x7f0000012940)=""/102400, 0xffffff76}], 0x1fa, 0x0) perf_event_open(0x0, r2, 0x1, r1, 0x8) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/consoles\x00', 0x0, 0x0) 07:05:27 executing program 5: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) preadv(r0, &(0x7f00000011c0)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x7, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x0, 0x0, 0x87ffffc) (fail_nth: 29) mmap$perf(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000008, 0x1010, r2, 0x4) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000100), 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r3 = syz_open_procfs(0x0, 0x0) perf_event_open(&(0x7f0000001240)={0x1, 0x80, 0x9, 0xa1, 0xf9, 0x3, 0x0, 0x7, 0xa0400, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x3, @perf_config_ext={0x58d}, 0x21, 0x1, 0x0, 0x6, 0x9, 0x0, 0x8000, 0x0, 0x80, 0x0, 0x5}, 0xffffffffffffffff, 0x4, r3, 0x0) r4 = gettid() perf_event_open(0x0, r4, 0x1, r3, 0x8) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/consoles\x00', 0x0, 0x0) 07:05:27 executing program 2: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x204800, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x1) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002480)='fd/3\x00') fdatasync(0xffffffffffffffff) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x40}}, './file0\x00'}) preadv2(r2, &(0x7f0000001300)=[{&(0x7f0000000080)=""/193, 0xc1}, {&(0x7f0000000180)=""/250, 0xfa}, {&(0x7f0000000300)=""/4096, 0x1000}], 0x3, 0x80000000, 0x66, 0x18) openat(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r3, 0x0, 0x0, 0x87ffffc) (fail_nth: 29) [ 2631.353275] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13042 comm=syz-executor.4 [ 2631.367719] FAULT_INJECTION: forcing a failure. [ 2631.367719] name failslab, interval 1, probability 0, space 0, times 0 [ 2631.369075] CPU: 1 PID: 13045 Comm: syz-executor.5 Not tainted 5.18.0-rc1-next-20220406 #1 [ 2631.369930] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2631.371101] Call Trace: [ 2631.371374] [ 2631.371619] dump_stack_lvl+0x8b/0xb3 [ 2631.372025] should_fail.cold+0x5/0xa [ 2631.372426] ? ext4_mb_new_blocks+0x64b/0x4b60 [ 2631.372903] should_failslab+0x5/0x10 [ 2631.373306] kmem_cache_alloc+0x5b/0x480 [ 2631.373736] ext4_mb_new_blocks+0x64b/0x4b60 [ 2631.374216] ? lock_is_held_type+0xd7/0x130 [ 2631.374683] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2631.375257] ? ext4_cache_extents+0x148/0x2d0 [ 2631.375749] ? ext4_discard_preallocations+0xe60/0xe60 [ 2631.376289] ? __sanitizer_cov_trace_const_cmp2+0x22/0x80 [ 2631.376861] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2631.377450] ? ext4_ext_search_right+0x2e3/0xbd0 [ 2631.377981] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2631.378618] ext4_ext_map_blocks+0x1fb0/0x5cd0 [ 2631.379133] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 2631.379728] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 2631.380316] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13049 comm=syz-executor.4 [ 2631.380327] ? ext4_ext_release+0x10/0x10 [ 2631.380353] ? lock_release+0x750/0x750 [ 2631.383636] ? lock_release+0x3b2/0x750 [ 2631.384094] ? lock_is_held_type+0xd7/0x130 [ 2631.384587] ? down_write_killable+0x170/0x170 [ 2631.385118] ext4_map_blocks+0x652/0x1970 [ 2631.385593] ? lock_is_held_type+0xd7/0x130 [ 2631.386091] ? ext4_issue_zeroout+0x1c0/0x1c0 [ 2631.386595] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 2631.387208] ? jbd2__journal_start+0xf3/0x8d0 [ 2631.387714] ? __ext4_journal_start_sb+0x392/0x470 [ 2631.388256] ? __ext4_journal_start_sb+0x1d5/0x470 [ 2631.388806] ext4_alloc_file_blocks.isra.0+0x2c1/0xb20 [ 2631.389395] ? ext4_ext_correct_indexes+0x440/0x440 [ 2631.389950] ? down_write_killable+0x170/0x170 [ 2631.390494] ext4_fallocate+0x1a2b/0x3c90 [ 2631.390956] ? lock_acquire+0x1b2/0x530 [ 2631.391406] ? lock_release+0x750/0x750 [ 2631.391861] ? ext4_ext_truncate+0x3e0/0x3e0 [ 2631.392357] ? lock_is_held_type+0xd7/0x130 [ 2631.392834] ? ext4_ext_truncate+0x3e0/0x3e0 [ 2631.393320] vfs_fallocate+0x489/0xe00 [ 2631.393762] __x64_sys_fallocate+0xcf/0x140 [ 2631.394253] do_syscall_64+0x3b/0x90 [ 2631.394666] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2631.395238] RIP: 0033:0x7f35817a9b19 [ 2631.395646] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2631.396229] FAULT_INJECTION: forcing a failure. [ 2631.396229] name failslab, interval 1, probability 0, space 0, times 0 [ 2631.397677] RSP: 002b:00007f357ed1f188 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 2631.397694] RAX: ffffffffffffffda RBX: 00007f35818bcf60 RCX: 00007f35817a9b19 [ 2631.397706] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 2631.402328] RBP: 00007f357ed1f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2631.403091] R10: 00000000087ffffc R11: 0000000000000246 R12: 0000000000000002 [ 2631.403865] R13: 00007ffdd683fcbf R14: 00007f357ed1f300 R15: 0000000000022000 [ 2631.404652] [ 2631.404910] CPU: 0 PID: 13048 Comm: syz-executor.3 Not tainted 5.18.0-rc1-next-20220406 #1 [ 2631.406631] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2631.408921] Call Trace: [ 2631.409442] [ 2631.409901] dump_stack_lvl+0x8b/0xb3 [ 2631.410704] should_fail.cold+0x5/0xa [ 2631.411484] ? create_object.isra.0+0x3a/0xa20 [ 2631.412427] should_failslab+0x5/0x10 [ 2631.413217] kmem_cache_alloc+0x5b/0x480 [ 2631.414084] create_object.isra.0+0x3a/0xa20 [ 2631.415002] ? kasan_unpoison+0x23/0x50 [ 2631.415829] kmem_cache_alloc+0x239/0x480 [ 2631.416705] anon_vma_fork+0x1dd/0x630 [ 2631.417502] dup_mm+0x91b/0x1250 [ 2631.418228] ? replace_mm_exe_file+0x490/0x490 [ 2631.419165] ? __raw_spin_lock_init+0x36/0x110 [ 2631.420108] copy_process+0x698c/0x6db0 [ 2631.420957] ? __cleanup_sighand+0xb0/0xb0 [ 2631.421837] ? lock_release+0x3b2/0x750 [ 2631.422659] ? ksys_write+0x20c/0x250 07:05:27 executing program 7: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000001340)) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x204800, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x1) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002480)='fd/3\x00') r2 = dup(r1) fdatasync(r2) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x40}}, './file0\x00'}) preadv2(r3, &(0x7f0000001300)=[{&(0x7f0000000080)=""/193, 0xc1}, {&(0x7f0000000180)=""/250, 0xfa}, {&(0x7f0000000300)=""/4096, 0x1000}], 0x3, 0x80000000, 0x66, 0x18) r4 = openat(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000001380)=0x100000) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r5, 0x18, 0x0, 0x87ffffc) sendfile(r5, r4, 0x0, 0x80000000) [ 2631.423428] ? kernel_clone+0x2f8/0xa60 [ 2631.424388] kernel_clone+0xe7/0xa60 [ 2631.425164] ? find_held_lock+0x2c/0x110 [ 2631.426002] ? create_io_thread+0xf0/0xf0 [ 2631.426880] ? __mutex_unlock_slowpath+0x15c/0x5e0 [ 2631.427926] ? bit_wait_io_timeout+0x160/0x160 [ 2631.428876] ? lock_is_held_type+0xd7/0x130 [ 2631.429783] __do_sys_fork+0x8a/0xc0 [ 2631.430579] ? kernel_clone+0xa60/0xa60 [ 2631.431420] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 2631.432568] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2631.433642] ? lockdep_hardirqs_on+0x79/0x100 [ 2631.434593] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2631.435672] do_syscall_64+0x3b/0x90 [ 2631.436447] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2631.437508] RIP: 0033:0x7fc1c2a89b19 [ 2631.438278] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2631.442366] RSP: 002b:00007fc1bffff188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 2631.444248] RAX: ffffffffffffffda RBX: 00007fc1c2b9cf60 RCX: 00007fc1c2a89b19 [ 2631.445737] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2631.447285] RBP: 00007fc1bffff1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2631.448800] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2631.450271] R13: 00007fff0449096f R14: 00007fc1bffff300 R15: 0000000000022000 [ 2631.451761] 07:05:27 executing program 1: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) preadv(r0, &(0x7f00000011c0)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x7, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x0, 0x0, 0x87ffffc) mmap$perf(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000008, 0x1010, r2, 0x4) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000100), 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r3 = syz_open_procfs(0x0, 0x0) preadv(r3, &(0x7f0000000080)=[{&(0x7f0000000000)=""/40, 0x40}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000001240)={0x1, 0x80, 0x9, 0xa1, 0xf9, 0x3, 0x0, 0x7, 0xa0400, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x3, @perf_config_ext={0x58d}, 0x21, 0x1, 0x0, 0x6, 0x9, 0x0, 0x8000, 0x0, 0x80, 0x0, 0x5}, 0xffffffffffffffff, 0x4, r3, 0x0) r4 = gettid() process_vm_readv(r4, &(0x7f00000000c0)=[{0x0}, {&(0x7f0000000000)=""/123, 0x7b}, {&(0x7f0000000100)=""/57, 0x39}], 0x3, &(0x7f0000000240)=[{&(0x7f0000012940)=""/102400, 0x19000}], 0x1, 0x0) perf_event_open(0x0, r4, 0x1, r3, 0x8) [ 2631.483549] FAULT_INJECTION: forcing a failure. [ 2631.483549] name failslab, interval 1, probability 0, space 0, times 0 [ 2631.484940] CPU: 1 PID: 13056 Comm: syz-executor.2 Not tainted 5.18.0-rc1-next-20220406 #1 [ 2631.485826] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2631.487076] Call Trace: [ 2631.487351] [ 2631.487593] dump_stack_lvl+0x8b/0xb3 [ 2631.488018] should_fail.cold+0x5/0xa [ 2631.488443] ? ext4_mb_new_blocks+0x64b/0x4b60 [ 2631.488941] should_failslab+0x5/0x10 [ 2631.489361] kmem_cache_alloc+0x5b/0x480 [ 2631.489807] ext4_mb_new_blocks+0x64b/0x4b60 [ 2631.490319] ? lock_is_held_type+0xd7/0x130 [ 2631.490807] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2631.491406] ? ext4_cache_extents+0x148/0x2d0 [ 2631.491892] ? ext4_discard_preallocations+0xe60/0xe60 [ 2631.492460] ? __sanitizer_cov_trace_const_cmp2+0x22/0x80 [ 2631.493050] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2631.493651] ? ext4_ext_search_right+0x2e3/0xbd0 [ 2631.494190] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2631.494809] ext4_ext_map_blocks+0x1fb0/0x5cd0 [ 2631.495334] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 2631.495930] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 2631.496517] ? ext4_ext_release+0x10/0x10 [ 2631.496986] ? lock_release+0x750/0x750 [ 2631.497430] ? lock_release+0x3b2/0x750 [ 2631.497880] ? lock_is_held_type+0xd7/0x130 [ 2631.498380] ? down_write_killable+0x170/0x170 [ 2631.498897] ext4_map_blocks+0x652/0x1970 [ 2631.499369] ? lock_is_held_type+0xd7/0x130 [ 2631.499856] ? ext4_issue_zeroout+0x1c0/0x1c0 [ 2631.500353] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 2631.500964] ? jbd2__journal_start+0xf3/0x8d0 [ 2631.501441] ? __ext4_journal_start_sb+0x392/0x470 [ 2631.501964] ? __ext4_journal_start_sb+0x1d5/0x470 [ 2631.502529] ext4_alloc_file_blocks.isra.0+0x2c1/0xb20 [ 2631.503092] ? ext4_ext_correct_indexes+0x440/0x440 [ 2631.503651] ? down_write_killable+0x170/0x170 [ 2631.504156] ext4_fallocate+0x1a2b/0x3c90 [ 2631.504619] ? lock_acquire+0x1b2/0x530 [ 2631.505051] ? lock_release+0x750/0x750 [ 2631.505505] ? ext4_ext_truncate+0x3e0/0x3e0 [ 2631.505971] ? lock_is_held_type+0xd7/0x130 [ 2631.506472] ? ext4_ext_truncate+0x3e0/0x3e0 [ 2631.506976] vfs_fallocate+0x489/0xe00 [ 2631.507429] __x64_sys_fallocate+0xcf/0x140 [ 2631.507910] do_syscall_64+0x3b/0x90 [ 2631.508320] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2631.508899] RIP: 0033:0x7fd845bccb19 [ 2631.509310] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2631.511379] RSP: 002b:00007fd843142188 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 2631.512221] RAX: ffffffffffffffda RBX: 00007fd845cdff60 RCX: 00007fd845bccb19 [ 2631.513003] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 2631.513804] RBP: 00007fd8431421d0 R08: 0000000000000000 R09: 0000000000000000 [ 2631.514607] R10: 00000000087ffffc R11: 0000000000000246 R12: 0000000000000002 [ 2631.515393] R13: 00007ffde12fa01f R14: 00007fd843142300 R15: 0000000000022000 [ 2631.516194] 07:05:40 executing program 2: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x204800, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x1) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002480)='fd/3\x00') fdatasync(0xffffffffffffffff) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x40}}, './file0\x00'}) preadv2(r2, &(0x7f0000001300)=[{&(0x7f0000000080)=""/193, 0xc1}, {&(0x7f0000000180)=""/250, 0xfa}, {&(0x7f0000000300)=""/4096, 0x1000}], 0x3, 0x80000000, 0x66, 0x18) openat(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r3, 0x0, 0x0, 0x87ffffc) (fail_nth: 30) 07:05:40 executing program 6: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) preadv(r0, &(0x7f00000011c0)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x7, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x0, 0x0, 0x87ffffc) mmap$perf(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000008, 0x1010, r2, 0x4) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000100), 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r3 = syz_open_procfs(0x0, 0x0) perf_event_open(&(0x7f0000001240)={0x1, 0x80, 0x9, 0xa1, 0xf9, 0x3, 0x0, 0x7, 0xa0400, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x3, @perf_config_ext={0x58d}, 0x21, 0x1, 0x0, 0x6, 0x9, 0x0, 0x8000, 0x0, 0x80, 0x0, 0x5}, 0xffffffffffffffff, 0x4, r3, 0x0) r4 = gettid() process_vm_readv(r4, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/4078, 0xfee}, {&(0x7f0000000000)=""/123, 0x7b}, {&(0x7f0000000100)=""/57, 0x39}], 0x3, &(0x7f0000000240)=[{0x0}], 0x1, 0x0) perf_event_open(0x0, r4, 0x1, r3, 0x8) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/consoles\x00', 0x0, 0x0) 07:05:40 executing program 7: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000001340)) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x204800, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x1) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002480)='fd/3\x00') r2 = dup(r1) fdatasync(r2) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x40}}, './file0\x00'}) preadv2(r3, &(0x7f0000001300)=[{&(0x7f0000000080)=""/193, 0xc1}, {&(0x7f0000000180)=""/250, 0xfa}, {&(0x7f0000000300)=""/4096, 0x1000}], 0x3, 0x80000000, 0x66, 0x18) r4 = openat(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000001380)=0x100000) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r5, 0x28, 0x0, 0x87ffffc) sendfile(r5, r4, 0x0, 0x80000000) 07:05:40 executing program 5: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) preadv(r0, &(0x7f00000011c0)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x7, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x0, 0x0, 0x87ffffc) (fail_nth: 30) mmap$perf(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000008, 0x1010, r2, 0x4) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000100), 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r3 = syz_open_procfs(0x0, 0x0) perf_event_open(&(0x7f0000001240)={0x1, 0x80, 0x9, 0xa1, 0xf9, 0x3, 0x0, 0x7, 0xa0400, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x3, @perf_config_ext={0x58d}, 0x21, 0x1, 0x0, 0x6, 0x9, 0x0, 0x8000, 0x0, 0x80, 0x0, 0x5}, 0xffffffffffffffff, 0x4, r3, 0x0) r4 = gettid() perf_event_open(0x0, r4, 0x1, r3, 0x8) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/consoles\x00', 0x0, 0x0) 07:05:40 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f00000001c0)=0x8) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x14, 0x0, 0x0, 0x8}, 0x14}}, 0x0) 07:05:40 executing program 1: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) preadv(r0, &(0x7f00000011c0)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x7, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x0, 0x0, 0x87ffffc) mmap$perf(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000008, 0x1010, r2, 0x4) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000100), 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r3 = syz_open_procfs(0x0, 0x0) preadv(r3, &(0x7f0000000080)=[{&(0x7f0000000000)=""/40, 0x40}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000001240)={0x1, 0x80, 0x9, 0xa1, 0xf9, 0x3, 0x0, 0x7, 0xa0400, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x3, @perf_config_ext={0x58d}, 0x21, 0x1, 0x0, 0x6, 0x9, 0x0, 0x8000, 0x0, 0x80, 0x0, 0x5}, 0xffffffffffffffff, 0x4, r3, 0x0) r4 = gettid() process_vm_readv(r4, &(0x7f00000000c0)=[{0x0}, {&(0x7f0000000000)=""/123, 0x7b}, {&(0x7f0000000100)=""/57, 0x39}], 0x3, &(0x7f0000000240)=[{&(0x7f0000012940)=""/102400, 0x19000}], 0x1, 0x0) perf_event_open(0x0, r4, 0x1, r3, 0x8) 07:05:40 executing program 0: openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r0, 0x0, 0x0, 0x87ffffc) mmap$perf(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000008, 0x10, 0xffffffffffffffff, 0x4) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x12, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = syz_open_procfs(0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001240)={0x1, 0x80, 0x0, 0xa1, 0x0, 0x0, 0x0, 0x7, 0xa0400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x3, @perf_config_ext, 0x21, 0x1, 0x0, 0x0, 0x9, 0x0, 0x8000, 0x0, 0x80, 0x0, 0x5}, 0xffffffffffffffff, 0x4, r1, 0x0) r2 = gettid() process_vm_readv(r2, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/4078, 0xfee}, {&(0x7f0000000000)=""/123, 0x7b}, {&(0x7f0000000100)=""/57, 0x39}], 0x3, &(0x7f0000000240)=[{&(0x7f0000012940)=""/102400, 0xffffff76}], 0x1fb, 0x0) perf_event_open(0x0, r2, 0x1, r1, 0x8) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/consoles\x00', 0x0, 0x0) 07:05:40 executing program 3: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000040)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x300000c, 0x13, r0, 0x8000000) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xa) fork() (fail_nth: 35) [ 2645.177649] FAULT_INJECTION: forcing a failure. [ 2645.177649] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2645.178959] CPU: 1 PID: 13078 Comm: syz-executor.3 Not tainted 5.18.0-rc1-next-20220406 #1 [ 2645.179894] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2645.181135] Call Trace: [ 2645.181415] [ 2645.181665] dump_stack_lvl+0x8b/0xb3 [ 2645.182095] should_fail.cold+0x5/0xa [ 2645.182537] prepare_alloc_pages+0x17b/0x500 [ 2645.183030] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 2645.183621] __alloc_pages+0x131/0x4e0 [ 2645.184047] ? __alloc_pages_slowpath.constprop.0+0x1f10/0x1f10 [ 2645.184718] ? lock_release+0x3b2/0x750 [ 2645.185156] alloc_pages+0x1a0/0x2f0 [ 2645.185566] get_zeroed_page+0x14/0xa0 [ 2645.185995] __pud_alloc+0x33/0x270 [ 2645.186390] copy_page_range+0x3376/0x4cc0 [ 2645.186862] ? lock_is_held_type+0xd7/0x130 [ 2645.187359] ? find_held_lock+0x2c/0x110 [ 2645.187815] ? vm_iomap_memory+0x190/0x190 [ 2645.188284] ? down_write+0xde/0x150 [ 2645.188702] ? up_write+0x148/0x460 [ 2645.189102] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 2645.189664] ? __vma_link_rb+0x540/0x700 [ 2645.190121] dup_mm+0x961/0x1250 [ 2645.190520] ? replace_mm_exe_file+0x490/0x490 [ 2645.191027] ? __raw_spin_lock_init+0x36/0x110 [ 2645.191542] copy_process+0x698c/0x6db0 [ 2645.191997] ? __cleanup_sighand+0xb0/0xb0 [ 2645.192475] ? lock_release+0x3b2/0x750 [ 2645.192906] ? ksys_write+0x20c/0x250 [ 2645.193334] ? kernel_clone+0x2f8/0xa60 [ 2645.193777] kernel_clone+0xe7/0xa60 [ 2645.194185] ? find_held_lock+0x2c/0x110 [ 2645.194625] ? create_io_thread+0xf0/0xf0 [ 2645.195088] ? __mutex_unlock_slowpath+0x15c/0x5e0 [ 2645.195632] ? bit_wait_io_timeout+0x160/0x160 [ 2645.196141] ? lock_is_held_type+0xd7/0x130 [ 2645.196624] __do_sys_fork+0x8a/0xc0 [ 2645.197041] ? kernel_clone+0xa60/0xa60 [ 2645.197487] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 2645.198104] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2645.198662] ? lockdep_hardirqs_on+0x79/0x100 [ 2645.199153] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2645.199734] do_syscall_64+0x3b/0x90 [ 2645.200146] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2645.200707] RIP: 0033:0x7fc1c2a89b19 [ 2645.201110] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2645.203063] RSP: 002b:00007fc1bffff188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 2645.203903] RAX: ffffffffffffffda RBX: 00007fc1c2b9cf60 RCX: 00007fc1c2a89b19 [ 2645.204685] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2645.205461] RBP: 00007fc1bffff1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2645.206240] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2645.207032] R13: 00007fff0449096f R14: 00007fc1bffff300 R15: 0000000000022000 [ 2645.207830] [ 2645.213945] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13074 comm=syz-executor.4 [ 2645.237031] FAULT_INJECTION: forcing a failure. [ 2645.237031] name failslab, interval 1, probability 0, space 0, times 0 [ 2645.238293] CPU: 1 PID: 13082 Comm: syz-executor.2 Not tainted 5.18.0-rc1-next-20220406 #1 [ 2645.238833] FAULT_INJECTION: forcing a failure. [ 2645.238833] name failslab, interval 1, probability 0, space 0, times 0 [ 2645.239166] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2645.239179] Call Trace: [ 2645.242913] [ 2645.243143] dump_stack_lvl+0x8b/0xb3 [ 2645.243556] should_fail.cold+0x5/0xa [ 2645.243952] ? create_object.isra.0+0x3a/0xa20 [ 2645.244435] should_failslab+0x5/0x10 [ 2645.244844] kmem_cache_alloc+0x5b/0x480 [ 2645.245285] create_object.isra.0+0x3a/0xa20 [ 2645.245749] ? kasan_unpoison+0x23/0x50 [ 2645.246173] __kmalloc+0x25b/0x440 [ 2645.246581] ext4_find_extent+0xa39/0xd20 [ 2645.247045] ext4_ext_map_blocks+0x1c8/0x5cd0 [ 2645.247539] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 2645.248119] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 2645.248715] ? ext4_ext_release+0x10/0x10 [ 2645.249174] ? lock_acquire+0x1b2/0x530 [ 2645.249629] ? lock_release+0x750/0x750 [ 2645.250075] ? lock_release+0x3b2/0x750 [ 2645.250523] ? lock_is_held_type+0xd7/0x130 [ 2645.251013] ? down_write+0xde/0x150 [ 2645.251429] ? down_write_killable+0x170/0x170 [ 2645.251945] ext4_map_blocks+0x652/0x1970 [ 2645.252393] ? lock_is_held_type+0xd7/0x130 [ 2645.252873] ? ext4_issue_zeroout+0x1c0/0x1c0 [ 2645.253359] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 2645.253975] ? jbd2__journal_start+0xf3/0x8d0 [ 2645.254489] ? __ext4_journal_start_sb+0x392/0x470 [ 2645.255030] ? __ext4_journal_start_sb+0x1d5/0x470 [ 2645.255553] ext4_alloc_file_blocks.isra.0+0x2c1/0xb20 [ 2645.256146] ? ext4_ext_correct_indexes+0x440/0x440 [ 2645.256684] ? down_write_killable+0x170/0x170 [ 2645.257197] ext4_fallocate+0x1a2b/0x3c90 [ 2645.257637] ? lock_acquire+0x1b2/0x530 [ 2645.258080] ? lock_release+0x750/0x750 [ 2645.258522] ? ext4_ext_truncate+0x3e0/0x3e0 [ 2645.259018] ? lock_is_held_type+0xd7/0x130 [ 2645.259481] ? ext4_ext_truncate+0x3e0/0x3e0 [ 2645.259975] vfs_fallocate+0x489/0xe00 [ 2645.260403] __x64_sys_fallocate+0xcf/0x140 [ 2645.260889] do_syscall_64+0x3b/0x90 [ 2645.261286] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2645.261863] RIP: 0033:0x7fd845bccb19 [ 2645.262249] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2645.264320] RSP: 002b:00007fd843142188 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 2645.265101] RAX: ffffffffffffffda RBX: 00007fd845cdff60 RCX: 00007fd845bccb19 [ 2645.265889] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 2645.266641] RBP: 00007fd8431421d0 R08: 0000000000000000 R09: 0000000000000000 [ 2645.267389] R10: 00000000087ffffc R11: 0000000000000246 R12: 0000000000000002 [ 2645.268182] R13: 00007ffde12fa01f R14: 00007fd843142300 R15: 0000000000022000 [ 2645.268946] [ 2645.269263] CPU: 0 PID: 13072 Comm: syz-executor.5 Not tainted 5.18.0-rc1-next-20220406 #1 [ 2645.271395] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2645.274367] Call Trace: [ 2645.275049] [ 2645.275646] dump_stack_lvl+0x8b/0xb3 [ 2645.276543] should_fail.cold+0x5/0xa [ 2645.277362] ? create_object.isra.0+0x3a/0xa20 [ 2645.278381] should_failslab+0x5/0x10 [ 2645.279184] kmem_cache_alloc+0x5b/0x480 [ 2645.280054] create_object.isra.0+0x3a/0xa20 [ 2645.280983] ? kasan_unpoison+0x23/0x50 [ 2645.281942] __kmalloc+0x25b/0x440 [ 2645.282729] ext4_find_extent+0xa39/0xd20 [ 2645.283598] ext4_ext_map_blocks+0x1c8/0x5cd0 [ 2645.284546] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 2645.285626] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 2645.286734] ? ext4_ext_release+0x10/0x10 [ 2645.287594] ? lock_acquire+0x1b2/0x530 [ 2645.288415] ? lock_release+0x750/0x750 [ 2645.289238] ? lock_release+0x3b2/0x750 [ 2645.290063] ? lock_is_held_type+0xd7/0x130 [ 2645.290982] ? down_write+0xde/0x150 [ 2645.291747] ? down_write_killable+0x170/0x170 [ 2645.292704] ext4_map_blocks+0x652/0x1970 [ 2645.293605] ? lock_is_held_type+0xd7/0x130 [ 2645.294552] ? ext4_issue_zeroout+0x1c0/0x1c0 [ 2645.295504] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 2645.296655] ? jbd2__journal_start+0xf3/0x8d0 [ 2645.297604] ? __ext4_journal_start_sb+0x392/0x470 [ 2645.298644] ? __ext4_journal_start_sb+0x1d5/0x470 [ 2645.299670] ext4_alloc_file_blocks.isra.0+0x2c1/0xb20 [ 2645.300769] ? ext4_ext_correct_indexes+0x440/0x440 [ 2645.301827] ? down_write_killable+0x170/0x170 [ 2645.302828] ext4_fallocate+0x1a2b/0x3c90 [ 2645.303707] ? lock_acquire+0x1b2/0x530 [ 2645.304554] ? lock_release+0x750/0x750 [ 2645.305409] ? ext4_ext_truncate+0x3e0/0x3e0 [ 2645.306362] ? lock_is_held_type+0xd7/0x130 [ 2645.307292] ? ext4_ext_truncate+0x3e0/0x3e0 [ 2645.308213] vfs_fallocate+0x489/0xe00 [ 2645.309050] __x64_sys_fallocate+0xcf/0x140 [ 2645.309952] do_syscall_64+0x3b/0x90 07:05:40 executing program 3: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000040)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x300000c, 0x13, r0, 0x8000000) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xa) fork() (fail_nth: 36) [ 2645.310760] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2645.312009] RIP: 0033:0x7f35817a9b19 [ 2645.312783] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2645.316582] RSP: 002b:00007f357ed1f188 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 2645.318171] RAX: ffffffffffffffda RBX: 00007f35818bcf60 RCX: 00007f35817a9b19 [ 2645.319658] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 2645.321164] RBP: 00007f357ed1f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2645.322697] R10: 00000000087ffffc R11: 0000000000000246 R12: 0000000000000002 [ 2645.324165] R13: 00007ffdd683fcbf R14: 00007f357ed1f300 R15: 0000000000022000 [ 2645.325661] [ 2645.330372] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13085 comm=syz-executor.4 07:05:41 executing program 7: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000001340)) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x204800, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x1) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002480)='fd/3\x00') r2 = dup(r1) fdatasync(r2) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x40}}, './file0\x00'}) preadv2(r3, &(0x7f0000001300)=[{&(0x7f0000000080)=""/193, 0xc1}, {&(0x7f0000000180)=""/250, 0xfa}, {&(0x7f0000000300)=""/4096, 0x1000}], 0x3, 0x80000000, 0x66, 0x18) r4 = openat(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000001380)=0x100000) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r5, 0x102, 0x0, 0x87ffffc) sendfile(r5, r4, 0x0, 0x80000000) [ 2645.374752] FAULT_INJECTION: forcing a failure. [ 2645.374752] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2645.376063] CPU: 1 PID: 13090 Comm: syz-executor.3 Not tainted 5.18.0-rc1-next-20220406 #1 [ 2645.376916] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2645.378101] Call Trace: [ 2645.378375] [ 2645.378608] dump_stack_lvl+0x8b/0xb3 [ 2645.379022] should_fail.cold+0x5/0xa [ 2645.379426] prepare_alloc_pages+0x17b/0x500 [ 2645.379907] __alloc_pages+0x131/0x4e0 [ 2645.380312] ? __alloc_pages_slowpath.constprop.0+0x1f10/0x1f10 [ 2645.380936] ? find_held_lock+0x2c/0x110 [ 2645.381376] ? lock_downgrade+0x6d0/0x6d0 [ 2645.381814] ? do_raw_spin_lock+0x121/0x260 [ 2645.382283] alloc_pages+0x1a0/0x2f0 [ 2645.382691] __pmd_alloc+0x37/0x680 [ 2645.383085] copy_page_range+0x32e6/0x4cc0 [ 2645.383537] ? lock_is_held_type+0xd7/0x130 [ 2645.384037] ? vm_iomap_memory+0x190/0x190 [ 2645.384515] ? down_write+0xde/0x150 [ 2645.384934] ? up_write+0x148/0x460 [ 2645.385341] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 2645.385906] ? __vma_link_rb+0x540/0x700 [ 2645.386379] dup_mm+0x961/0x1250 [ 2645.386767] ? replace_mm_exe_file+0x490/0x490 [ 2645.387278] ? __raw_spin_lock_init+0x36/0x110 [ 2645.387800] copy_process+0x698c/0x6db0 [ 2645.388253] ? __cleanup_sighand+0xb0/0xb0 [ 2645.388734] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2645.389348] ? kernel_clone+0x259/0xa60 [ 2645.389797] ? kernel_clone+0x2f8/0xa60 [ 2645.390214] kernel_clone+0xe7/0xa60 [ 2645.390647] ? find_held_lock+0x2c/0x110 [ 2645.391099] ? create_io_thread+0xf0/0xf0 [ 2645.391561] ? __mutex_unlock_slowpath+0x15c/0x5e0 [ 2645.392114] ? bit_wait_io_timeout+0x160/0x160 [ 2645.392621] ? lock_is_held_type+0xd7/0x130 [ 2645.393086] __do_sys_fork+0x8a/0xc0 [ 2645.393506] ? kernel_clone+0xa60/0xa60 [ 2645.393953] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 2645.394557] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2645.395132] ? lockdep_hardirqs_on+0x79/0x100 [ 2645.395607] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2645.396188] do_syscall_64+0x3b/0x90 [ 2645.396589] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2645.397164] RIP: 0033:0x7fc1c2a89b19 [ 2645.397581] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2645.399629] RSP: 002b:00007fc1bffff188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 2645.400414] RAX: ffffffffffffffda RBX: 00007fc1c2b9cf60 RCX: 00007fc1c2a89b19 [ 2645.401209] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2645.402006] RBP: 00007fc1bffff1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2645.402797] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2645.403600] R13: 00007fff0449096f R14: 00007fc1bffff300 R15: 0000000000022000 [ 2645.404419] 07:05:41 executing program 0: openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r0, 0x0, 0x0, 0x87ffffc) mmap$perf(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000008, 0x10, 0xffffffffffffffff, 0x4) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x12, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = syz_open_procfs(0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001240)={0x1, 0x80, 0x0, 0xa1, 0x0, 0x0, 0x0, 0x7, 0xa0400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x3, @perf_config_ext, 0x21, 0x1, 0x0, 0x0, 0x9, 0x0, 0x8000, 0x0, 0x80, 0x0, 0x5}, 0xffffffffffffffff, 0x4, r1, 0x0) r2 = gettid() process_vm_readv(r2, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/4078, 0xfee}, {&(0x7f0000000000)=""/123, 0x7b}, {&(0x7f0000000100)=""/57, 0x39}], 0x3, &(0x7f0000000240)=[{&(0x7f0000012940)=""/102400, 0xffffff76}], 0x1fc, 0x0) perf_event_open(0x0, r2, 0x1, r1, 0x8) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/consoles\x00', 0x0, 0x0) 07:05:41 executing program 1: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) preadv(r0, &(0x7f00000011c0)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x7, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x0, 0x0, 0x87ffffc) mmap$perf(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000008, 0x1010, r2, 0x4) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000100), 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r3 = syz_open_procfs(0x0, 0x0) preadv(r3, &(0x7f0000000080)=[{&(0x7f0000000000)=""/40, 0x40}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000001240)={0x1, 0x80, 0x9, 0xa1, 0xf9, 0x3, 0x0, 0x7, 0xa0400, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x3, @perf_config_ext={0x58d}, 0x21, 0x1, 0x0, 0x6, 0x9, 0x0, 0x8000, 0x0, 0x80, 0x0, 0x5}, 0xffffffffffffffff, 0x4, r3, 0x0) r4 = gettid() process_vm_readv(r4, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/4078, 0xfee}, {&(0x7f0000000000)=""/123, 0x7b}, {&(0x7f0000000100)=""/57, 0x39}], 0x3, 0x0, 0x0, 0x0) perf_event_open(0x0, r4, 0x1, r3, 0x8) 07:05:41 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f00000001c0)=0x8) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x14, 0x0, 0x0, 0xa}, 0x14}}, 0x0) 07:05:41 executing program 6: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) preadv(r0, &(0x7f00000011c0)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x7, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x0, 0x0, 0x87ffffc) mmap$perf(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000008, 0x1010, r2, 0x4) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000100), 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r3 = syz_open_procfs(0x0, 0x0) perf_event_open(&(0x7f0000001240)={0x1, 0x80, 0x9, 0xa1, 0xf9, 0x3, 0x0, 0x7, 0xa0400, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x3, @perf_config_ext={0x58d}, 0x21, 0x1, 0x0, 0x6, 0x9, 0x0, 0x8000, 0x0, 0x80, 0x0, 0x5}, 0xffffffffffffffff, 0x4, r3, 0x0) r4 = gettid() process_vm_readv(r4, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/4078, 0xfee}, {&(0x7f0000000000)=""/123, 0x7b}, {&(0x7f0000000100)=""/57, 0x39}], 0x3, &(0x7f0000000240)=[{0x0}], 0x1, 0x0) perf_event_open(0x0, r4, 0x1, r3, 0x8) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/consoles\x00', 0x0, 0x0) 07:05:41 executing program 2: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x204800, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x1) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002480)='fd/3\x00') fdatasync(0xffffffffffffffff) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x40}}, './file0\x00'}) preadv2(r2, &(0x7f0000001300)=[{&(0x7f0000000080)=""/193, 0xc1}, {&(0x7f0000000180)=""/250, 0xfa}, {&(0x7f0000000300)=""/4096, 0x1000}], 0x3, 0x80000000, 0x66, 0x18) openat(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r3, 0x0, 0x0, 0x87ffffc) (fail_nth: 31) [ 2645.484109] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13098 comm=syz-executor.4 [ 2645.491118] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13101 comm=syz-executor.4 [ 2645.524354] FAULT_INJECTION: forcing a failure. [ 2645.524354] name failslab, interval 1, probability 0, space 0, times 0 [ 2645.525580] CPU: 1 PID: 13103 Comm: syz-executor.2 Not tainted 5.18.0-rc1-next-20220406 #1 [ 2645.526465] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2645.527644] Call Trace: [ 2645.527914] [ 2645.528150] dump_stack_lvl+0x8b/0xb3 [ 2645.528564] should_fail.cold+0x5/0xa [ 2645.528969] ? ext4_mb_new_blocks+0x64b/0x4b60 [ 2645.529455] should_failslab+0x5/0x10 [ 2645.529865] kmem_cache_alloc+0x5b/0x480 [ 2645.530323] ext4_mb_new_blocks+0x64b/0x4b60 [ 2645.530800] ? lock_is_held_type+0xd7/0x130 [ 2645.531279] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2645.531866] ? ext4_cache_extents+0x148/0x2d0 [ 2645.532336] ? ext4_discard_preallocations+0xe60/0xe60 [ 2645.532896] ? __sanitizer_cov_trace_const_cmp2+0x22/0x80 [ 2645.533465] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2645.534045] ? ext4_ext_search_right+0x2e3/0xbd0 [ 2645.534591] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2645.535221] ext4_ext_map_blocks+0x1fb0/0x5cd0 [ 2645.535744] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 2645.536347] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 2645.536943] ? ext4_ext_release+0x10/0x10 [ 2645.537408] ? lock_release+0x750/0x750 [ 2645.537864] ? lock_release+0x3b2/0x750 [ 2645.538321] ? lock_is_held_type+0xd7/0x130 [ 2645.538823] ? down_write_killable+0x170/0x170 [ 2645.539347] ext4_map_blocks+0x652/0x1970 [ 2645.539831] ? lock_is_held_type+0xd7/0x130 [ 2645.540320] ? ext4_issue_zeroout+0x1c0/0x1c0 [ 2645.540820] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 2645.541442] ? jbd2__journal_start+0xf3/0x8d0 [ 2645.541946] ? __ext4_journal_start_sb+0x392/0x470 [ 2645.542512] ? __ext4_journal_start_sb+0x1d5/0x470 [ 2645.543057] ext4_alloc_file_blocks.isra.0+0x2c1/0xb20 [ 2645.543660] ? ext4_ext_correct_indexes+0x440/0x440 [ 2645.544227] ? down_write_killable+0x170/0x170 [ 2645.544755] ext4_fallocate+0x1a2b/0x3c90 [ 2645.545204] ? lock_acquire+0x1b2/0x530 [ 2645.545657] ? lock_release+0x750/0x750 [ 2645.546107] ? ext4_ext_truncate+0x3e0/0x3e0 [ 2645.546612] ? lock_is_held_type+0xd7/0x130 [ 2645.547108] ? ext4_ext_truncate+0x3e0/0x3e0 [ 2645.547608] vfs_fallocate+0x489/0xe00 [ 2645.548063] __x64_sys_fallocate+0xcf/0x140 [ 2645.548560] do_syscall_64+0x3b/0x90 [ 2645.548971] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2645.549559] RIP: 0033:0x7fd845bccb19 [ 2645.549965] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2645.552043] RSP: 002b:00007fd843142188 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 2645.552897] RAX: ffffffffffffffda RBX: 00007fd845cdff60 RCX: 00007fd845bccb19 [ 2645.553707] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 2645.554521] RBP: 00007fd8431421d0 R08: 0000000000000000 R09: 0000000000000000 [ 2645.555301] R10: 00000000087ffffc R11: 0000000000000246 R12: 0000000000000002 [ 2645.556084] R13: 00007ffde12fa01f R14: 00007fd843142300 R15: 0000000000022000 [ 2645.556879] 07:05:41 executing program 3: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000040)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x300000c, 0x13, r0, 0x8000000) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xa) fork() (fail_nth: 37) 07:05:41 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f00000001c0)=0x8) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x14, 0x0, 0x0, 0xf}, 0x14}}, 0x0) 07:05:41 executing program 5: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) preadv(r0, &(0x7f00000011c0)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x7, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x0, 0x0, 0x87ffffc) (fail_nth: 31) mmap$perf(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000008, 0x1010, r2, 0x4) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000100), 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r3 = syz_open_procfs(0x0, 0x0) perf_event_open(&(0x7f0000001240)={0x1, 0x80, 0x9, 0xa1, 0xf9, 0x3, 0x0, 0x7, 0xa0400, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x3, @perf_config_ext={0x58d}, 0x21, 0x1, 0x0, 0x6, 0x9, 0x0, 0x8000, 0x0, 0x80, 0x0, 0x5}, 0xffffffffffffffff, 0x4, r3, 0x0) r4 = gettid() perf_event_open(0x0, r4, 0x1, r3, 0x8) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/consoles\x00', 0x0, 0x0) [ 2645.617488] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13111 comm=syz-executor.4 [ 2645.626125] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13112 comm=syz-executor.4 07:05:41 executing program 0: openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r0, 0x0, 0x0, 0x87ffffc) mmap$perf(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000008, 0x10, 0xffffffffffffffff, 0x4) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x12, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = syz_open_procfs(0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001240)={0x1, 0x80, 0x0, 0xa1, 0x0, 0x0, 0x0, 0x7, 0xa0400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x3, @perf_config_ext, 0x21, 0x1, 0x0, 0x0, 0x9, 0x0, 0x8000, 0x0, 0x80, 0x0, 0x5}, 0xffffffffffffffff, 0x4, r1, 0x0) r2 = gettid() process_vm_readv(r2, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/4078, 0xfee}, {&(0x7f0000000000)=""/123, 0x7b}, {&(0x7f0000000100)=""/57, 0x39}], 0x3, &(0x7f0000000240)=[{&(0x7f0000012940)=""/102400, 0xffffff76}], 0x1fd, 0x0) perf_event_open(0x0, r2, 0x1, r1, 0x8) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/consoles\x00', 0x0, 0x0) 07:05:41 executing program 7: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000001340)) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x204800, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x1) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002480)='fd/3\x00') r2 = dup(r1) fdatasync(r2) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x40}}, './file0\x00'}) preadv2(r3, &(0x7f0000001300)=[{&(0x7f0000000080)=""/193, 0xc1}, {&(0x7f0000000180)=""/250, 0xfa}, {&(0x7f0000000300)=""/4096, 0x1000}], 0x3, 0x80000000, 0x66, 0x18) r4 = openat(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000001380)=0x100000) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r5, 0x103, 0x0, 0x87ffffc) sendfile(r5, r4, 0x0, 0x80000000) [ 2645.673974] FAULT_INJECTION: forcing a failure. [ 2645.673974] name failslab, interval 1, probability 0, space 0, times 0 [ 2645.676395] CPU: 0 PID: 13117 Comm: syz-executor.3 Not tainted 5.18.0-rc1-next-20220406 #1 [ 2645.678120] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2645.680449] Call Trace: [ 2645.680977] [ 2645.681467] dump_stack_lvl+0x8b/0xb3 [ 2645.682263] should_fail.cold+0x5/0xa [ 2645.683080] ? __pmd_alloc+0x94/0x680 [ 2645.683874] should_failslab+0x5/0x10 [ 2645.684658] kmem_cache_alloc+0x5b/0x480 [ 2645.685497] ? alloc_pages+0x1a8/0x2f0 [ 2645.686309] __pmd_alloc+0x94/0x680 [ 2645.687065] copy_page_range+0x32e6/0x4cc0 [ 2645.687998] ? vm_iomap_memory+0x190/0x190 [ 2645.688862] ? down_write+0xde/0x150 [ 2645.689628] ? up_write+0x148/0x460 [ 2645.690385] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 2645.691417] ? __vma_link_rb+0x540/0x700 [ 2645.692265] dup_mm+0x961/0x1250 [ 2645.692986] ? replace_mm_exe_file+0x490/0x490 [ 2645.693932] ? __raw_spin_lock_init+0x36/0x110 [ 2645.694899] copy_process+0x698c/0x6db0 [ 2645.695757] ? __cleanup_sighand+0xb0/0xb0 [ 2645.696648] ? lock_release+0x3b2/0x750 [ 2645.697464] ? ksys_write+0x20c/0x250 [ 2645.698244] ? kernel_clone+0x2f8/0xa60 [ 2645.699083] kernel_clone+0xe7/0xa60 [ 2645.699856] ? find_held_lock+0x2c/0x110 [ 2645.700684] ? create_io_thread+0xf0/0xf0 [ 2645.701548] ? __mutex_unlock_slowpath+0x15c/0x5e0 [ 2645.702579] ? bit_wait_io_timeout+0x160/0x160 [ 2645.703515] ? lock_is_held_type+0xd7/0x130 [ 2645.704414] __do_sys_fork+0x8a/0xc0 [ 2645.705186] ? kernel_clone+0xa60/0xa60 [ 2645.706009] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 2645.707173] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2645.708245] ? lockdep_hardirqs_on+0x79/0x100 [ 2645.709171] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2645.710239] do_syscall_64+0x3b/0x90 [ 2645.711016] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2645.712082] RIP: 0033:0x7fc1c2a89b19 [ 2645.712839] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2645.716632] RSP: 002b:00007fc1bffff188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 2645.718195] RAX: ffffffffffffffda RBX: 00007fc1c2b9cf60 RCX: 00007fc1c2a89b19 [ 2645.719675] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2645.721119] RBP: 00007fc1bffff1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2645.722570] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2645.724013] R13: 00007fff0449096f R14: 00007fc1bffff300 R15: 0000000000022000 [ 2645.725487] [ 2645.738819] FAULT_INJECTION: forcing a failure. [ 2645.738819] name failslab, interval 1, probability 0, space 0, times 0 [ 2645.740542] CPU: 1 PID: 13115 Comm: syz-executor.5 Not tainted 5.18.0-rc1-next-20220406 #1 [ 2645.741700] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2645.743300] Call Trace: [ 2645.743664] [ 2645.743960] dump_stack_lvl+0x8b/0xb3 [ 2645.744513] should_fail.cold+0x5/0xa [ 2645.745055] ? ext4_mb_new_blocks+0x222c/0x4b60 [ 2645.745700] should_failslab+0x5/0x10 [ 2645.746236] kmem_cache_alloc+0x5b/0x480 [ 2645.746829] ext4_mb_new_blocks+0x222c/0x4b60 [ 2645.747473] ? lock_is_held_type+0xd7/0x130 [ 2645.748115] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2645.748917] ? ext4_cache_extents+0x148/0x2d0 [ 2645.749565] ? ext4_discard_preallocations+0xe60/0xe60 [ 2645.750385] ? __sanitizer_cov_trace_const_cmp2+0x22/0x80 [ 2645.751182] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2645.752007] ? ext4_ext_search_right+0x2e3/0xbd0 [ 2645.752697] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2645.753497] ext4_ext_map_blocks+0x1fb0/0x5cd0 [ 2645.754166] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 2645.754931] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 2645.755709] ? ext4_ext_release+0x10/0x10 [ 2645.756335] ? lock_release+0x750/0x750 [ 2645.756910] ? lock_release+0x3b2/0x750 [ 2645.757496] ? lock_is_held_type+0xd7/0x130 [ 2645.758150] ? down_write_killable+0x170/0x170 [ 2645.758854] ext4_map_blocks+0x652/0x1970 [ 2645.759466] ? lock_is_held_type+0xd7/0x130 [ 2645.760131] ? ext4_issue_zeroout+0x1c0/0x1c0 [ 2645.760789] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 2645.761628] ? jbd2__journal_start+0xf3/0x8d0 [ 2645.762301] ? __ext4_journal_start_sb+0x392/0x470 [ 2645.763019] ? __ext4_journal_start_sb+0x1d5/0x470 [ 2645.763736] ext4_alloc_file_blocks.isra.0+0x2c1/0xb20 [ 2645.764557] ? ext4_ext_correct_indexes+0x440/0x440 [ 2645.765289] ? down_write_killable+0x170/0x170 [ 2645.765967] ext4_fallocate+0x1a2b/0x3c90 [ 2645.766540] ? lock_acquire+0x1b2/0x530 [ 2645.766989] ? lock_release+0x750/0x750 [ 2645.767437] ? ext4_ext_truncate+0x3e0/0x3e0 [ 2645.767928] ? lock_is_held_type+0xd7/0x130 [ 2645.768405] ? ext4_ext_truncate+0x3e0/0x3e0 [ 2645.768893] vfs_fallocate+0x489/0xe00 [ 2645.769343] __x64_sys_fallocate+0xcf/0x140 [ 2645.769829] do_syscall_64+0x3b/0x90 [ 2645.770247] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2645.770836] RIP: 0033:0x7f35817a9b19 [ 2645.771239] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2645.773305] RSP: 002b:00007f357ed1f188 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 2645.774158] RAX: ffffffffffffffda RBX: 00007f35818bcf60 RCX: 00007f35817a9b19 [ 2645.774945] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 2645.775728] RBP: 00007f357ed1f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2645.776515] R10: 00000000087ffffc R11: 0000000000000246 R12: 0000000000000002 [ 2645.777312] R13: 00007ffdd683fcbf R14: 00007f357ed1f300 R15: 0000000000022000 [ 2645.778117] 07:05:41 executing program 7: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000001340)) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x204800, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x1) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002480)='fd/3\x00') r2 = dup(r1) fdatasync(r2) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x40}}, './file0\x00'}) preadv2(r3, &(0x7f0000001300)=[{&(0x7f0000000080)=""/193, 0xc1}, {&(0x7f0000000180)=""/250, 0xfa}, {&(0x7f0000000300)=""/4096, 0x1000}], 0x3, 0x80000000, 0x66, 0x18) r4 = openat(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000001380)=0x100000) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r5, 0x10e, 0x0, 0x87ffffc) sendfile(r5, r4, 0x0, 0x80000000) 07:05:41 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f00000001c0)=0x8) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x14, 0x0, 0x0, 0x10}, 0x14}}, 0x0) 07:05:41 executing program 6: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) preadv(r0, &(0x7f00000011c0)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x7, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x0, 0x0, 0x87ffffc) mmap$perf(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000008, 0x1010, r2, 0x4) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000100), 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r3 = syz_open_procfs(0x0, 0x0) perf_event_open(&(0x7f0000001240)={0x1, 0x80, 0x9, 0xa1, 0xf9, 0x3, 0x0, 0x7, 0xa0400, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x3, @perf_config_ext={0x58d}, 0x21, 0x1, 0x0, 0x6, 0x9, 0x0, 0x8000, 0x0, 0x80, 0x0, 0x5}, 0xffffffffffffffff, 0x4, r3, 0x0) r4 = gettid() process_vm_readv(r4, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/4078, 0xfee}, {&(0x7f0000000000)=""/123, 0x7b}, {&(0x7f0000000100)=""/57, 0x39}], 0x3, &(0x7f0000000240)=[{&(0x7f0000012940)=""/102400, 0xffffff76}], 0x1, 0x0) perf_event_open(0x0, 0x0, 0x1, r3, 0x8) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/consoles\x00', 0x0, 0x0) [ 2645.797868] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13127 comm=syz-executor.4 07:05:41 executing program 1: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) preadv(r0, &(0x7f00000011c0)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x7, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x0, 0x0, 0x87ffffc) mmap$perf(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000008, 0x1010, r2, 0x4) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000100), 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r3 = syz_open_procfs(0x0, 0x0) preadv(r3, &(0x7f0000000080)=[{&(0x7f0000000000)=""/40, 0x40}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000001240)={0x1, 0x80, 0x9, 0xa1, 0xf9, 0x3, 0x0, 0x7, 0xa0400, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x3, @perf_config_ext={0x58d}, 0x21, 0x1, 0x0, 0x6, 0x9, 0x0, 0x8000, 0x0, 0x80, 0x0, 0x5}, 0xffffffffffffffff, 0x4, r3, 0x0) r4 = gettid() process_vm_readv(r4, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/4078, 0xfee}, {&(0x7f0000000000)=""/123, 0x7b}, {&(0x7f0000000100)=""/57, 0x39}], 0x3, 0x0, 0x0, 0x0) perf_event_open(0x0, r4, 0x1, r3, 0x8) [ 2645.818167] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13129 comm=syz-executor.4 07:05:54 executing program 3: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000040)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x300000c, 0x13, r0, 0x8000000) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xa) fork() (fail_nth: 38) [ 2659.035238] FAULT_INJECTION: forcing a failure. [ 2659.035238] name failslab, interval 1, probability 0, space 0, times 0 [ 2659.036687] CPU: 0 PID: 13146 Comm: syz-executor.2 Not tainted 5.18.0-rc1-next-20220406 #1 [ 2659.037616] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2659.038916] Call Trace: [ 2659.039205] [ 2659.039460] dump_stack_lvl+0x8b/0xb3 [ 2659.039906] should_fail.cold+0x5/0xa [ 2659.040342] ? create_object.isra.0+0x3a/0xa20 [ 2659.040869] should_failslab+0x5/0x10 [ 2659.041305] kmem_cache_alloc+0x5b/0x480 [ 2659.041772] create_object.isra.0+0x3a/0xa20 [ 2659.042274] ? kasan_unpoison+0x23/0x50 [ 2659.042745] kmem_cache_alloc+0x239/0x480 [ 2659.043220] ext4_mb_new_blocks+0x64b/0x4b60 [ 2659.043721] ? lock_is_held_type+0xd7/0x130 [ 2659.044208] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2659.044832] ? ext4_cache_extents+0x148/0x2d0 [ 2659.045337] ? ext4_discard_preallocations+0xe60/0xe60 [ 2659.045923] ? __sanitizer_cov_trace_const_cmp2+0x22/0x80 [ 2659.046552] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2659.047172] ? ext4_ext_search_right+0x2e3/0xbd0 [ 2659.047708] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2659.048336] ext4_ext_map_blocks+0x1fb0/0x5cd0 [ 2659.048862] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 2659.049456] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 2659.050046] ? ext4_ext_release+0x10/0x10 [ 2659.050537] ? lock_release+0x750/0x750 [ 2659.050991] ? lock_release+0x3b2/0x750 [ 2659.051446] ? lock_is_held_type+0xd7/0x130 [ 2659.051948] ? down_write_killable+0x170/0x170 [ 2659.052472] ext4_map_blocks+0x652/0x1970 [ 2659.052945] ? lock_is_held_type+0xd7/0x130 [ 2659.053434] ? ext4_issue_zeroout+0x1c0/0x1c0 [ 2659.053944] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 2659.054589] ? jbd2__journal_start+0xf3/0x8d0 [ 2659.055107] ? __ext4_journal_start_sb+0x392/0x470 [ 2659.055652] ? __ext4_journal_start_sb+0x1d5/0x470 [ 2659.056205] ext4_alloc_file_blocks.isra.0+0x2c1/0xb20 [ 2659.056795] ? ext4_ext_correct_indexes+0x440/0x440 [ 2659.057364] ? down_write_killable+0x170/0x170 [ 2659.057882] ext4_fallocate+0x1a2b/0x3c90 [ 2659.058350] ? lock_acquire+0x1b2/0x530 [ 2659.058790] ? lock_release+0x750/0x750 [ 2659.059241] ? ext4_ext_truncate+0x3e0/0x3e0 [ 2659.059735] ? lock_is_held_type+0xd7/0x130 [ 2659.060228] ? ext4_ext_truncate+0x3e0/0x3e0 [ 2659.060719] vfs_fallocate+0x489/0xe00 [ 2659.061171] __x64_sys_fallocate+0xcf/0x140 [ 2659.061667] do_syscall_64+0x3b/0x90 [ 2659.062093] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2659.062674] RIP: 0033:0x7fd845bccb19 [ 2659.063086] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2659.065116] RSP: 002b:00007fd843142188 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 2659.065969] RAX: ffffffffffffffda RBX: 00007fd845cdff60 RCX: 00007fd845bccb19 [ 2659.066766] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 2659.067546] RBP: 00007fd8431421d0 R08: 0000000000000000 R09: 0000000000000000 [ 2659.068357] R10: 00000000087ffffc R11: 0000000000000246 R12: 0000000000000002 07:05:54 executing program 2: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x204800, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x1) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002480)='fd/3\x00') fdatasync(0xffffffffffffffff) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x40}}, './file0\x00'}) preadv2(r2, &(0x7f0000001300)=[{&(0x7f0000000080)=""/193, 0xc1}, {&(0x7f0000000180)=""/250, 0xfa}, {&(0x7f0000000300)=""/4096, 0x1000}], 0x3, 0x80000000, 0x66, 0x18) openat(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r3, 0x0, 0x0, 0x87ffffc) (fail_nth: 32) 07:05:54 executing program 6: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) preadv(r0, &(0x7f00000011c0)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x7, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x0, 0x0, 0x87ffffc) mmap$perf(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000008, 0x1010, r2, 0x4) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000100), 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r3 = syz_open_procfs(0x0, 0x0) perf_event_open(&(0x7f0000001240)={0x1, 0x80, 0x9, 0xa1, 0xf9, 0x3, 0x0, 0x7, 0xa0400, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x3, @perf_config_ext={0x58d}, 0x21, 0x1, 0x0, 0x6, 0x9, 0x0, 0x8000, 0x0, 0x80, 0x0, 0x5}, 0xffffffffffffffff, 0x4, r3, 0x0) r4 = gettid() process_vm_readv(r4, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/4078, 0xfee}, {&(0x7f0000000000)=""/123, 0x7b}, {&(0x7f0000000100)=""/57, 0x39}], 0x3, &(0x7f0000000240)=[{&(0x7f0000012940)=""/102400, 0xffffff76}], 0x1, 0x0) perf_event_open(0x0, 0x0, 0x1, r3, 0x8) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/consoles\x00', 0x0, 0x0) 07:05:54 executing program 5: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) preadv(r0, &(0x7f00000011c0)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x7, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x0, 0x0, 0x87ffffc) (fail_nth: 32) mmap$perf(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000008, 0x1010, r2, 0x4) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000100), 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r3 = syz_open_procfs(0x0, 0x0) perf_event_open(&(0x7f0000001240)={0x1, 0x80, 0x9, 0xa1, 0xf9, 0x3, 0x0, 0x7, 0xa0400, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x3, @perf_config_ext={0x58d}, 0x21, 0x1, 0x0, 0x6, 0x9, 0x0, 0x8000, 0x0, 0x80, 0x0, 0x5}, 0xffffffffffffffff, 0x4, r3, 0x0) r4 = gettid() perf_event_open(0x0, r4, 0x1, r3, 0x8) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/consoles\x00', 0x0, 0x0) 07:05:54 executing program 1: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) preadv(r0, &(0x7f00000011c0)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x7, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x0, 0x0, 0x87ffffc) mmap$perf(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000008, 0x1010, r2, 0x4) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000100), 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r3 = syz_open_procfs(0x0, 0x0) preadv(r3, &(0x7f0000000080)=[{&(0x7f0000000000)=""/40, 0x40}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000001240)={0x1, 0x80, 0x9, 0xa1, 0xf9, 0x3, 0x0, 0x7, 0xa0400, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x3, @perf_config_ext={0x58d}, 0x21, 0x1, 0x0, 0x6, 0x9, 0x0, 0x8000, 0x0, 0x80, 0x0, 0x5}, 0xffffffffffffffff, 0x4, r3, 0x0) r4 = gettid() process_vm_readv(r4, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/4078, 0xfee}, {&(0x7f0000000000)=""/123, 0x7b}, {&(0x7f0000000100)=""/57, 0x39}], 0x3, 0x0, 0x0, 0x0) perf_event_open(0x0, r4, 0x1, r3, 0x8) 07:05:54 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f00000001c0)=0x8) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x14, 0x0, 0x0, 0x11}, 0x14}}, 0x0) 07:05:54 executing program 7: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000001340)) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x204800, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x1) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002480)='fd/3\x00') r2 = dup(r1) fdatasync(r2) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x40}}, './file0\x00'}) preadv2(r3, &(0x7f0000001300)=[{&(0x7f0000000080)=""/193, 0xc1}, {&(0x7f0000000180)=""/250, 0xfa}, {&(0x7f0000000300)=""/4096, 0x1000}], 0x3, 0x80000000, 0x66, 0x18) r4 = openat(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000001380)=0x100000) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r5, 0x201, 0x0, 0x87ffffc) sendfile(r5, r4, 0x0, 0x80000000) 07:05:54 executing program 0: openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r0, 0x0, 0x0, 0x87ffffc) mmap$perf(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000008, 0x10, 0xffffffffffffffff, 0x4) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x12, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = syz_open_procfs(0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001240)={0x1, 0x80, 0x0, 0xa1, 0x0, 0x0, 0x0, 0x7, 0xa0400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x3, @perf_config_ext, 0x21, 0x1, 0x0, 0x0, 0x9, 0x0, 0x8000, 0x0, 0x80, 0x0, 0x5}, 0xffffffffffffffff, 0x4, r1, 0x0) r2 = gettid() process_vm_readv(r2, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/4078, 0xfee}, {&(0x7f0000000000)=""/123, 0x7b}, {&(0x7f0000000100)=""/57, 0x39}], 0x3, &(0x7f0000000240)=[{&(0x7f0000012940)=""/102400, 0xffffff76}], 0x1fe, 0x0) perf_event_open(0x0, r2, 0x1, r1, 0x8) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/consoles\x00', 0x0, 0x0) [ 2659.069166] R13: 00007ffde12fa01f R14: 00007fd843142300 R15: 0000000000022000 [ 2659.070252] [ 2659.097217] FAULT_INJECTION: forcing a failure. [ 2659.097217] name failslab, interval 1, probability 0, space 0, times 0 [ 2659.098532] CPU: 0 PID: 13148 Comm: syz-executor.3 Not tainted 5.18.0-rc1-next-20220406 #1 [ 2659.099507] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2659.100798] Call Trace: [ 2659.101082] [ 2659.101330] dump_stack_lvl+0x8b/0xb3 [ 2659.101763] should_fail.cold+0x5/0xa [ 2659.102196] ? create_object.isra.0+0x3a/0xa20 [ 2659.102735] should_failslab+0x5/0x10 [ 2659.103171] kmem_cache_alloc+0x5b/0x480 [ 2659.103638] create_object.isra.0+0x3a/0xa20 [ 2659.104143] ? kasan_unpoison+0x23/0x50 [ 2659.104601] kmem_cache_alloc+0x239/0x480 [ 2659.105079] __pmd_alloc+0x94/0x680 [ 2659.105492] copy_page_range+0x32e6/0x4cc0 [ 2659.105957] ? lock_is_held_type+0xd7/0x130 [ 2659.106508] ? vm_iomap_memory+0x190/0x190 [ 2659.106980] ? down_write+0xde/0x150 [ 2659.107412] ? up_write+0x148/0x460 [ 2659.107835] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 2659.108408] ? __vma_link_rb+0x540/0x700 [ 2659.108884] dup_mm+0x961/0x1250 [ 2659.109289] ? replace_mm_exe_file+0x490/0x490 [ 2659.109808] ? __raw_spin_lock_init+0x36/0x110 [ 2659.110338] copy_process+0x698c/0x6db0 [ 2659.110809] ? __cleanup_sighand+0xb0/0xb0 [ 2659.111302] ? lock_release+0x3b2/0x750 [ 2659.111750] ? ksys_write+0x20c/0x250 [ 2659.112169] ? kernel_clone+0x2f8/0xa60 [ 2659.112627] kernel_clone+0xe7/0xa60 [ 2659.113046] ? find_held_lock+0x2c/0x110 [ 2659.113362] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13158 comm=syz-executor.4 [ 2659.113513] ? create_io_thread+0xf0/0xf0 [ 2659.116583] ? __mutex_unlock_slowpath+0x15c/0x5e0 [ 2659.117123] ? bit_wait_io_timeout+0x160/0x160 [ 2659.117660] ? lock_is_held_type+0xd7/0x130 [ 2659.118145] __do_sys_fork+0x8a/0xc0 [ 2659.118593] ? kernel_clone+0xa60/0xa60 [ 2659.119036] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 2659.119688] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2659.120272] ? lockdep_hardirqs_on+0x79/0x100 [ 2659.120796] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2659.121369] do_syscall_64+0x3b/0x90 [ 2659.121798] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2659.122371] RIP: 0033:0x7fc1c2a89b19 [ 2659.122805] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2659.124979] RSP: 002b:00007fc1bffff188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 2659.125817] RAX: ffffffffffffffda RBX: 00007fc1c2b9cf60 RCX: 00007fc1c2a89b19 [ 2659.126578] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13159 comm=syz-executor.4 [ 2659.126658] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2659.129977] RBP: 00007fc1bffff1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2659.130799] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2659.131638] R13: 00007fff0449096f R14: 00007fc1bffff300 R15: 0000000000022000 [ 2659.132480] [ 2659.166895] FAULT_INJECTION: forcing a failure. [ 2659.166895] name failslab, interval 1, probability 0, space 0, times 0 [ 2659.169544] CPU: 1 PID: 13160 Comm: syz-executor.5 Not tainted 5.18.0-rc1-next-20220406 #1 [ 2659.171390] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2659.173807] Call Trace: [ 2659.174376] [ 2659.174879] dump_stack_lvl+0x8b/0xb3 [ 2659.175753] should_fail.cold+0x5/0xa [ 2659.176622] ? create_object.isra.0+0x3a/0xa20 [ 2659.177640] should_failslab+0x5/0x10 [ 2659.178520] kmem_cache_alloc+0x5b/0x480 [ 2659.179457] create_object.isra.0+0x3a/0xa20 [ 2659.180444] ? kasan_unpoison+0x23/0x50 [ 2659.181339] kmem_cache_alloc+0x239/0x480 [ 2659.182284] ext4_mb_new_blocks+0x222c/0x4b60 [ 2659.183317] ? lock_is_held_type+0xd7/0x130 [ 2659.184300] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2659.185517] ? ext4_cache_extents+0x148/0x2d0 [ 2659.186506] ? ext4_discard_preallocations+0xe60/0xe60 [ 2659.187636] ? __sanitizer_cov_trace_const_cmp2+0x22/0x80 [ 2659.188831] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2659.190014] ? ext4_ext_search_right+0x2e3/0xbd0 [ 2659.191055] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2659.192256] ext4_ext_map_blocks+0x1fb0/0x5cd0 [ 2659.193261] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 2659.194391] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 2659.195550] ? ext4_ext_release+0x10/0x10 [ 2659.196456] ? lock_release+0x750/0x750 [ 2659.197326] ? lock_release+0x3b2/0x750 [ 2659.198204] ? lock_is_held_type+0xd7/0x130 [ 2659.199352] ? down_write_killable+0x170/0x170 [ 2659.200528] ext4_map_blocks+0x652/0x1970 [ 2659.201580] ? lock_is_held_type+0xd7/0x130 [ 2659.202694] ? ext4_issue_zeroout+0x1c0/0x1c0 [ 2659.203765] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 2659.204974] ? jbd2__journal_start+0xf3/0x8d0 [ 2659.205969] ? __ext4_journal_start_sb+0x392/0x470 [ 2659.207088] ? __ext4_journal_start_sb+0x1d5/0x470 [ 2659.208127] ext4_alloc_file_blocks.isra.0+0x2c1/0xb20 [ 2659.209271] ? ext4_ext_correct_indexes+0x440/0x440 [ 2659.210348] ? down_write_killable+0x170/0x170 [ 2659.211366] ext4_fallocate+0x1a2b/0x3c90 [ 2659.212260] ? lock_acquire+0x1b2/0x530 [ 2659.213127] ? lock_release+0x750/0x750 [ 2659.213976] ? ext4_ext_truncate+0x3e0/0x3e0 [ 2659.214960] ? lock_is_held_type+0xd7/0x130 [ 2659.215903] ? ext4_ext_truncate+0x3e0/0x3e0 [ 2659.216853] vfs_fallocate+0x489/0xe00 [ 2659.217710] __x64_sys_fallocate+0xcf/0x140 [ 2659.218663] do_syscall_64+0x3b/0x90 [ 2659.219469] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2659.220592] RIP: 0033:0x7f35817a9b19 [ 2659.221389] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2659.225343] RSP: 002b:00007f357ed1f188 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 2659.227017] RAX: ffffffffffffffda RBX: 00007f35818bcf60 RCX: 00007f35817a9b19 [ 2659.228553] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 2659.230087] RBP: 00007f357ed1f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2659.231621] R10: 00000000087ffffc R11: 0000000000000246 R12: 0000000000000002 [ 2659.233154] R13: 00007ffdd683fcbf R14: 00007f357ed1f300 R15: 0000000000022000 [ 2659.234722] 07:06:08 executing program 5: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) preadv(r0, &(0x7f00000011c0)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x7, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x0, 0x0, 0x87ffffc) (fail_nth: 33) mmap$perf(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000008, 0x1010, r2, 0x4) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000100), 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r3 = syz_open_procfs(0x0, 0x0) perf_event_open(&(0x7f0000001240)={0x1, 0x80, 0x9, 0xa1, 0xf9, 0x3, 0x0, 0x7, 0xa0400, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x3, @perf_config_ext={0x58d}, 0x21, 0x1, 0x0, 0x6, 0x9, 0x0, 0x8000, 0x0, 0x80, 0x0, 0x5}, 0xffffffffffffffff, 0x4, r3, 0x0) r4 = gettid() perf_event_open(0x0, r4, 0x1, r3, 0x8) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/consoles\x00', 0x0, 0x0) 07:06:08 executing program 7: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000001340)) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x204800, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x1) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002480)='fd/3\x00') r2 = dup(r1) fdatasync(r2) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x40}}, './file0\x00'}) preadv2(r3, &(0x7f0000001300)=[{&(0x7f0000000080)=""/193, 0xc1}, {&(0x7f0000000180)=""/250, 0xfa}, {&(0x7f0000000300)=""/4096, 0x1000}], 0x3, 0x80000000, 0x66, 0x18) r4 = openat(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000001380)=0x100000) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r5, 0x281, 0x0, 0x87ffffc) sendfile(r5, r4, 0x0, 0x80000000) 07:06:08 executing program 0: openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r0, 0x0, 0x0, 0x87ffffc) mmap$perf(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000008, 0x10, 0xffffffffffffffff, 0x4) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x12, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = syz_open_procfs(0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001240)={0x1, 0x80, 0x0, 0xa1, 0x0, 0x0, 0x0, 0x7, 0xa0400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x3, @perf_config_ext, 0x21, 0x1, 0x0, 0x0, 0x9, 0x0, 0x8000, 0x0, 0x80, 0x0, 0x5}, 0xffffffffffffffff, 0x4, r1, 0x0) r2 = gettid() process_vm_readv(r2, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/4078, 0xfee}, {&(0x7f0000000000)=""/123, 0x7b}, {&(0x7f0000000100)=""/57, 0x39}], 0x3, &(0x7f0000000240)=[{&(0x7f0000012940)=""/102400, 0xffffff76}], 0x201, 0x0) perf_event_open(0x0, r2, 0x1, r1, 0x8) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/consoles\x00', 0x0, 0x0) 07:06:08 executing program 1: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) preadv(r0, &(0x7f00000011c0)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x7, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x0, 0x0, 0x87ffffc) mmap$perf(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000008, 0x1010, r2, 0x4) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000100), 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r3 = syz_open_procfs(0x0, 0x0) preadv(r3, &(0x7f0000000080)=[{&(0x7f0000000000)=""/40, 0x40}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000001240)={0x1, 0x80, 0x9, 0xa1, 0xf9, 0x3, 0x0, 0x7, 0xa0400, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x3, @perf_config_ext={0x58d}, 0x21, 0x1, 0x0, 0x6, 0x9, 0x0, 0x8000, 0x0, 0x80, 0x0, 0x5}, 0xffffffffffffffff, 0x4, r3, 0x0) r4 = gettid() process_vm_readv(r4, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/4078, 0xfee}, {&(0x7f0000000000)=""/123, 0x7b}, {&(0x7f0000000100)=""/57, 0x39}], 0x3, &(0x7f0000000240), 0x0, 0x0) perf_event_open(0x0, r4, 0x1, r3, 0x8) 07:06:08 executing program 2: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x204800, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x1) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002480)='fd/3\x00') fdatasync(0xffffffffffffffff) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x40}}, './file0\x00'}) preadv2(r2, &(0x7f0000001300)=[{&(0x7f0000000080)=""/193, 0xc1}, {&(0x7f0000000180)=""/250, 0xfa}, {&(0x7f0000000300)=""/4096, 0x1000}], 0x3, 0x80000000, 0x66, 0x18) openat(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r3, 0x0, 0x0, 0x87ffffc) (fail_nth: 33) 07:06:08 executing program 6: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) preadv(r0, &(0x7f00000011c0)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x7, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x0, 0x0, 0x87ffffc) mmap$perf(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000008, 0x1010, r2, 0x4) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000100), 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r3 = syz_open_procfs(0x0, 0x0) perf_event_open(&(0x7f0000001240)={0x1, 0x80, 0x9, 0xa1, 0xf9, 0x3, 0x0, 0x7, 0xa0400, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x3, @perf_config_ext={0x58d}, 0x21, 0x1, 0x0, 0x6, 0x9, 0x0, 0x8000, 0x0, 0x80, 0x0, 0x5}, 0xffffffffffffffff, 0x4, r3, 0x0) r4 = gettid() process_vm_readv(r4, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/4078, 0xfee}, {&(0x7f0000000000)=""/123, 0x7b}, {&(0x7f0000000100)=""/57, 0x39}], 0x3, &(0x7f0000000240)=[{&(0x7f0000012940)=""/102400, 0xffffff76}], 0x1, 0x0) perf_event_open(0x0, 0x0, 0x1, r3, 0x8) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/consoles\x00', 0x0, 0x0) 07:06:08 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f00000001c0)=0x8) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x14, 0x0, 0x0, 0x12}, 0x14}}, 0x0) 07:06:08 executing program 3: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000040)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x300000c, 0x13, r0, 0x8000000) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xa) fork() (fail_nth: 39) [ 2673.122496] FAULT_INJECTION: forcing a failure. [ 2673.122496] name failslab, interval 1, probability 0, space 0, times 0 [ 2673.124386] CPU: 0 PID: 13175 Comm: syz-executor.5 Not tainted 5.18.0-rc1-next-20220406 #1 [ 2673.125641] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2673.127365] Call Trace: [ 2673.127741] [ 2673.128077] dump_stack_lvl+0x8b/0xb3 [ 2673.128663] should_fail.cold+0x5/0xa [ 2673.129249] ? jbd2__journal_start+0x18c/0x8d0 [ 2673.129954] should_failslab+0x5/0x10 [ 2673.130532] kmem_cache_alloc+0x5b/0x480 [ 2673.131166] jbd2__journal_start+0x18c/0x8d0 [ 2673.131857] __ext4_journal_start_sb+0x392/0x470 [ 2673.132588] ? __ext4_journal_stop+0x107/0x1f0 [ 2673.133304] ext4_alloc_file_blocks.isra.0+0x286/0xb20 [ 2673.134113] ? ext4_ext_correct_indexes+0x440/0x440 [ 2673.134903] ? down_write_killable+0x170/0x170 [ 2673.135617] ext4_fallocate+0x1a2b/0x3c90 [ 2673.136263] ? lock_acquire+0x1b2/0x530 [ 2673.136894] ? lock_release+0x750/0x750 [ 2673.137527] ? ext4_ext_truncate+0x3e0/0x3e0 [ 2673.138211] ? lock_is_held_type+0xd7/0x130 [ 2673.138582] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13183 comm=syz-executor.4 [ 2673.138891] ? ext4_ext_truncate+0x3e0/0x3e0 [ 2673.138915] vfs_fallocate+0x489/0xe00 [ 2673.142837] __x64_sys_fallocate+0xcf/0x140 [ 2673.143484] do_syscall_64+0x3b/0x90 [ 2673.144056] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2673.144880] RIP: 0033:0x7f35817a9b19 [ 2673.145457] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2673.148220] RSP: 002b:00007f357ed1f188 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 2673.149323] RAX: ffffffffffffffda RBX: 00007f35818bcf60 RCX: 00007f35817a9b19 [ 2673.150422] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 2673.151471] RBP: 00007f357ed1f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2673.152542] R10: 00000000087ffffc R11: 0000000000000246 R12: 0000000000000002 [ 2673.153574] R13: 00007ffdd683fcbf R14: 00007f357ed1f300 R15: 0000000000022000 [ 2673.153801] FAULT_INJECTION: forcing a failure. [ 2673.153801] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2673.154630] [ 2673.158069] CPU: 1 PID: 13184 Comm: syz-executor.3 Not tainted 5.18.0-rc1-next-20220406 #1 [ 2673.158588] FAULT_INJECTION: forcing a failure. [ 2673.158588] name failslab, interval 1, probability 0, space 0, times 0 [ 2673.159900] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2673.159918] Call Trace: [ 2673.159926] [ 2673.159936] dump_stack_lvl+0x8b/0xb3 [ 2673.159976] should_fail.cold+0x5/0xa [ 2673.160008] prepare_alloc_pages+0x17b/0x500 [ 2673.166922] __alloc_pages+0x131/0x4e0 [ 2673.167670] ? __alloc_pages_slowpath.constprop.0+0x1f10/0x1f10 [ 2673.168826] ? lock_is_held_type+0xd7/0x130 [ 2673.169660] ? find_held_lock+0x2c/0x110 [ 2673.170457] alloc_pages+0x1a0/0x2f0 [ 2673.171191] pte_alloc_one+0x16/0x1f0 [ 2673.171933] __pte_alloc+0x69/0x200 [ 2673.172631] ? pmd_install+0x250/0x250 [ 2673.173377] ? do_raw_spin_unlock+0x4f/0x210 [ 2673.174220] ? _raw_spin_unlock+0x24/0x40 [ 2673.175028] copy_page_range+0x207a/0x4cc0 [ 2673.175850] ? lock_is_held_type+0xd7/0x130 [ 2673.176737] ? vm_iomap_memory+0x190/0x190 [ 2673.177560] ? down_write+0xde/0x150 [ 2673.178305] ? up_write+0x148/0x460 [ 2673.179020] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 2673.180001] ? __vma_link_rb+0x540/0x700 [ 2673.180805] dup_mm+0x961/0x1250 [ 2673.181501] ? replace_mm_exe_file+0x490/0x490 [ 2673.182395] ? __raw_spin_lock_init+0x36/0x110 [ 2673.183313] copy_process+0x698c/0x6db0 [ 2673.184119] ? __cleanup_sighand+0xb0/0xb0 [ 2673.184969] ? lock_release+0x3b2/0x750 [ 2673.185745] ? ksys_write+0x20c/0x250 [ 2673.186481] ? kernel_clone+0x2f8/0xa60 [ 2673.187270] kernel_clone+0xe7/0xa60 [ 2673.188005] ? find_held_lock+0x2c/0x110 [ 2673.188796] ? create_io_thread+0xf0/0xf0 [ 2673.189615] ? __mutex_unlock_slowpath+0x15c/0x5e0 [ 2673.190585] ? bit_wait_io_timeout+0x160/0x160 [ 2673.191491] ? lock_is_held_type+0xd7/0x130 [ 2673.192347] __do_sys_fork+0x8a/0xc0 [ 2673.193078] ? kernel_clone+0xa60/0xa60 [ 2673.193875] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 2673.194989] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2673.196016] ? lockdep_hardirqs_on+0x79/0x100 [ 2673.196889] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2673.197908] do_syscall_64+0x3b/0x90 [ 2673.198648] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2673.199669] RIP: 0033:0x7fc1c2a89b19 [ 2673.200416] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2673.204026] RSP: 002b:00007fc1bffff188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 2673.205531] RAX: ffffffffffffffda RBX: 00007fc1c2b9cf60 RCX: 00007fc1c2a89b19 [ 2673.206950] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2673.208358] RBP: 00007fc1bffff1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2673.209772] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2673.211187] R13: 00007fff0449096f R14: 00007fc1bffff300 R15: 0000000000022000 [ 2673.212632] [ 2673.213087] CPU: 0 PID: 13180 Comm: syz-executor.2 Not tainted 5.18.0-rc1-next-20220406 #1 [ 2673.214259] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2673.215856] Call Trace: [ 2673.216215] [ 2673.216535] dump_stack_lvl+0x8b/0xb3 [ 2673.217074] should_fail.cold+0x5/0xa [ 2673.217610] ? __es_insert_extent+0x3a9/0x12f0 [ 2673.218248] should_failslab+0x5/0x10 [ 2673.218788] kmem_cache_alloc+0x5b/0x480 [ 2673.219357] __es_insert_extent+0x3a9/0x12f0 [ 2673.219997] ext4_es_insert_extent+0x2dc/0xbf0 [ 2673.220639] ? ext4_es_scan_clu+0x2e0/0x2e0 [ 2673.221236] ? _raw_read_unlock+0x24/0x40 [ 2673.221814] ? ext4_es_scan_range+0x116/0x240 [ 2673.222435] ? ext4_es_find_extent_range+0x570/0x570 [ 2673.223161] ? down_write_killable+0x170/0x170 [ 2673.223813] ext4_map_blocks+0x8e1/0x1970 [ 2673.224406] ? ext4_issue_zeroout+0x1c0/0x1c0 [ 2673.225028] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 2673.225800] ? jbd2__journal_start+0xf3/0x8d0 [ 2673.226429] ? __ext4_journal_start_sb+0x392/0x470 [ 2673.227123] ? __ext4_journal_start_sb+0x1d5/0x470 [ 2673.227806] ext4_alloc_file_blocks.isra.0+0x2c1/0xb20 [ 2673.228533] ? ext4_ext_correct_indexes+0x440/0x440 [ 2673.229226] ? down_write_killable+0x170/0x170 [ 2673.229880] ext4_fallocate+0x1a2b/0x3c90 [ 2673.230471] ? lock_acquire+0x1b2/0x530 [ 2673.231033] ? lock_release+0x750/0x750 [ 2673.231586] ? ext4_ext_truncate+0x3e0/0x3e0 [ 2673.232201] ? lock_is_held_type+0xd7/0x130 [ 2673.232771] ? ext4_ext_truncate+0x3e0/0x3e0 [ 2673.233375] vfs_fallocate+0x489/0xe00 [ 2673.233898] __x64_sys_fallocate+0xcf/0x140 [ 2673.234496] do_syscall_64+0x3b/0x90 [ 2673.235006] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2673.235714] RIP: 0033:0x7fd845bccb19 [ 2673.236202] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2673.238693] RSP: 002b:00007fd843142188 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 2673.239722] RAX: ffffffffffffffda RBX: 00007fd845cdff60 RCX: 00007fd845bccb19 [ 2673.240690] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 2673.241651] RBP: 00007fd8431421d0 R08: 0000000000000000 R09: 0000000000000000 [ 2673.242614] R10: 00000000087ffffc R11: 0000000000000246 R12: 0000000000000002 [ 2673.243600] R13: 00007ffde12fa01f R14: 00007fd843142300 R15: 0000000000022000 [ 2673.244587] [ 2673.252005] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13190 comm=syz-executor.4 07:06:09 executing program 2: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x204800, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x1) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002480)='fd/3\x00') fdatasync(0xffffffffffffffff) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x40}}, './file0\x00'}) preadv2(r2, &(0x7f0000001300)=[{&(0x7f0000000080)=""/193, 0xc1}, {&(0x7f0000000180)=""/250, 0xfa}, {&(0x7f0000000300)=""/4096, 0x1000}], 0x3, 0x80000000, 0x66, 0x18) openat(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r3, 0x0, 0x0, 0x87ffffc) (fail_nth: 34) 07:06:09 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f00000001c0)=0x8) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x14, 0x0, 0x0, 0x13}, 0x14}}, 0x0) 07:06:09 executing program 7: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000001340)) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x204800, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x1) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002480)='fd/3\x00') r2 = dup(r1) fdatasync(r2) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x40}}, './file0\x00'}) preadv2(r3, &(0x7f0000001300)=[{&(0x7f0000000080)=""/193, 0xc1}, {&(0x7f0000000180)=""/250, 0xfa}, {&(0x7f0000000300)=""/4096, 0x1000}], 0x3, 0x80000000, 0x66, 0x18) r4 = openat(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000001380)=0x100000) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r5, 0x282, 0x0, 0x87ffffc) sendfile(r5, r4, 0x0, 0x80000000) 07:06:09 executing program 1: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) preadv(r0, &(0x7f00000011c0)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x7, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x0, 0x0, 0x87ffffc) mmap$perf(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000008, 0x1010, r2, 0x4) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000100), 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r3 = syz_open_procfs(0x0, 0x0) preadv(r3, &(0x7f0000000080)=[{&(0x7f0000000000)=""/40, 0x40}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000001240)={0x1, 0x80, 0x9, 0xa1, 0xf9, 0x3, 0x0, 0x7, 0xa0400, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x3, @perf_config_ext={0x58d}, 0x21, 0x1, 0x0, 0x6, 0x9, 0x0, 0x8000, 0x0, 0x80, 0x0, 0x5}, 0xffffffffffffffff, 0x4, r3, 0x0) r4 = gettid() process_vm_readv(r4, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/4078, 0xfee}, {&(0x7f0000000000)=""/123, 0x7b}, {&(0x7f0000000100)=""/57, 0x39}], 0x3, &(0x7f0000000240), 0x0, 0x0) perf_event_open(0x0, r4, 0x1, r3, 0x8) 07:06:09 executing program 5: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) preadv(r0, &(0x7f00000011c0)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x7, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x0, 0x0, 0x87ffffc) (fail_nth: 34) mmap$perf(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000008, 0x1010, r2, 0x4) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000100), 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r3 = syz_open_procfs(0x0, 0x0) perf_event_open(&(0x7f0000001240)={0x1, 0x80, 0x9, 0xa1, 0xf9, 0x3, 0x0, 0x7, 0xa0400, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x3, @perf_config_ext={0x58d}, 0x21, 0x1, 0x0, 0x6, 0x9, 0x0, 0x8000, 0x0, 0x80, 0x0, 0x5}, 0xffffffffffffffff, 0x4, r3, 0x0) r4 = gettid() perf_event_open(0x0, r4, 0x1, r3, 0x8) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/consoles\x00', 0x0, 0x0) 07:06:09 executing program 0: openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r0, 0x0, 0x0, 0x87ffffc) mmap$perf(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000008, 0x10, 0xffffffffffffffff, 0x4) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x12, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = syz_open_procfs(0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001240)={0x1, 0x80, 0x0, 0xa1, 0x0, 0x0, 0x0, 0x7, 0xa0400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x3, @perf_config_ext, 0x21, 0x1, 0x0, 0x0, 0x9, 0x0, 0x8000, 0x0, 0x80, 0x0, 0x5}, 0xffffffffffffffff, 0x4, r1, 0x0) r2 = gettid() process_vm_readv(r2, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/4078, 0xfee}, {&(0x7f0000000000)=""/123, 0x7b}, {&(0x7f0000000100)=""/57, 0x39}], 0x3, &(0x7f0000000240)=[{&(0x7f0000012940)=""/102400, 0xffffff76}], 0x202, 0x0) perf_event_open(0x0, r2, 0x1, r1, 0x8) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/consoles\x00', 0x0, 0x0) [ 2673.404280] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13197 comm=syz-executor.4 [ 2673.413673] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13201 comm=syz-executor.4 [ 2673.417961] FAULT_INJECTION: forcing a failure. [ 2673.417961] name failslab, interval 1, probability 0, space 0, times 0 [ 2673.420008] CPU: 0 PID: 13194 Comm: syz-executor.2 Not tainted 5.18.0-rc1-next-20220406 #1 [ 2673.421027] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2673.422345] Call Trace: [ 2673.422657] [ 2673.422954] dump_stack_lvl+0x8b/0xb3 [ 2673.423422] should_fail.cold+0x5/0xa [ 2673.423880] ? create_object.isra.0+0x3a/0xa20 [ 2673.424435] should_failslab+0x5/0x10 [ 2673.424896] kmem_cache_alloc+0x5b/0x480 [ 2673.425395] create_object.isra.0+0x3a/0xa20 [ 2673.425934] ? kasan_unpoison+0x23/0x50 [ 2673.426418] kmem_cache_alloc+0x239/0x480 [ 2673.426936] ext4_mb_new_blocks+0x222c/0x4b60 [ 2673.427492] ? lock_is_held_type+0xd7/0x130 [ 2673.428029] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2673.428706] ? ext4_cache_extents+0x148/0x2d0 [ 2673.429261] ? ext4_discard_preallocations+0xe60/0xe60 [ 2673.429894] ? __sanitizer_cov_trace_const_cmp2+0x22/0x80 [ 2673.430556] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2673.431231] ? ext4_ext_search_right+0x2e3/0xbd0 [ 2673.431807] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2673.432476] ext4_ext_map_blocks+0x1fb0/0x5cd0 [ 2673.433024] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 2673.433664] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 2673.434306] ? ext4_ext_release+0x10/0x10 [ 2673.434827] ? lock_release+0x750/0x750 [ 2673.435306] ? lock_release+0x3b2/0x750 [ 2673.435793] ? lock_is_held_type+0xd7/0x130 [ 2673.436331] ? down_write_killable+0x170/0x170 [ 2673.436890] ext4_map_blocks+0x652/0x1970 [ 2673.437401] ? lock_is_held_type+0xd7/0x130 [ 2673.437928] ? ext4_issue_zeroout+0x1c0/0x1c0 [ 2673.438475] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 2673.439149] ? jbd2__journal_start+0xf3/0x8d0 [ 2673.439696] ? __ext4_journal_start_sb+0x392/0x470 [ 2673.440295] ? __ext4_journal_start_sb+0x1d5/0x470 [ 2673.440889] ext4_alloc_file_blocks.isra.0+0x2c1/0xb20 [ 2673.441520] ? ext4_ext_correct_indexes+0x440/0x440 [ 2673.442116] ? down_write_killable+0x170/0x170 [ 2673.442685] ext4_fallocate+0x1a2b/0x3c90 [ 2673.443192] ? lock_acquire+0x1b2/0x530 [ 2673.443674] ? lock_release+0x750/0x750 [ 2673.444160] ? ext4_ext_truncate+0x3e0/0x3e0 [ 2673.444692] ? lock_is_held_type+0xd7/0x130 [ 2673.445213] ? ext4_ext_truncate+0x3e0/0x3e0 [ 2673.445740] vfs_fallocate+0x489/0xe00 [ 2673.446222] __x64_sys_fallocate+0xcf/0x140 [ 2673.446757] do_syscall_64+0x3b/0x90 [ 2673.447198] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2673.447824] RIP: 0033:0x7fd845bccb19 [ 2673.448268] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2673.450472] RSP: 002b:00007fd843142188 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 2673.451402] RAX: ffffffffffffffda RBX: 00007fd845cdff60 RCX: 00007fd845bccb19 [ 2673.452246] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 2673.453085] RBP: 00007fd8431421d0 R08: 0000000000000000 R09: 0000000000000000 [ 2673.453943] R10: 00000000087ffffc R11: 0000000000000246 R12: 0000000000000002 [ 2673.454802] R13: 00007ffde12fa01f R14: 00007fd843142300 R15: 0000000000022000 [ 2673.455659] 07:06:09 executing program 6: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) preadv(r0, &(0x7f00000011c0)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x7, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x0, 0x0, 0x87ffffc) mmap$perf(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000008, 0x1010, r2, 0x4) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000100), 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r3 = syz_open_procfs(0x0, 0x0) perf_event_open(&(0x7f0000001240)={0x1, 0x80, 0x9, 0xa1, 0xf9, 0x3, 0x0, 0x7, 0xa0400, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x3, @perf_config_ext={0x58d}, 0x21, 0x1, 0x0, 0x6, 0x9, 0x0, 0x8000, 0x0, 0x80, 0x0, 0x5}, 0xffffffffffffffff, 0x4, r3, 0x0) r4 = gettid() process_vm_readv(r4, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/4078, 0xfee}, {&(0x7f0000000000)=""/123, 0x7b}, {&(0x7f0000000100)=""/57, 0x39}], 0x3, &(0x7f0000000240)=[{&(0x7f0000012940)=""/102400, 0xffffff76}], 0x1, 0x0) perf_event_open(0x0, r4, 0x0, r3, 0x8) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/consoles\x00', 0x0, 0x0) 07:06:09 executing program 3: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000040)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x300000c, 0x13, r0, 0x8000000) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xa) fork() (fail_nth: 40) 07:06:09 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f00000001c0)=0x8) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x14, 0x0, 0x0, 0x14}, 0x14}}, 0x0) 07:06:09 executing program 7: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000001340)) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x204800, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x1) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002480)='fd/3\x00') r2 = dup(r1) fdatasync(r2) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x40}}, './file0\x00'}) preadv2(r3, &(0x7f0000001300)=[{&(0x7f0000000080)=""/193, 0xc1}, {&(0x7f0000000180)=""/250, 0xfa}, {&(0x7f0000000300)=""/4096, 0x1000}], 0x3, 0x80000000, 0x66, 0x18) r4 = openat(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000001380)=0x100000) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r5, 0x300, 0x0, 0x87ffffc) sendfile(r5, r4, 0x0, 0x80000000) 07:06:09 executing program 1: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) preadv(r0, &(0x7f00000011c0)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x7, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x0, 0x0, 0x87ffffc) mmap$perf(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000008, 0x1010, r2, 0x4) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000100), 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r3 = syz_open_procfs(0x0, 0x0) preadv(r3, &(0x7f0000000080)=[{&(0x7f0000000000)=""/40, 0x40}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000001240)={0x1, 0x80, 0x9, 0xa1, 0xf9, 0x3, 0x0, 0x7, 0xa0400, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x3, @perf_config_ext={0x58d}, 0x21, 0x1, 0x0, 0x6, 0x9, 0x0, 0x8000, 0x0, 0x80, 0x0, 0x5}, 0xffffffffffffffff, 0x4, r3, 0x0) r4 = gettid() process_vm_readv(r4, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/4078, 0xfee}, {&(0x7f0000000000)=""/123, 0x7b}, {&(0x7f0000000100)=""/57, 0x39}], 0x3, &(0x7f0000000240), 0x0, 0x0) perf_event_open(0x0, r4, 0x1, r3, 0x8) [ 2673.541539] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13212 comm=syz-executor.4 [ 2673.542160] FAULT_INJECTION: forcing a failure. [ 2673.542160] name failslab, interval 1, probability 0, space 0, times 0 [ 2673.545339] CPU: 1 PID: 13207 Comm: syz-executor.5 Not tainted 5.18.0-rc1-next-20220406 #1 [ 2673.547033] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2673.549313] Call Trace: [ 2673.549827] [ 2673.550290] dump_stack_lvl+0x8b/0xb3 [ 2673.551100] should_fail.cold+0x5/0xa [ 2673.551731] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13214 comm=syz-executor.4 [ 2673.551872] ? ext4_mb_new_blocks+0x222c/0x4b60 [ 2673.554112] should_failslab+0x5/0x10 [ 2673.554892] kmem_cache_alloc+0x5b/0x480 [ 2673.555740] ext4_mb_new_blocks+0x222c/0x4b60 [ 2673.556676] ? lock_is_held_type+0xd7/0x130 [ 2673.557576] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2673.558702] ? ext4_cache_extents+0x148/0x2d0 [ 2673.559601] ? ext4_discard_preallocations+0xe60/0xe60 [ 2673.560675] ? __sanitizer_cov_trace_const_cmp2+0x22/0x80 [ 2673.561790] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2673.562936] ? ext4_ext_search_right+0x2e3/0xbd0 [ 2673.563887] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2673.565010] ext4_ext_map_blocks+0x1fb0/0x5cd0 [ 2673.565938] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 2673.567018] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 2673.568090] ? ext4_ext_release+0x10/0x10 [ 2673.568948] ? lock_release+0x750/0x750 [ 2673.569751] ? lock_release+0x3b2/0x750 [ 2673.570569] ? lock_is_held_type+0xd7/0x130 [ 2673.571483] ? down_write_killable+0x170/0x170 [ 2673.572430] ext4_map_blocks+0x652/0x1970 [ 2673.573274] ? lock_is_held_type+0xd7/0x130 [ 2673.574164] ? ext4_issue_zeroout+0x1c0/0x1c0 [ 2673.575081] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 2673.576186] ? jbd2__journal_start+0xf3/0x8d0 [ 2673.577105] ? __ext4_journal_start_sb+0x392/0x470 [ 2673.578088] ? __ext4_journal_start_sb+0x1d5/0x470 [ 2673.579085] ext4_alloc_file_blocks.isra.0+0x2c1/0xb20 [ 2673.580154] ? ext4_ext_correct_indexes+0x440/0x440 [ 2673.581169] ? down_write_killable+0x170/0x170 [ 2673.582095] ext4_fallocate+0x1a2b/0x3c90 [ 2673.582962] ? lock_acquire+0x1b2/0x530 [ 2673.583775] ? lock_release+0x750/0x750 [ 2673.584596] ? ext4_ext_truncate+0x3e0/0x3e0 [ 2673.585484] ? lock_is_held_type+0xd7/0x130 [ 2673.586371] ? ext4_ext_truncate+0x3e0/0x3e0 [ 2673.587264] vfs_fallocate+0x489/0xe00 [ 2673.588062] __x64_sys_fallocate+0xcf/0x140 [ 2673.588938] do_syscall_64+0x3b/0x90 [ 2673.589696] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2673.590760] RIP: 0033:0x7f35817a9b19 [ 2673.591505] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2673.595155] RSP: 002b:00007f357ed1f188 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 2673.596665] RAX: ffffffffffffffda RBX: 00007f35818bcf60 RCX: 00007f35817a9b19 [ 2673.598075] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 2673.599516] RBP: 00007f357ed1f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2673.600922] R10: 00000000087ffffc R11: 0000000000000246 R12: 0000000000000002 [ 2673.602358] R13: 00007ffdd683fcbf R14: 00007f357ed1f300 R15: 0000000000022000 [ 2673.603810] 07:06:09 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f00000001c0)=0x8) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x14, 0x0, 0x0, 0x15}, 0x14}}, 0x0) [ 2673.639431] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13221 comm=syz-executor.4 [ 2673.641700] FAULT_INJECTION: forcing a failure. [ 2673.641700] name failslab, interval 1, probability 0, space 0, times 0 [ 2673.644045] CPU: 1 PID: 13220 Comm: syz-executor.3 Not tainted 5.18.0-rc1-next-20220406 #1 [ 2673.645719] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2673.648008] Call Trace: [ 2673.648528] [ 2673.648986] dump_stack_lvl+0x8b/0xb3 [ 2673.649768] should_fail.cold+0x5/0xa [ 2673.650533] ? __pmd_alloc+0x94/0x680 [ 2673.651335] should_failslab+0x5/0x10 [ 2673.652086] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13224 comm=syz-executor.4 [ 2673.652111] kmem_cache_alloc+0x5b/0x480 [ 2673.654233] ? alloc_pages+0x1a8/0x2f0 [ 2673.655040] __pmd_alloc+0x94/0x680 [ 2673.655781] copy_page_range+0x32e6/0x4cc0 [ 2673.656656] ? lock_is_held_type+0xd7/0x130 [ 2673.657587] ? vm_iomap_memory+0x190/0x190 [ 2673.658435] ? down_write+0xde/0x150 [ 2673.659196] ? up_write+0x148/0x460 [ 2673.659934] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 2673.660941] ? __vma_link_rb+0x540/0x700 [ 2673.661766] dup_mm+0x961/0x1250 [ 2673.662476] ? replace_mm_exe_file+0x490/0x490 [ 2673.663446] ? __raw_spin_lock_init+0x36/0x110 [ 2673.664376] copy_process+0x698c/0x6db0 [ 2673.665224] ? __cleanup_sighand+0xb0/0xb0 [ 2673.666087] ? lock_release+0x3b2/0x750 [ 2673.666899] ? ksys_write+0x20c/0x250 [ 2673.667661] ? kernel_clone+0x2f8/0xa60 [ 2673.668465] kernel_clone+0xe7/0xa60 [ 2673.669218] ? find_held_lock+0x2c/0x110 [ 2673.670027] ? create_io_thread+0xf0/0xf0 [ 2673.670881] ? __mutex_unlock_slowpath+0x15c/0x5e0 [ 2673.671852] ? bit_wait_io_timeout+0x160/0x160 [ 2673.672767] ? lock_is_held_type+0xd7/0x130 [ 2673.673647] __do_sys_fork+0x8a/0xc0 [ 2673.674409] ? kernel_clone+0xa60/0xa60 [ 2673.675235] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 2673.676354] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2673.677391] ? lockdep_hardirqs_on+0x79/0x100 [ 2673.678293] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2673.679343] do_syscall_64+0x3b/0x90 [ 2673.680095] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2673.681138] RIP: 0033:0x7fc1c2a89b19 [ 2673.681878] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2673.685533] RSP: 002b:00007fc1bffff188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 2673.687058] RAX: ffffffffffffffda RBX: 00007fc1c2b9cf60 RCX: 00007fc1c2a89b19 [ 2673.688488] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2673.689900] RBP: 00007fc1bffff1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2673.691330] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2673.692761] R13: 00007fff0449096f R14: 00007fc1bffff300 R15: 0000000000022000 [ 2673.694210] 07:06:25 executing program 2: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x204800, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x1) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002480)='fd/3\x00') fdatasync(0xffffffffffffffff) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x40}}, './file0\x00'}) preadv2(r2, &(0x7f0000001300)=[{&(0x7f0000000080)=""/193, 0xc1}, {&(0x7f0000000180)=""/250, 0xfa}, {&(0x7f0000000300)=""/4096, 0x1000}], 0x3, 0x80000000, 0x66, 0x18) openat(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r3, 0x0, 0x0, 0x87ffffc) (fail_nth: 35) 07:06:25 executing program 6: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) preadv(r0, &(0x7f00000011c0)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x7, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x0, 0x0, 0x87ffffc) mmap$perf(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000008, 0x1010, r2, 0x4) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000100), 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r3 = syz_open_procfs(0x0, 0x0) perf_event_open(&(0x7f0000001240)={0x1, 0x80, 0x9, 0xa1, 0xf9, 0x3, 0x0, 0x7, 0xa0400, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x3, @perf_config_ext={0x58d}, 0x21, 0x1, 0x0, 0x6, 0x9, 0x0, 0x8000, 0x0, 0x80, 0x0, 0x5}, 0xffffffffffffffff, 0x4, r3, 0x0) r4 = gettid() process_vm_readv(r4, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/4078, 0xfee}, {&(0x7f0000000000)=""/123, 0x7b}, {&(0x7f0000000100)=""/57, 0x39}], 0x3, &(0x7f0000000240)=[{&(0x7f0000012940)=""/102400, 0xffffff76}], 0x1, 0x0) perf_event_open(0x0, r4, 0x0, r3, 0x8) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/consoles\x00', 0x0, 0x0) 07:06:25 executing program 3: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000040)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x300000c, 0x13, r0, 0x8000000) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xa) fork() (fail_nth: 41) 07:06:25 executing program 1: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) preadv(r0, &(0x7f00000011c0)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x7, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x0, 0x0, 0x87ffffc) mmap$perf(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000008, 0x1010, r2, 0x4) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000100), 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r3 = syz_open_procfs(0x0, 0x0) preadv(r3, &(0x7f0000000080)=[{&(0x7f0000000000)=""/40, 0x40}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000001240)={0x1, 0x80, 0x9, 0xa1, 0xf9, 0x3, 0x0, 0x7, 0xa0400, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x3, @perf_config_ext={0x58d}, 0x21, 0x1, 0x0, 0x6, 0x9, 0x0, 0x8000, 0x0, 0x80, 0x0, 0x5}, 0xffffffffffffffff, 0x4, r3, 0x0) r4 = gettid() process_vm_readv(r4, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/4078, 0xfee}, {&(0x7f0000000000)=""/123, 0x7b}, {&(0x7f0000000100)=""/57, 0x39}], 0x3, &(0x7f0000000240)=[{0x0}], 0x1, 0x0) perf_event_open(0x0, r4, 0x1, r3, 0x8) 07:06:25 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f00000001c0)=0x8) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x14, 0x0, 0x0, 0x16}, 0x14}}, 0x0) 07:06:25 executing program 0: openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r0, 0x0, 0x0, 0x87ffffc) mmap$perf(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000008, 0x10, 0xffffffffffffffff, 0x4) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x12, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = syz_open_procfs(0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001240)={0x1, 0x80, 0x0, 0xa1, 0x0, 0x0, 0x0, 0x7, 0xa0400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x3, @perf_config_ext, 0x21, 0x1, 0x0, 0x0, 0x9, 0x0, 0x8000, 0x0, 0x80, 0x0, 0x5}, 0xffffffffffffffff, 0x4, r1, 0x0) r2 = gettid() process_vm_readv(r2, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/4078, 0xfee}, {&(0x7f0000000000)=""/123, 0x7b}, {&(0x7f0000000100)=""/57, 0x39}], 0x3, &(0x7f0000000240)=[{&(0x7f0000012940)=""/102400, 0xffffff76}], 0x203, 0x0) perf_event_open(0x0, r2, 0x1, r1, 0x8) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/consoles\x00', 0x0, 0x0) 07:06:25 executing program 5: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) preadv(r0, &(0x7f00000011c0)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x7, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x0, 0x0, 0x87ffffc) (fail_nth: 35) mmap$perf(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000008, 0x1010, r2, 0x4) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000100), 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r3 = syz_open_procfs(0x0, 0x0) perf_event_open(&(0x7f0000001240)={0x1, 0x80, 0x9, 0xa1, 0xf9, 0x3, 0x0, 0x7, 0xa0400, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x3, @perf_config_ext={0x58d}, 0x21, 0x1, 0x0, 0x6, 0x9, 0x0, 0x8000, 0x0, 0x80, 0x0, 0x5}, 0xffffffffffffffff, 0x4, r3, 0x0) r4 = gettid() perf_event_open(0x0, r4, 0x1, r3, 0x8) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/consoles\x00', 0x0, 0x0) 07:06:25 executing program 7: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000001340)) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x204800, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x1) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002480)='fd/3\x00') r2 = dup(r1) fdatasync(r2) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x40}}, './file0\x00'}) preadv2(r3, &(0x7f0000001300)=[{&(0x7f0000000080)=""/193, 0xc1}, {&(0x7f0000000180)=""/250, 0xfa}, {&(0x7f0000000300)=""/4096, 0x1000}], 0x3, 0x80000000, 0x66, 0x18) r4 = openat(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000001380)=0x100000) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r5, 0x301, 0x0, 0x87ffffc) sendfile(r5, r4, 0x0, 0x80000000) [ 2690.002403] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13246 comm=syz-executor.4 [ 2690.005132] FAULT_INJECTION: forcing a failure. [ 2690.005132] name failslab, interval 1, probability 0, space 0, times 0 [ 2690.009426] CPU: 0 PID: 13240 Comm: syz-executor.5 Not tainted 5.18.0-rc1-next-20220406 #1 [ 2690.009522] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13248 comm=syz-executor.4 [ 2690.011332] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2690.015119] Call Trace: [ 2690.015633] FAULT_INJECTION: forcing a failure. [ 2690.015633] name failslab, interval 1, probability 0, space 0, times 0 [ 2690.015699] [ 2690.017354] dump_stack_lvl+0x8b/0xb3 [ 2690.018239] should_fail.cold+0x5/0xa [ 2690.019107] ? ext4_find_extent+0xa39/0xd20 [ 2690.020053] should_failslab+0x5/0x10 [ 2690.020891] __kmalloc+0x72/0x440 [ 2690.021674] ext4_find_extent+0xa39/0xd20 [ 2690.022600] ext4_ext_map_blocks+0x1c8/0x5cd0 [ 2690.023617] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 2690.024770] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 2690.025936] ? ext4_ext_release+0x10/0x10 [ 2690.026863] ? lock_acquire+0x1b2/0x530 [ 2690.027759] ? lock_release+0x750/0x750 [ 2690.028643] ? lock_release+0x3b2/0x750 [ 2690.029537] ? lock_is_held_type+0xd7/0x130 [ 2690.030519] ? down_write+0xde/0x150 [ 2690.031370] ? down_write_killable+0x170/0x170 [ 2690.032400] ext4_map_blocks+0x652/0x1970 [ 2690.033340] ? lock_is_held_type+0xd7/0x130 [ 2690.034308] ? ext4_issue_zeroout+0x1c0/0x1c0 [ 2690.035319] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 2690.036533] ? jbd2__journal_start+0xf3/0x8d0 [ 2690.037526] ? __ext4_journal_start_sb+0x392/0x470 [ 2690.038587] ? __ext4_journal_start_sb+0x1d5/0x470 [ 2690.039675] ext4_alloc_file_blocks.isra.0+0x2c1/0xb20 [ 2690.040823] ? ext4_ext_correct_indexes+0x440/0x440 [ 2690.041949] ? down_write_killable+0x170/0x170 [ 2690.042984] ext4_fallocate+0x1a2b/0x3c90 [ 2690.043909] ? lock_acquire+0x1b2/0x530 [ 2690.044784] ? lock_release+0x750/0x750 [ 2690.045664] ? ext4_ext_truncate+0x3e0/0x3e0 [ 2690.046625] ? lock_is_held_type+0xd7/0x130 [ 2690.047590] ? ext4_ext_truncate+0x3e0/0x3e0 [ 2690.048553] vfs_fallocate+0x489/0xe00 [ 2690.049425] __x64_sys_fallocate+0xcf/0x140 [ 2690.050386] do_syscall_64+0x3b/0x90 [ 2690.051209] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2690.052354] RIP: 0033:0x7f35817a9b19 [ 2690.053148] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2690.057099] RSP: 002b:00007f357ed1f188 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 2690.058742] RAX: ffffffffffffffda RBX: 00007f35818bcf60 RCX: 00007f35817a9b19 [ 2690.060283] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 2690.061797] RBP: 00007f357ed1f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2690.063327] R10: 00000000087ffffc R11: 0000000000000246 R12: 0000000000000002 [ 2690.064846] R13: 00007ffdd683fcbf R14: 00007f357ed1f300 R15: 0000000000022000 [ 2690.066396] [ 2690.066899] CPU: 1 PID: 13247 Comm: syz-executor.3 Not tainted 5.18.0-rc1-next-20220406 #1 [ 2690.067791] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2690.068964] Call Trace: [ 2690.069232] [ 2690.069464] dump_stack_lvl+0x8b/0xb3 [ 2690.069875] should_fail.cold+0x5/0xa [ 2690.070277] ? create_object.isra.0+0x3a/0xa20 [ 2690.070751] should_failslab+0x5/0x10 [ 2690.071168] kmem_cache_alloc+0x5b/0x480 [ 2690.071605] create_object.isra.0+0x3a/0xa20 [ 2690.072077] ? kasan_unpoison+0x23/0x50 [ 2690.072499] kmem_cache_alloc+0x239/0x480 [ 2690.072944] ptlock_alloc+0x1d/0x70 [ 2690.073327] pte_alloc_one+0x68/0x1f0 [ 2690.073730] __pte_alloc+0x69/0x200 [ 2690.074145] ? pmd_install+0x250/0x250 [ 2690.074611] ? do_raw_spin_unlock+0x4f/0x210 [ 2690.075249] ? _raw_spin_unlock+0x24/0x40 [ 2690.075726] copy_page_range+0x207a/0x4cc0 [ 2690.076169] ? lock_is_held_type+0xd7/0x130 [ 2690.076711] ? vm_iomap_memory+0x190/0x190 [ 2690.077269] ? down_write+0xde/0x150 [ 2690.077793] ? up_write+0x148/0x460 [ 2690.078248] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 2690.078859] ? __vma_link_rb+0x540/0x700 [ 2690.079347] dup_mm+0x961/0x1250 [ 2690.079745] ? replace_mm_exe_file+0x490/0x490 [ 2690.080266] ? __raw_spin_lock_init+0x36/0x110 [ 2690.080881] copy_process+0x698c/0x6db0 [ 2690.081428] ? __cleanup_sighand+0xb0/0xb0 [ 2690.081969] ? lock_release+0x3b2/0x750 [ 2690.082429] ? ksys_write+0x20c/0x250 [ 2690.082957] ? kernel_clone+0x2f8/0xa60 [ 2690.083393] kernel_clone+0xe7/0xa60 [ 2690.083788] ? find_held_lock+0x2c/0x110 [ 2690.084217] ? create_io_thread+0xf0/0xf0 [ 2690.084705] ? __mutex_unlock_slowpath+0x15c/0x5e0 [ 2690.085364] ? bit_wait_io_timeout+0x160/0x160 [ 2690.085856] ? lock_is_held_type+0xd7/0x130 [ 2690.086351] __do_sys_fork+0x8a/0xc0 [ 2690.086910] ? kernel_clone+0xa60/0xa60 [ 2690.087441] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 2690.088200] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2690.088906] ? lockdep_hardirqs_on+0x79/0x100 [ 2690.089510] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2690.090189] do_syscall_64+0x3b/0x90 [ 2690.090604] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2690.091150] RIP: 0033:0x7fc1c2a89b19 [ 2690.091646] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2690.093924] RSP: 002b:00007fc1bffff188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 2690.094862] RAX: ffffffffffffffda RBX: 00007fc1c2b9cf60 RCX: 00007fc1c2a89b19 [ 2690.095838] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2690.096668] RBP: 00007fc1bffff1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2690.097661] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2690.098584] R13: 00007fff0449096f R14: 00007fc1bffff300 R15: 0000000000022000 [ 2690.099486] [ 2690.124763] FAULT_INJECTION: forcing a failure. [ 2690.124763] name failslab, interval 1, probability 0, space 0, times 0 [ 2690.126159] CPU: 1 PID: 13236 Comm: syz-executor.2 Not tainted 5.18.0-rc1-next-20220406 #1 [ 2690.127040] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2690.128244] Call Trace: [ 2690.128512] [ 2690.128749] dump_stack_lvl+0x8b/0xb3 [ 2690.129250] should_fail.cold+0x5/0xa [ 2690.129724] ? ext4_find_extent+0xa39/0xd20 [ 2690.130193] should_failslab+0x5/0x10 [ 2690.130599] __kmalloc+0x72/0x440 [ 2690.131074] ext4_find_extent+0xa39/0xd20 [ 2690.131568] ext4_ext_map_blocks+0x1c8/0x5cd0 [ 2690.132141] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 2690.132744] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 2690.133443] ? ext4_ext_release+0x10/0x10 [ 2690.133884] ? lock_acquire+0x1b2/0x530 [ 2690.134448] ? lock_release+0x750/0x750 [ 2690.134927] ? lock_release+0x3b2/0x750 [ 2690.135429] ? lock_is_held_type+0xd7/0x130 [ 2690.135907] ? down_write+0xde/0x150 [ 2690.136427] ? down_write_killable+0x170/0x170 [ 2690.136968] ext4_map_blocks+0x652/0x1970 [ 2690.137491] ? lock_is_held_type+0xd7/0x130 [ 2690.137999] ? ext4_issue_zeroout+0x1c0/0x1c0 [ 2690.138559] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 2690.139208] ? jbd2__journal_start+0xf3/0x8d0 [ 2690.139775] ? __ext4_journal_start_sb+0x392/0x470 [ 2690.140360] ? __ext4_journal_start_sb+0x1d5/0x470 [ 2690.140939] ext4_alloc_file_blocks.isra.0+0x2c1/0xb20 [ 2690.141624] ? ext4_ext_correct_indexes+0x440/0x440 [ 2690.142302] ? down_write_killable+0x170/0x170 [ 2690.142907] ext4_fallocate+0x1a2b/0x3c90 [ 2690.143480] ? lock_acquire+0x1b2/0x530 [ 2690.144007] ? lock_release+0x750/0x750 [ 2690.144452] ? ext4_ext_truncate+0x3e0/0x3e0 [ 2690.145023] ? lock_is_held_type+0xd7/0x130 [ 2690.145630] ? ext4_ext_truncate+0x3e0/0x3e0 [ 2690.146222] vfs_fallocate+0x489/0xe00 [ 2690.146680] __x64_sys_fallocate+0xcf/0x140 [ 2690.147259] do_syscall_64+0x3b/0x90 [ 2690.147803] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2690.148484] RIP: 0033:0x7fd845bccb19 [ 2690.148991] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2690.151353] RSP: 002b:00007fd843142188 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 2690.152409] RAX: ffffffffffffffda RBX: 00007fd845cdff60 RCX: 00007fd845bccb19 [ 2690.153294] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 2690.154261] RBP: 00007fd8431421d0 R08: 0000000000000000 R09: 0000000000000000 [ 2690.155220] R10: 00000000087ffffc R11: 0000000000000246 R12: 0000000000000002 [ 2690.156226] R13: 00007ffde12fa01f R14: 00007fd843142300 R15: 0000000000022000 [ 2690.157164] 07:06:25 executing program 7: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000001340)) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x204800, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x1) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002480)='fd/3\x00') r2 = dup(r1) fdatasync(r2) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x40}}, './file0\x00'}) preadv2(r3, &(0x7f0000001300)=[{&(0x7f0000000080)=""/193, 0xc1}, {&(0x7f0000000180)=""/250, 0xfa}, {&(0x7f0000000300)=""/4096, 0x1000}], 0x3, 0x80000000, 0x66, 0x18) r4 = openat(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000001380)=0x100000) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r5, 0x408, 0x0, 0x87ffffc) sendfile(r5, r4, 0x0, 0x80000000) 07:06:25 executing program 5: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) preadv(r0, &(0x7f00000011c0)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x7, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x0, 0x0, 0x87ffffc) (fail_nth: 36) mmap$perf(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000008, 0x1010, r2, 0x4) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000100), 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r3 = syz_open_procfs(0x0, 0x0) perf_event_open(&(0x7f0000001240)={0x1, 0x80, 0x9, 0xa1, 0xf9, 0x3, 0x0, 0x7, 0xa0400, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x3, @perf_config_ext={0x58d}, 0x21, 0x1, 0x0, 0x6, 0x9, 0x0, 0x8000, 0x0, 0x80, 0x0, 0x5}, 0xffffffffffffffff, 0x4, r3, 0x0) r4 = gettid() perf_event_open(0x0, r4, 0x1, r3, 0x8) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/consoles\x00', 0x0, 0x0) 07:06:25 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f00000001c0)=0x8) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x14, 0x0, 0x0, 0x18}, 0x14}}, 0x0) 07:06:26 executing program 1: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) preadv(r0, &(0x7f00000011c0)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x7, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x0, 0x0, 0x87ffffc) mmap$perf(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000008, 0x1010, r2, 0x4) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000100), 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r3 = syz_open_procfs(0x0, 0x0) preadv(r3, &(0x7f0000000080)=[{&(0x7f0000000000)=""/40, 0x40}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000001240)={0x1, 0x80, 0x9, 0xa1, 0xf9, 0x3, 0x0, 0x7, 0xa0400, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x3, @perf_config_ext={0x58d}, 0x21, 0x1, 0x0, 0x6, 0x9, 0x0, 0x8000, 0x0, 0x80, 0x0, 0x5}, 0xffffffffffffffff, 0x4, r3, 0x0) r4 = gettid() process_vm_readv(r4, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/4078, 0xfee}, {&(0x7f0000000000)=""/123, 0x7b}, {&(0x7f0000000100)=""/57, 0x39}], 0x3, &(0x7f0000000240)=[{0x0}], 0x1, 0x0) perf_event_open(0x0, r4, 0x1, r3, 0x8) [ 2690.274478] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13263 comm=syz-executor.4 [ 2690.288951] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13264 comm=syz-executor.4 [ 2690.293719] FAULT_INJECTION: forcing a failure. [ 2690.293719] name failslab, interval 1, probability 0, space 0, times 0 [ 2690.295227] CPU: 1 PID: 13261 Comm: syz-executor.5 Not tainted 5.18.0-rc1-next-20220406 #1 [ 2690.296250] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2690.297631] Call Trace: [ 2690.297899] [ 2690.298259] dump_stack_lvl+0x8b/0xb3 [ 2690.298678] should_fail.cold+0x5/0xa [ 2690.299186] ? create_object.isra.0+0x3a/0xa20 [ 2690.299756] should_failslab+0x5/0x10 [ 2690.300243] kmem_cache_alloc+0x5b/0x480 [ 2690.300813] create_object.isra.0+0x3a/0xa20 [ 2690.301308] ? kasan_unpoison+0x23/0x50 [ 2690.301836] __kmalloc+0x25b/0x440 [ 2690.302350] ext4_find_extent+0xa39/0xd20 [ 2690.302833] ext4_ext_map_blocks+0x1c8/0x5cd0 [ 2690.303446] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 2690.304146] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 2690.304834] ? ext4_ext_release+0x10/0x10 [ 2690.305366] ? lock_acquire+0x1b2/0x530 [ 2690.305856] ? lock_release+0x750/0x750 [ 2690.306344] ? lock_release+0x3b2/0x750 [ 2690.306904] ? lock_is_held_type+0xd7/0x130 [ 2690.307479] ? down_write+0xde/0x150 [ 2690.307906] ? down_write_killable+0x170/0x170 [ 2690.308487] ext4_map_blocks+0x652/0x1970 [ 2690.309064] ? lock_is_held_type+0xd7/0x130 [ 2690.309639] ? ext4_issue_zeroout+0x1c0/0x1c0 [ 2690.310180] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 2690.311197] ? jbd2__journal_start+0xf3/0x8d0 [ 2690.312410] ? __ext4_journal_start_sb+0x392/0x470 [ 2690.313759] ? __ext4_journal_start_sb+0x1d5/0x470 [ 2690.315071] ext4_alloc_file_blocks.isra.0+0x2c1/0xb20 [ 2690.316428] ? ext4_ext_correct_indexes+0x440/0x440 [ 2690.317627] ? down_write_killable+0x170/0x170 [ 2690.318927] ext4_fallocate+0x1a2b/0x3c90 [ 2690.319987] ? lock_acquire+0x1b2/0x530 [ 2690.320934] ? lock_release+0x750/0x750 [ 2690.321818] ? ext4_ext_truncate+0x3e0/0x3e0 [ 2690.322735] ? lock_is_held_type+0xd7/0x130 [ 2690.323650] ? ext4_ext_truncate+0x3e0/0x3e0 [ 2690.324523] vfs_fallocate+0x489/0xe00 [ 2690.325306] __x64_sys_fallocate+0xcf/0x140 [ 2690.326166] do_syscall_64+0x3b/0x90 [ 2690.326905] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2690.327943] RIP: 0033:0x7f35817a9b19 [ 2690.328686] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2690.332339] RSP: 002b:00007f357ed1f188 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 2690.333839] RAX: ffffffffffffffda RBX: 00007f35818bcf60 RCX: 00007f35817a9b19 [ 2690.335259] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 2690.336669] RBP: 00007f357ed1f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2690.338076] R10: 00000000087ffffc R11: 0000000000000246 R12: 0000000000000002 [ 2690.339498] R13: 00007ffdd683fcbf R14: 00007f357ed1f300 R15: 0000000000022000 [ 2690.340943] 07:06:26 executing program 7: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000001340)) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x204800, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x1) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002480)='fd/3\x00') r2 = dup(r1) fdatasync(r2) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x40}}, './file0\x00'}) preadv2(r3, &(0x7f0000001300)=[{&(0x7f0000000080)=""/193, 0xc1}, {&(0x7f0000000180)=""/250, 0xfa}, {&(0x7f0000000300)=""/4096, 0x1000}], 0x3, 0x80000000, 0x66, 0x18) r4 = openat(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000001380)=0x100000) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r5, 0x500, 0x0, 0x87ffffc) sendfile(r5, r4, 0x0, 0x80000000) 07:06:26 executing program 0: openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r0, 0x0, 0x0, 0x87ffffc) mmap$perf(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000008, 0x10, 0xffffffffffffffff, 0x4) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x12, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = syz_open_procfs(0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001240)={0x1, 0x80, 0x0, 0xa1, 0x0, 0x0, 0x0, 0x7, 0xa0400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x3, @perf_config_ext, 0x21, 0x1, 0x0, 0x0, 0x9, 0x0, 0x8000, 0x0, 0x80, 0x0, 0x5}, 0xffffffffffffffff, 0x4, r1, 0x0) r2 = gettid() process_vm_readv(r2, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/4078, 0xfee}, {&(0x7f0000000000)=""/123, 0x7b}, {&(0x7f0000000100)=""/57, 0x39}], 0x3, &(0x7f0000000240)=[{&(0x7f0000012940)=""/102400, 0xffffff76}], 0x204, 0x0) perf_event_open(0x0, r2, 0x1, r1, 0x8) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/consoles\x00', 0x0, 0x0) 07:06:41 executing program 0: openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r0, 0x0, 0x0, 0x87ffffc) mmap$perf(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000008, 0x10, 0xffffffffffffffff, 0x4) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x12, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = syz_open_procfs(0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001240)={0x1, 0x80, 0x0, 0xa1, 0x0, 0x0, 0x0, 0x7, 0xa0400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x3, @perf_config_ext, 0x21, 0x1, 0x0, 0x0, 0x9, 0x0, 0x8000, 0x0, 0x80, 0x0, 0x5}, 0xffffffffffffffff, 0x4, r1, 0x0) r2 = gettid() process_vm_readv(r2, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/4078, 0xfee}, {&(0x7f0000000000)=""/123, 0x7b}, {&(0x7f0000000100)=""/57, 0x39}], 0x3, &(0x7f0000000240)=[{&(0x7f0000012940)=""/102400, 0xffffff76}], 0x205, 0x0) perf_event_open(0x0, r2, 0x1, r1, 0x8) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/consoles\x00', 0x0, 0x0) 07:06:41 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f00000001c0)=0x8) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x14, 0x0, 0x0, 0x19}, 0x14}}, 0x0) [ 2705.856874] FAULT_INJECTION: forcing a failure. [ 2705.856874] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2705.858410] CPU: 0 PID: 13286 Comm: syz-executor.3 Not tainted 5.18.0-rc1-next-20220406 #1 [ 2705.859419] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2705.860851] Call Trace: [ 2705.861194] [ 2705.861484] dump_stack_lvl+0x8b/0xb3 [ 2705.861965] should_fail.cold+0x5/0xa [ 2705.862409] prepare_alloc_pages+0x17b/0x500 [ 2705.862925] __alloc_pages+0x131/0x4e0 [ 2705.863387] ? __alloc_pages_slowpath.constprop.0+0x1f10/0x1f10 [ 2705.864169] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 2705.864809] ? lock_is_held_type+0xd7/0x130 07:06:41 executing program 5: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) preadv(r0, &(0x7f00000011c0)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x7, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x0, 0x0, 0x87ffffc) (fail_nth: 37) mmap$perf(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000008, 0x1010, r2, 0x4) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000100), 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r3 = syz_open_procfs(0x0, 0x0) perf_event_open(&(0x7f0000001240)={0x1, 0x80, 0x9, 0xa1, 0xf9, 0x3, 0x0, 0x7, 0xa0400, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x3, @perf_config_ext={0x58d}, 0x21, 0x1, 0x0, 0x6, 0x9, 0x0, 0x8000, 0x0, 0x80, 0x0, 0x5}, 0xffffffffffffffff, 0x4, r3, 0x0) r4 = gettid() perf_event_open(0x0, r4, 0x1, r3, 0x8) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/consoles\x00', 0x0, 0x0) 07:06:41 executing program 2: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x204800, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x1) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002480)='fd/3\x00') fdatasync(0xffffffffffffffff) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x40}}, './file0\x00'}) preadv2(r2, &(0x7f0000001300)=[{&(0x7f0000000080)=""/193, 0xc1}, {&(0x7f0000000180)=""/250, 0xfa}, {&(0x7f0000000300)=""/4096, 0x1000}], 0x3, 0x80000000, 0x66, 0x18) openat(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r3, 0x0, 0x0, 0x87ffffc) (fail_nth: 36) 07:06:41 executing program 6: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) preadv(r0, &(0x7f00000011c0)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x7, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x0, 0x0, 0x87ffffc) mmap$perf(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000008, 0x1010, r2, 0x4) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000100), 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r3 = syz_open_procfs(0x0, 0x0) perf_event_open(&(0x7f0000001240)={0x1, 0x80, 0x9, 0xa1, 0xf9, 0x3, 0x0, 0x7, 0xa0400, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x3, @perf_config_ext={0x58d}, 0x21, 0x1, 0x0, 0x6, 0x9, 0x0, 0x8000, 0x0, 0x80, 0x0, 0x5}, 0xffffffffffffffff, 0x4, r3, 0x0) r4 = gettid() process_vm_readv(r4, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/4078, 0xfee}, {&(0x7f0000000000)=""/123, 0x7b}, {&(0x7f0000000100)=""/57, 0x39}], 0x3, &(0x7f0000000240)=[{&(0x7f0000012940)=""/102400, 0xffffff76}], 0x1, 0x0) perf_event_open(0x0, r4, 0x0, r3, 0x8) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/consoles\x00', 0x0, 0x0) 07:06:41 executing program 1: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) preadv(r0, &(0x7f00000011c0)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x7, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x0, 0x0, 0x87ffffc) mmap$perf(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000008, 0x1010, r2, 0x4) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000100), 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r3 = syz_open_procfs(0x0, 0x0) preadv(r3, &(0x7f0000000080)=[{&(0x7f0000000000)=""/40, 0x40}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000001240)={0x1, 0x80, 0x9, 0xa1, 0xf9, 0x3, 0x0, 0x7, 0xa0400, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x3, @perf_config_ext={0x58d}, 0x21, 0x1, 0x0, 0x6, 0x9, 0x0, 0x8000, 0x0, 0x80, 0x0, 0x5}, 0xffffffffffffffff, 0x4, r3, 0x0) r4 = gettid() process_vm_readv(r4, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/4078, 0xfee}, {&(0x7f0000000000)=""/123, 0x7b}, {&(0x7f0000000100)=""/57, 0x39}], 0x3, &(0x7f0000000240)=[{0x0}], 0x1, 0x0) perf_event_open(0x0, r4, 0x1, r3, 0x8) 07:06:41 executing program 7: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000001340)) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x204800, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x1) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002480)='fd/3\x00') r2 = dup(r1) fdatasync(r2) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x40}}, './file0\x00'}) preadv2(r3, &(0x7f0000001300)=[{&(0x7f0000000080)=""/193, 0xc1}, {&(0x7f0000000180)=""/250, 0xfa}, {&(0x7f0000000300)=""/4096, 0x1000}], 0x3, 0x80000000, 0x66, 0x18) r4 = openat(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000001380)=0x100000) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r5, 0x600, 0x0, 0x87ffffc) sendfile(r5, r4, 0x0, 0x80000000) 07:06:41 executing program 3: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000040)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x300000c, 0x13, r0, 0x8000000) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xa) fork() (fail_nth: 42) [ 2705.865375] ? lock_is_held_type+0xd7/0x130 [ 2705.866129] alloc_pages+0x1a0/0x2f0 [ 2705.866546] pte_alloc_one+0x16/0x1f0 [ 2705.867048] __pte_alloc+0x69/0x200 [ 2705.867468] ? pmd_install+0x250/0x250 [ 2705.867989] copy_page_range+0x207a/0x4cc0 [ 2705.868494] ? vm_iomap_memory+0x190/0x190 [ 2705.869043] ? down_write+0xde/0x150 [ 2705.869465] ? up_write+0x148/0x460 [ 2705.869943] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 2705.870512] ? __vma_link_rb+0x540/0x700 [ 2705.871050] dup_mm+0x961/0x1250 [ 2705.871457] ? replace_mm_exe_file+0x490/0x490 [ 2705.872065] ? __raw_spin_lock_init+0x36/0x110 [ 2705.872602] copy_process+0x698c/0x6db0 [ 2705.873151] ? __cleanup_sighand+0xb0/0xb0 [ 2705.873674] ? lock_release+0x3b2/0x750 [ 2705.874209] ? ksys_write+0x20c/0x250 [ 2705.874645] ? kernel_clone+0x2f8/0xa60 [ 2705.875191] kernel_clone+0xe7/0xa60 [ 2705.875628] ? find_held_lock+0x2c/0x110 [ 2705.876157] ? create_io_thread+0xf0/0xf0 [ 2705.876670] ? __mutex_unlock_slowpath+0x15c/0x5e0 [ 2705.877318] ? bit_wait_io_timeout+0x160/0x160 [ 2705.877869] ? lock_is_held_type+0xd7/0x130 [ 2705.878398] __do_sys_fork+0x8a/0xc0 [ 2705.878829] ? kernel_clone+0xa60/0xa60 [ 2705.879304] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 2705.879934] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2705.880524] ? lockdep_hardirqs_on+0x79/0x100 [ 2705.881046] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2705.881642] do_syscall_64+0x3b/0x90 [ 2705.882098] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2705.882697] RIP: 0033:0x7fc1c2a89b19 [ 2705.883127] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2705.885224] RSP: 002b:00007fc1bffff188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 2705.886096] RAX: ffffffffffffffda RBX: 00007fc1c2b9cf60 RCX: 00007fc1c2a89b19 [ 2705.886919] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2705.887791] RBP: 00007fc1bffff1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2705.888640] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2705.889476] R13: 00007fff0449096f R14: 00007fc1bffff300 R15: 0000000000022000 [ 2705.890324] [ 2705.899433] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13293 comm=syz-executor.4 [ 2705.901456] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13295 comm=syz-executor.4 [ 2705.906935] FAULT_INJECTION: forcing a failure. [ 2705.906935] name failslab, interval 1, probability 0, space 0, times 0 [ 2705.908156] CPU: 0 PID: 13294 Comm: syz-executor.5 Not tainted 5.18.0-rc1-next-20220406 #1 [ 2705.909222] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2705.910553] Call Trace: [ 2705.910853] [ 2705.911129] dump_stack_lvl+0x8b/0xb3 [ 2705.911550] should_fail.cold+0x5/0xa [ 2705.912036] ? ext4_mb_new_blocks+0x64b/0x4b60 [ 2705.912619] should_failslab+0x5/0x10 [ 2705.913114] kmem_cache_alloc+0x5b/0x480 [ 2705.913590] ext4_mb_new_blocks+0x64b/0x4b60 [ 2705.914094] ? lock_is_held_type+0xd7/0x130 [ 2705.914594] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2705.915241] ? ext4_cache_extents+0x148/0x2d0 [ 2705.915809] ? ext4_discard_preallocations+0xe60/0xe60 [ 2705.916398] ? __sanitizer_cov_trace_const_cmp2+0x22/0x80 [ 2705.917009] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2705.917671] ? ext4_ext_search_right+0x2e3/0xbd0 [ 2705.918222] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2705.918862] ext4_ext_map_blocks+0x1fb0/0x5cd0 [ 2705.919431] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 2705.920082] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 2705.920697] ? ext4_ext_release+0x10/0x10 [ 2705.921246] ? lock_release+0x750/0x750 [ 2705.921755] ? lock_release+0x3b2/0x750 [ 2705.922220] ? lock_is_held_type+0xd7/0x130 [ 2705.922785] ? down_write_killable+0x170/0x170 [ 2705.923323] ext4_map_blocks+0x652/0x1970 [ 2705.923792] ? lock_is_held_type+0xd7/0x130 [ 2705.924282] ? ext4_issue_zeroout+0x1c0/0x1c0 [ 2705.924792] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 2705.925469] ? jbd2__journal_start+0xf3/0x8d0 [ 2705.926003] ? __ext4_journal_start_sb+0x392/0x470 [ 2705.926551] ? __ext4_journal_start_sb+0x1d5/0x470 [ 2705.927103] ext4_alloc_file_blocks.isra.0+0x2c1/0xb20 [ 2705.927795] ? ext4_ext_correct_indexes+0x440/0x440 [ 2705.928442] ? down_write_killable+0x170/0x170 [ 2705.929051] ext4_fallocate+0x1a2b/0x3c90 [ 2705.929603] ? lock_acquire+0x1b2/0x530 [ 2705.930131] ? lock_release+0x750/0x750 [ 2705.930652] ? ext4_ext_truncate+0x3e0/0x3e0 [ 2705.931239] ? lock_is_held_type+0xd7/0x130 [ 2705.931816] ? ext4_ext_truncate+0x3e0/0x3e0 [ 2705.932379] vfs_fallocate+0x489/0xe00 [ 2705.932883] __x64_sys_fallocate+0xcf/0x140 [ 2705.933439] do_syscall_64+0x3b/0x90 [ 2705.933894] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2705.934482] RIP: 0033:0x7f35817a9b19 [ 2705.934905] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2705.937092] RSP: 002b:00007f357ed1f188 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 2705.937935] RAX: ffffffffffffffda RBX: 00007f35818bcf60 RCX: 00007f35817a9b19 [ 2705.938748] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 2705.939554] RBP: 00007f357ed1f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2705.940336] R10: 00000000087ffffc R11: 0000000000000246 R12: 0000000000000002 [ 2705.941136] R13: 00007ffdd683fcbf R14: 00007f357ed1f300 R15: 0000000000022000 [ 2705.941935] [ 2705.954794] FAULT_INJECTION: forcing a failure. [ 2705.954794] name failslab, interval 1, probability 0, space 0, times 0 [ 2705.956046] CPU: 0 PID: 13283 Comm: syz-executor.2 Not tainted 5.18.0-rc1-next-20220406 #1 [ 2705.956883] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2705.958011] Call Trace: [ 2705.958275] [ 2705.958502] dump_stack_lvl+0x8b/0xb3 [ 2705.958889] should_fail.cold+0x5/0xa [ 2705.959283] ? create_object.isra.0+0x3a/0xa20 [ 2705.959745] should_failslab+0x5/0x10 [ 2705.960129] kmem_cache_alloc+0x5b/0x480 [ 2705.960547] create_object.isra.0+0x3a/0xa20 [ 2705.960986] ? kasan_unpoison+0x23/0x50 [ 2705.961390] kmem_cache_alloc+0x239/0x480 [ 2705.961817] jbd2__journal_start+0x18c/0x8d0 [ 2705.962262] __ext4_journal_start_sb+0x392/0x470 [ 2705.962733] ? __ext4_journal_stop+0x107/0x1f0 [ 2705.963209] ext4_alloc_file_blocks.isra.0+0x286/0xb20 [ 2705.963748] ? ext4_ext_correct_indexes+0x440/0x440 [ 2705.964260] ? down_write_killable+0x170/0x170 [ 2705.964748] ext4_fallocate+0x1a2b/0x3c90 [ 2705.965175] ? lock_acquire+0x1b2/0x530 [ 2705.965602] ? lock_release+0x750/0x750 [ 2705.966022] ? ext4_ext_truncate+0x3e0/0x3e0 [ 2705.966485] ? lock_is_held_type+0xd7/0x130 [ 2705.966940] ? ext4_ext_truncate+0x3e0/0x3e0 [ 2705.967409] vfs_fallocate+0x489/0xe00 [ 2705.967822] __x64_sys_fallocate+0xcf/0x140 [ 2705.968281] do_syscall_64+0x3b/0x90 [ 2705.968669] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2705.969216] RIP: 0033:0x7fd845bccb19 [ 2705.969598] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2705.971555] RSP: 002b:00007fd843142188 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 2705.972355] RAX: ffffffffffffffda RBX: 00007fd845cdff60 RCX: 00007fd845bccb19 [ 2705.973111] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 2705.973878] RBP: 00007fd8431421d0 R08: 0000000000000000 R09: 0000000000000000 [ 2705.974628] R10: 00000000087ffffc R11: 0000000000000246 R12: 0000000000000002 [ 2705.975387] R13: 00007ffde12fa01f R14: 00007fd843142300 R15: 0000000000022000 [ 2705.976147] 07:06:41 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f00000001c0)=0x8) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x14, 0x0, 0x0, 0x1a}, 0x14}}, 0x0) 07:06:41 executing program 3: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000040)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x300000c, 0x13, r0, 0x8000000) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xa) fork() (fail_nth: 43) 07:06:41 executing program 5: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) preadv(r0, &(0x7f00000011c0)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x7, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x0, 0x0, 0x87ffffc) (fail_nth: 38) mmap$perf(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000008, 0x1010, r2, 0x4) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000100), 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r3 = syz_open_procfs(0x0, 0x0) perf_event_open(&(0x7f0000001240)={0x1, 0x80, 0x9, 0xa1, 0xf9, 0x3, 0x0, 0x7, 0xa0400, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x3, @perf_config_ext={0x58d}, 0x21, 0x1, 0x0, 0x6, 0x9, 0x0, 0x8000, 0x0, 0x80, 0x0, 0x5}, 0xffffffffffffffff, 0x4, r3, 0x0) r4 = gettid() perf_event_open(0x0, r4, 0x1, r3, 0x8) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/consoles\x00', 0x0, 0x0) [ 2706.035793] FAULT_INJECTION: forcing a failure. [ 2706.035793] name failslab, interval 1, probability 0, space 0, times 0 [ 2706.036938] CPU: 0 PID: 13304 Comm: syz-executor.3 Not tainted 5.18.0-rc1-next-20220406 #1 [ 2706.037759] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2706.038886] Call Trace: [ 2706.039155] [ 2706.039391] dump_stack_lvl+0x8b/0xb3 [ 2706.039788] should_fail.cold+0x5/0xa [ 2706.040174] ? ptlock_alloc+0x1d/0x70 [ 2706.040566] should_failslab+0x5/0x10 [ 2706.040952] kmem_cache_alloc+0x5b/0x480 [ 2706.041372] ptlock_alloc+0x1d/0x70 [ 2706.041741] pte_alloc_one+0x68/0x1f0 [ 2706.042132] __pte_alloc+0x69/0x200 [ 2706.042505] ? pmd_install+0x250/0x250 [ 2706.042905] copy_page_range+0x207a/0x4cc0 [ 2706.043374] ? vm_iomap_memory+0x190/0x190 [ 2706.043800] ? down_write+0xde/0x150 [ 2706.044183] ? up_write+0x148/0x460 [ 2706.044556] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 2706.045079] ? __vma_link_rb+0x540/0x700 [ 2706.045512] dup_mm+0x961/0x1250 [ 2706.045873] ? replace_mm_exe_file+0x490/0x490 [ 2706.046340] ? __raw_spin_lock_init+0x36/0x110 [ 2706.046807] copy_process+0x698c/0x6db0 [ 2706.047243] ? __cleanup_sighand+0xb0/0xb0 [ 2706.047706] ? lock_release+0x3b2/0x750 [ 2706.048107] ? ksys_write+0x20c/0x250 [ 2706.048513] ? kernel_clone+0x2f8/0xa60 [ 2706.048940] kernel_clone+0xe7/0xa60 [ 2706.049339] ? find_held_lock+0x2c/0x110 [ 2706.049773] ? create_io_thread+0xf0/0xf0 [ 2706.050226] ? __mutex_unlock_slowpath+0x15c/0x5e0 [ 2706.050756] ? bit_wait_io_timeout+0x160/0x160 [ 2706.051265] ? lock_is_held_type+0xd7/0x130 [ 2706.051725] __do_sys_fork+0x8a/0xc0 [ 2706.052130] ? kernel_clone+0xa60/0xa60 [ 2706.052557] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 2706.053147] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2706.053692] ? lockdep_hardirqs_on+0x79/0x100 [ 2706.054170] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2706.054719] do_syscall_64+0x3b/0x90 [ 2706.055112] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2706.055672] RIP: 0033:0x7fc1c2a89b19 [ 2706.056071] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2706.058004] RSP: 002b:00007fc1bffff188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 2706.058801] RAX: ffffffffffffffda RBX: 00007fc1c2b9cf60 RCX: 00007fc1c2a89b19 [ 2706.059566] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2706.060312] RBP: 00007fc1bffff1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2706.061054] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2706.061801] R13: 00007fff0449096f R14: 00007fc1bffff300 R15: 0000000000022000 [ 2706.062564] [ 2706.073464] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13307 comm=syz-executor.4 07:06:41 executing program 1: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) preadv(r0, &(0x7f00000011c0)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x7, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x0, 0x0, 0x87ffffc) mmap$perf(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000008, 0x1010, r2, 0x4) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000100), 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r3 = syz_open_procfs(0x0, 0x0) preadv(r3, &(0x7f0000000080)=[{&(0x7f0000000000)=""/40, 0x40}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000001240)={0x1, 0x80, 0x9, 0xa1, 0xf9, 0x3, 0x0, 0x7, 0xa0400, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x3, @perf_config_ext={0x58d}, 0x21, 0x1, 0x0, 0x6, 0x9, 0x0, 0x8000, 0x0, 0x80, 0x0, 0x5}, 0xffffffffffffffff, 0x4, r3, 0x0) r4 = gettid() process_vm_readv(r4, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/4078, 0xfee}, {&(0x7f0000000000)=""/123, 0x7b}, {&(0x7f0000000100)=""/57, 0x39}], 0x3, &(0x7f0000000240)=[{&(0x7f0000012940)=""/102400, 0xffffff76}], 0x1, 0x0) perf_event_open(0x0, 0x0, 0x1, r3, 0x8) 07:06:41 executing program 2: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x204800, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x1) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002480)='fd/3\x00') fdatasync(0xffffffffffffffff) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x40}}, './file0\x00'}) preadv2(r2, &(0x7f0000001300)=[{&(0x7f0000000080)=""/193, 0xc1}, {&(0x7f0000000180)=""/250, 0xfa}, {&(0x7f0000000300)=""/4096, 0x1000}], 0x3, 0x80000000, 0x66, 0x18) openat(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r3, 0x0, 0x0, 0x87ffffc) (fail_nth: 37) [ 2706.102401] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13309 comm=syz-executor.4 07:06:41 executing program 7: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000001340)) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x204800, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x1) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002480)='fd/3\x00') r2 = dup(r1) fdatasync(r2) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x40}}, './file0\x00'}) preadv2(r3, &(0x7f0000001300)=[{&(0x7f0000000080)=""/193, 0xc1}, {&(0x7f0000000180)=""/250, 0xfa}, {&(0x7f0000000300)=""/4096, 0x1000}], 0x3, 0x80000000, 0x66, 0x18) r4 = openat(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000001380)=0x100000) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r5, 0x700, 0x0, 0x87ffffc) sendfile(r5, r4, 0x0, 0x80000000) [ 2706.140162] FAULT_INJECTION: forcing a failure. [ 2706.140162] name failslab, interval 1, probability 0, space 0, times 0 [ 2706.141431] CPU: 0 PID: 13312 Comm: syz-executor.2 Not tainted 5.18.0-rc1-next-20220406 #1 [ 2706.142259] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2706.143392] Call Trace: [ 2706.143658] [ 2706.143883] dump_stack_lvl+0x8b/0xb3 [ 2706.144276] should_fail.cold+0x5/0xa [ 2706.144661] ? ext4_mb_new_blocks+0x64b/0x4b60 [ 2706.145124] should_failslab+0x5/0x10 [ 2706.145514] kmem_cache_alloc+0x5b/0x480 [ 2706.145935] ext4_mb_new_blocks+0x64b/0x4b60 [ 2706.146388] ? lock_is_held_type+0xd7/0x130 [ 2706.146837] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2706.147398] ? ext4_cache_extents+0x148/0x2d0 [ 2706.147858] ? ext4_discard_preallocations+0xe60/0xe60 [ 2706.148384] ? __sanitizer_cov_trace_const_cmp2+0x22/0x80 [ 2706.148938] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2706.149489] ? ext4_ext_search_right+0x2e3/0xbd0 [ 2706.149967] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2706.150533] ext4_ext_map_blocks+0x1fb0/0x5cd0 [ 2706.151008] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 2706.151567] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 2706.152121] ? ext4_ext_release+0x10/0x10 [ 2706.152580] ? lock_release+0x750/0x750 [ 2706.153011] ? lock_release+0x3b2/0x750 [ 2706.153446] ? lock_is_held_type+0xd7/0x130 [ 2706.153923] ? down_write_killable+0x170/0x170 [ 2706.154427] ext4_map_blocks+0x652/0x1970 [ 2706.154887] ? lock_is_held_type+0xd7/0x130 [ 2706.155360] ? ext4_issue_zeroout+0x1c0/0x1c0 [ 2706.155841] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 2706.156438] ? jbd2__journal_start+0xf3/0x8d0 [ 2706.156925] ? __ext4_journal_start_sb+0x392/0x470 [ 2706.157441] ? __ext4_journal_start_sb+0x1d5/0x470 [ 2706.157968] ext4_alloc_file_blocks.isra.0+0x2c1/0xb20 [ 2706.158534] ? ext4_ext_correct_indexes+0x440/0x440 [ 2706.159076] ? down_write_killable+0x170/0x170 [ 2706.159604] ext4_fallocate+0x1a2b/0x3c90 [ 2706.160042] ? lock_acquire+0x1b2/0x530 [ 2706.160473] ? lock_release+0x750/0x750 [ 2706.160904] ? ext4_ext_truncate+0x3e0/0x3e0 [ 2706.161374] ? lock_is_held_type+0xd7/0x130 [ 2706.161844] ? ext4_ext_truncate+0x3e0/0x3e0 [ 2706.162315] vfs_fallocate+0x489/0xe00 [ 2706.162741] __x64_sys_fallocate+0xcf/0x140 [ 2706.163215] do_syscall_64+0x3b/0x90 [ 2706.163609] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2706.164159] RIP: 0033:0x7fd845bccb19 [ 2706.164563] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2706.166514] RSP: 002b:00007fd843142188 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 2706.167320] RAX: ffffffffffffffda RBX: 00007fd845cdff60 RCX: 00007fd845bccb19 [ 2706.168089] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 2706.168860] RBP: 00007fd8431421d0 R08: 0000000000000000 R09: 0000000000000000 [ 2706.169619] R10: 00000000087ffffc R11: 0000000000000246 R12: 0000000000000002 [ 2706.170378] R13: 00007ffde12fa01f R14: 00007fd843142300 R15: 0000000000022000 [ 2706.171164] [ 2706.176119] FAULT_INJECTION: forcing a failure. [ 2706.176119] name failslab, interval 1, probability 0, space 0, times 0 [ 2706.179140] CPU: 1 PID: 13314 Comm: syz-executor.5 Not tainted 5.18.0-rc1-next-20220406 #1 [ 2706.181034] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2706.183577] Call Trace: [ 2706.184156] [ 2706.184663] dump_stack_lvl+0x8b/0xb3 [ 2706.185539] should_fail.cold+0x5/0xa [ 2706.186406] ? create_object.isra.0+0x3a/0xa20 [ 2706.187451] should_failslab+0x5/0x10 [ 2706.188307] kmem_cache_alloc+0x5b/0x480 [ 2706.189242] create_object.isra.0+0x3a/0xa20 [ 2706.190227] ? kasan_unpoison+0x23/0x50 [ 2706.191130] __kmalloc+0x25b/0x440 [ 2706.191978] ext4_find_extent+0xa39/0xd20 [ 2706.192925] ext4_ext_map_blocks+0x1c8/0x5cd0 [ 2706.193943] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 2706.195128] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 2706.196323] ? ext4_ext_release+0x10/0x10 [ 2706.197263] ? lock_acquire+0x1b2/0x530 [ 2706.198162] ? lock_release+0x750/0x750 [ 2706.199048] ? lock_release+0x3b2/0x750 [ 2706.199949] ? lock_is_held_type+0xd7/0x130 [ 2706.200933] ? down_write+0xde/0x150 [ 2706.201769] ? down_write_killable+0x170/0x170 07:06:41 executing program 3: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000040)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x300000c, 0x13, r0, 0x8000000) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xa) fork() (fail_nth: 44) [ 2706.202802] ext4_map_blocks+0x652/0x1970 [ 2706.203909] ? lock_is_held_type+0xd7/0x130 [ 2706.204881] ? ext4_issue_zeroout+0x1c0/0x1c0 [ 2706.205894] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 2706.207132] ? jbd2__journal_start+0xf3/0x8d0 [ 2706.208133] ? __ext4_journal_start_sb+0x392/0x470 [ 2706.209213] ? __ext4_journal_start_sb+0x1d5/0x470 [ 2706.210308] ext4_alloc_file_blocks.isra.0+0x2c1/0xb20 [ 2706.211504] ? ext4_ext_correct_indexes+0x440/0x440 [ 2706.212608] ? down_write_killable+0x170/0x170 [ 2706.213644] ext4_fallocate+0x1a2b/0x3c90 [ 2706.214557] ? lock_acquire+0x1b2/0x530 [ 2706.215449] ? lock_release+0x750/0x750 [ 2706.216332] ? ext4_ext_truncate+0x3e0/0x3e0 [ 2706.217304] ? lock_is_held_type+0xd7/0x130 [ 2706.218256] ? ext4_ext_truncate+0x3e0/0x3e0 [ 2706.219234] vfs_fallocate+0x489/0xe00 [ 2706.219278] FAULT_INJECTION: forcing a failure. [ 2706.219278] name failslab, interval 1, probability 0, space 0, times 0 [ 2706.220120] __x64_sys_fallocate+0xcf/0x140 [ 2706.222193] do_syscall_64+0x3b/0x90 [ 2706.223016] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2706.224155] RIP: 0033:0x7f35817a9b19 [ 2706.224962] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2706.228956] RSP: 002b:00007f357ed1f188 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 2706.230597] RAX: ffffffffffffffda RBX: 00007f35818bcf60 RCX: 00007f35817a9b19 [ 2706.232165] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 2706.233715] RBP: 00007f357ed1f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2706.235238] R10: 00000000087ffffc R11: 0000000000000246 R12: 0000000000000002 [ 2706.236770] R13: 00007ffdd683fcbf R14: 00007f357ed1f300 R15: 0000000000022000 [ 2706.238333] [ 2706.238836] CPU: 0 PID: 13318 Comm: syz-executor.3 Not tainted 5.18.0-rc1-next-20220406 #1 [ 2706.239754] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2706.240947] Call Trace: [ 2706.241215] [ 2706.241455] dump_stack_lvl+0x8b/0xb3 [ 2706.241867] should_fail.cold+0x5/0xa [ 2706.242275] ? create_object.isra.0+0x3a/0xa20 [ 2706.242755] should_failslab+0x5/0x10 [ 2706.243164] kmem_cache_alloc+0x5b/0x480 [ 2706.243595] create_object.isra.0+0x3a/0xa20 [ 2706.244055] ? kasan_unpoison+0x23/0x50 [ 2706.244473] kmem_cache_alloc+0x239/0x480 [ 2706.244917] ptlock_alloc+0x1d/0x70 [ 2706.245306] pte_alloc_one+0x68/0x1f0 [ 2706.245723] __pte_alloc+0x69/0x200 [ 2706.246106] ? pmd_install+0x250/0x250 [ 2706.246530] copy_page_range+0x207a/0x4cc0 [ 2706.247007] ? vm_iomap_memory+0x190/0x190 [ 2706.247466] ? down_write+0xde/0x150 [ 2706.247860] ? up_write+0x148/0x460 [ 2706.248255] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 2706.248780] ? __vma_link_rb+0x540/0x700 [ 2706.249218] dup_mm+0x961/0x1250 [ 2706.249596] ? replace_mm_exe_file+0x490/0x490 [ 2706.250088] ? __raw_spin_lock_init+0x36/0x110 [ 2706.250573] copy_process+0x698c/0x6db0 [ 2706.251017] ? __cleanup_sighand+0xb0/0xb0 [ 2706.251476] ? lock_release+0x3b2/0x750 [ 2706.251898] ? ksys_write+0x20c/0x250 [ 2706.252306] ? kernel_clone+0x2f8/0xa60 [ 2706.252725] kernel_clone+0xe7/0xa60 [ 2706.253123] ? find_held_lock+0x2c/0x110 [ 2706.253551] ? create_io_thread+0xf0/0xf0 [ 2706.253991] ? __mutex_unlock_slowpath+0x15c/0x5e0 [ 2706.254517] ? bit_wait_io_timeout+0x160/0x160 [ 2706.254992] ? lock_is_held_type+0xd7/0x130 [ 2706.255465] __do_sys_fork+0x8a/0xc0 [ 2706.255861] ? kernel_clone+0xa60/0xa60 [ 2706.256278] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 2706.256865] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2706.257413] ? lockdep_hardirqs_on+0x79/0x100 [ 2706.257881] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2706.258422] do_syscall_64+0x3b/0x90 [ 2706.258818] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2706.259373] RIP: 0033:0x7fc1c2a89b19 [ 2706.259759] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2706.261656] RSP: 002b:00007fc1bffff188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 2706.262437] RAX: ffffffffffffffda RBX: 00007fc1c2b9cf60 RCX: 00007fc1c2a89b19 [ 2706.263181] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2706.263931] RBP: 00007fc1bffff1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2706.264672] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2706.265413] R13: 00007fff0449096f R14: 00007fc1bffff300 R15: 0000000000022000 [ 2706.266172] 07:06:42 executing program 0: openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r0, 0x0, 0x0, 0x87ffffc) mmap$perf(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000008, 0x10, 0xffffffffffffffff, 0x4) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x12, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = syz_open_procfs(0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001240)={0x1, 0x80, 0x0, 0xa1, 0x0, 0x0, 0x0, 0x7, 0xa0400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x3, @perf_config_ext, 0x21, 0x1, 0x0, 0x0, 0x9, 0x0, 0x8000, 0x0, 0x80, 0x0, 0x5}, 0xffffffffffffffff, 0x4, r1, 0x0) r2 = gettid() process_vm_readv(r2, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/4078, 0xfee}, {&(0x7f0000000000)=""/123, 0x7b}, {&(0x7f0000000100)=""/57, 0x39}], 0x3, &(0x7f0000000240)=[{&(0x7f0000012940)=""/102400, 0xffffff76}], 0x206, 0x0) perf_event_open(0x0, r2, 0x1, r1, 0x8) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/consoles\x00', 0x0, 0x0) 07:06:42 executing program 6: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) preadv(r0, &(0x7f00000011c0)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x7, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x0, 0x0, 0x87ffffc) mmap$perf(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000008, 0x1010, r2, 0x4) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000100), 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r3 = syz_open_procfs(0x0, 0x0) perf_event_open(&(0x7f0000001240)={0x1, 0x80, 0x9, 0xa1, 0xf9, 0x3, 0x0, 0x7, 0xa0400, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x3, @perf_config_ext={0x58d}, 0x21, 0x1, 0x0, 0x6, 0x9, 0x0, 0x8000, 0x0, 0x80, 0x0, 0x5}, 0xffffffffffffffff, 0x4, r3, 0x0) r4 = gettid() process_vm_readv(r4, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/4078, 0xfee}, {&(0x7f0000000000)=""/123, 0x7b}, {&(0x7f0000000100)=""/57, 0x39}], 0x3, &(0x7f0000000240)=[{&(0x7f0000012940)=""/102400, 0xffffff76}], 0x1, 0x0) perf_event_open(0x0, r4, 0x1, 0xffffffffffffffff, 0x8) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/consoles\x00', 0x0, 0x0) 07:06:42 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f00000001c0)=0x8) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x14, 0x0, 0x0, 0x1c}, 0x14}}, 0x0) [ 2706.362372] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13325 comm=syz-executor.4 [ 2706.370040] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13329 comm=syz-executor.4 07:06:58 executing program 2: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x204800, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x1) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002480)='fd/3\x00') fdatasync(0xffffffffffffffff) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x40}}, './file0\x00'}) preadv2(r2, &(0x7f0000001300)=[{&(0x7f0000000080)=""/193, 0xc1}, {&(0x7f0000000180)=""/250, 0xfa}, {&(0x7f0000000300)=""/4096, 0x1000}], 0x3, 0x80000000, 0x66, 0x18) openat(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r3, 0x0, 0x0, 0x87ffffc) (fail_nth: 38) 07:06:58 executing program 6: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) preadv(r0, &(0x7f00000011c0)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x7, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x0, 0x0, 0x87ffffc) mmap$perf(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000008, 0x1010, r2, 0x4) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000100), 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r3 = syz_open_procfs(0x0, 0x0) perf_event_open(&(0x7f0000001240)={0x1, 0x80, 0x9, 0xa1, 0xf9, 0x3, 0x0, 0x7, 0xa0400, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x3, @perf_config_ext={0x58d}, 0x21, 0x1, 0x0, 0x6, 0x9, 0x0, 0x8000, 0x0, 0x80, 0x0, 0x5}, 0xffffffffffffffff, 0x4, r3, 0x0) r4 = gettid() process_vm_readv(r4, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/4078, 0xfee}, {&(0x7f0000000000)=""/123, 0x7b}, {&(0x7f0000000100)=""/57, 0x39}], 0x3, &(0x7f0000000240)=[{&(0x7f0000012940)=""/102400, 0xffffff76}], 0x1, 0x0) perf_event_open(0x0, r4, 0x1, 0xffffffffffffffff, 0x8) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/consoles\x00', 0x0, 0x0) 07:06:58 executing program 0: openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r0, 0x0, 0x0, 0x87ffffc) mmap$perf(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000008, 0x10, 0xffffffffffffffff, 0x4) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x12, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = syz_open_procfs(0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001240)={0x1, 0x80, 0x0, 0xa1, 0x0, 0x0, 0x0, 0x7, 0xa0400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x3, @perf_config_ext, 0x21, 0x1, 0x0, 0x0, 0x9, 0x0, 0x8000, 0x0, 0x80, 0x0, 0x5}, 0xffffffffffffffff, 0x4, r1, 0x0) r2 = gettid() process_vm_readv(r2, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/4078, 0xfee}, {&(0x7f0000000000)=""/123, 0x7b}, {&(0x7f0000000100)=""/57, 0x39}], 0x3, &(0x7f0000000240)=[{&(0x7f0000012940)=""/102400, 0xffffff76}], 0x207, 0x0) perf_event_open(0x0, r2, 0x1, r1, 0x8) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/consoles\x00', 0x0, 0x0) 07:06:58 executing program 7: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000001340)) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x204800, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x1) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002480)='fd/3\x00') r2 = dup(r1) fdatasync(r2) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x40}}, './file0\x00'}) preadv2(r3, &(0x7f0000001300)=[{&(0x7f0000000080)=""/193, 0xc1}, {&(0x7f0000000180)=""/250, 0xfa}, {&(0x7f0000000300)=""/4096, 0x1000}], 0x3, 0x80000000, 0x66, 0x18) r4 = openat(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000001380)=0x100000) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r5, 0x804, 0x0, 0x87ffffc) sendfile(r5, r4, 0x0, 0x80000000) 07:06:58 executing program 5: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) preadv(r0, &(0x7f00000011c0)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x7, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x0, 0x0, 0x87ffffc) (fail_nth: 39) mmap$perf(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000008, 0x1010, r2, 0x4) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000100), 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r3 = syz_open_procfs(0x0, 0x0) perf_event_open(&(0x7f0000001240)={0x1, 0x80, 0x9, 0xa1, 0xf9, 0x3, 0x0, 0x7, 0xa0400, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x3, @perf_config_ext={0x58d}, 0x21, 0x1, 0x0, 0x6, 0x9, 0x0, 0x8000, 0x0, 0x80, 0x0, 0x5}, 0xffffffffffffffff, 0x4, r3, 0x0) r4 = gettid() perf_event_open(0x0, r4, 0x1, r3, 0x8) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/consoles\x00', 0x0, 0x0) 07:06:58 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f00000001c0)=0x8) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x14, 0x0, 0x0, 0x1d}, 0x14}}, 0x0) 07:06:58 executing program 3: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000040)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x300000c, 0x13, r0, 0x8000000) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xa) fork() (fail_nth: 45) 07:06:58 executing program 1: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) preadv(r0, &(0x7f00000011c0)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x7, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x0, 0x0, 0x87ffffc) mmap$perf(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000008, 0x1010, r2, 0x4) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000100), 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r3 = syz_open_procfs(0x0, 0x0) preadv(r3, &(0x7f0000000080)=[{&(0x7f0000000000)=""/40, 0x40}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000001240)={0x1, 0x80, 0x9, 0xa1, 0xf9, 0x3, 0x0, 0x7, 0xa0400, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x3, @perf_config_ext={0x58d}, 0x21, 0x1, 0x0, 0x6, 0x9, 0x0, 0x8000, 0x0, 0x80, 0x0, 0x5}, 0xffffffffffffffff, 0x4, r3, 0x0) r4 = gettid() process_vm_readv(r4, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/4078, 0xfee}, {&(0x7f0000000000)=""/123, 0x7b}, {&(0x7f0000000100)=""/57, 0x39}], 0x3, &(0x7f0000000240)=[{&(0x7f0000012940)=""/102400, 0xffffff76}], 0x1, 0x0) perf_event_open(0x0, 0x0, 0x1, r3, 0x8) [ 2722.851131] FAULT_INJECTION: forcing a failure. [ 2722.851131] name failslab, interval 1, probability 0, space 0, times 0 [ 2722.852538] CPU: 1 PID: 13344 Comm: syz-executor.2 Not tainted 5.18.0-rc1-next-20220406 #1 [ 2722.853501] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2722.854598] Call Trace: [ 2722.854860] [ 2722.855158] dump_stack_lvl+0x8b/0xb3 [ 2722.855548] should_fail.cold+0x5/0xa [ 2722.855922] ? create_object.isra.0+0x3a/0xa20 [ 2722.856373] should_failslab+0x5/0x10 [ 2722.856751] kmem_cache_alloc+0x5b/0x480 [ 2722.857155] create_object.isra.0+0x3a/0xa20 [ 2722.857584] ? kasan_unpoison+0x23/0x50 [ 2722.857977] kmem_cache_alloc+0x239/0x480 [ 2722.858396] ext4_mb_new_blocks+0x64b/0x4b60 [ 2722.858836] ? lock_is_held_type+0xd7/0x130 [ 2722.859269] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2722.859819] ? ext4_cache_extents+0x148/0x2d0 [ 2722.860261] ? ext4_discard_preallocations+0xe60/0xe60 [ 2722.860770] ? __sanitizer_cov_trace_const_cmp2+0x22/0x80 [ 2722.861307] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2722.861840] ? ext4_ext_search_right+0x2e3/0xbd0 [ 2722.862311] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2722.862852] ext4_ext_map_blocks+0x1fb0/0x5cd0 [ 2722.863307] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 2722.863842] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 2722.864393] ? ext4_ext_release+0x10/0x10 [ 2722.864836] ? lock_release+0x750/0x750 [ 2722.865255] ? lock_release+0x3b2/0x750 [ 2722.865678] ? lock_is_held_type+0xd7/0x130 [ 2722.866145] ? down_write_killable+0x170/0x170 [ 2722.866635] ext4_map_blocks+0x652/0x1970 [ 2722.867082] ? lock_is_held_type+0xd7/0x130 [ 2722.867554] ? ext4_issue_zeroout+0x1c0/0x1c0 [ 2722.868030] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 2722.868609] ? jbd2__journal_start+0xf3/0x8d0 [ 2722.869050] ? __ext4_journal_start_sb+0x392/0x470 [ 2722.869565] ? __ext4_journal_start_sb+0x1d5/0x470 [ 2722.870091] ext4_alloc_file_blocks.isra.0+0x2c1/0xb20 [ 2722.870645] ? ext4_ext_correct_indexes+0x440/0x440 [ 2722.871177] ? down_write_killable+0x170/0x170 [ 2722.871687] ext4_fallocate+0x1a2b/0x3c90 [ 2722.872126] ? lock_acquire+0x1b2/0x530 [ 2722.872546] ? lock_release+0x750/0x750 [ 2722.872969] ? ext4_ext_truncate+0x3e0/0x3e0 [ 2722.873432] ? lock_is_held_type+0xd7/0x130 [ 2722.873857] ? ext4_ext_truncate+0x3e0/0x3e0 [ 2722.874325] vfs_fallocate+0x489/0xe00 [ 2722.874744] __x64_sys_fallocate+0xcf/0x140 [ 2722.875208] do_syscall_64+0x3b/0x90 [ 2722.875617] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2722.876160] RIP: 0033:0x7fd845bccb19 [ 2722.876548] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2722.878477] RSP: 002b:00007fd843142188 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 2722.879269] RAX: ffffffffffffffda RBX: 00007fd845cdff60 RCX: 00007fd845bccb19 [ 2722.880028] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 2722.880774] RBP: 00007fd8431421d0 R08: 0000000000000000 R09: 0000000000000000 [ 2722.881463] R10: 00000000087ffffc R11: 0000000000000246 R12: 0000000000000002 [ 2722.882214] R13: 00007ffde12fa01f R14: 00007fd843142300 R15: 0000000000022000 [ 2722.882974] [ 2722.917030] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13354 comm=syz-executor.4 [ 2722.925057] FAULT_INJECTION: forcing a failure. [ 2722.925057] name failslab, interval 1, probability 0, space 0, times 0 [ 2722.927614] CPU: 0 PID: 13355 Comm: syz-executor.3 Not tainted 5.18.0-rc1-next-20220406 #1 [ 2722.929499] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2722.932078] Call Trace: [ 2722.932661] [ 2722.933166] dump_stack_lvl+0x8b/0xb3 [ 2722.934043] should_fail.cold+0x5/0xa [ 2722.934911] ? vm_area_dup+0x78/0x290 [ 2722.935808] should_failslab+0x5/0x10 [ 2722.936682] kmem_cache_alloc+0x5b/0x480 [ 2722.937623] vm_area_dup+0x78/0x290 [ 2722.938470] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 2722.939741] ? copy_page_range+0x2d29/0x4cc0 [ 2722.940796] ? vm_area_alloc+0x110/0x110 [ 2722.941735] ? vm_iomap_memory+0x190/0x190 [ 2722.942713] ? down_write+0xde/0x150 [ 2722.943597] ? up_write+0x148/0x460 [ 2722.944435] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 2722.945582] ? __vma_link_rb+0x540/0x700 [ 2722.946525] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2722.947791] ? vm_stat_account+0xed/0x180 [ 2722.948757] dup_mm+0x53f/0x1250 [ 2722.949575] ? replace_mm_exe_file+0x490/0x490 [ 2722.950641] ? __raw_spin_lock_init+0x36/0x110 [ 2722.951717] copy_process+0x698c/0x6db0 [ 2722.952691] ? __cleanup_sighand+0xb0/0xb0 [ 2722.953693] ? lock_release+0x3b2/0x750 [ 2722.954613] ? ksys_write+0x20c/0x250 [ 2722.955515] ? kernel_clone+0x2f8/0xa60 [ 2722.956455] kernel_clone+0xe7/0xa60 [ 2722.957334] ? find_held_lock+0x2c/0x110 [ 2722.958281] ? create_io_thread+0xf0/0xf0 [ 2722.959266] ? __mutex_unlock_slowpath+0x15c/0x5e0 [ 2722.960426] ? bit_wait_io_timeout+0x160/0x160 [ 2722.961490] ? lock_is_held_type+0xd7/0x130 [ 2722.962483] __do_sys_fork+0x8a/0xc0 [ 2722.963249] ? kernel_clone+0xa60/0xa60 [ 2722.964080] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 2722.965221] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2722.966285] ? lockdep_hardirqs_on+0x79/0x100 [ 2722.967204] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2722.968271] do_syscall_64+0x3b/0x90 [ 2722.969032] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2722.970099] RIP: 0033:0x7fc1c2a89b19 [ 2722.970856] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2722.974619] RSP: 002b:00007fc1bffff188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 2722.976185] RAX: ffffffffffffffda RBX: 00007fc1c2b9cf60 RCX: 00007fc1c2a89b19 [ 2722.977653] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2722.979117] RBP: 00007fc1bffff1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2722.980590] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2722.982069] R13: 00007fff0449096f R14: 00007fc1bffff300 R15: 0000000000022000 [ 2722.983594] [ 2722.992495] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13360 comm=syz-executor.4 07:06:58 executing program 7: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000001340)) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x204800, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x1) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002480)='fd/3\x00') r2 = dup(r1) fdatasync(r2) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x40}}, './file0\x00'}) preadv2(r3, &(0x7f0000001300)=[{&(0x7f0000000080)=""/193, 0xc1}, {&(0x7f0000000180)=""/250, 0xfa}, {&(0x7f0000000300)=""/4096, 0x1000}], 0x3, 0x80000000, 0x66, 0x18) r4 = openat(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000001380)=0x100000) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r5, 0x900, 0x0, 0x87ffffc) sendfile(r5, r4, 0x0, 0x80000000) [ 2723.005893] FAULT_INJECTION: forcing a failure. [ 2723.005893] name failslab, interval 1, probability 0, space 0, times 0 [ 2723.008500] CPU: 0 PID: 13358 Comm: syz-executor.5 Not tainted 5.18.0-rc1-next-20220406 #1 [ 2723.010292] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2723.012747] Call Trace: [ 2723.013303] [ 2723.013790] dump_stack_lvl+0x8b/0xb3 [ 2723.014634] should_fail.cold+0x5/0xa [ 2723.015478] ? ext4_mb_new_blocks+0x64b/0x4b60 [ 2723.016480] should_failslab+0x5/0x10 [ 2723.017317] kmem_cache_alloc+0x5b/0x480 [ 2723.018224] ext4_mb_new_blocks+0x64b/0x4b60 [ 2723.019203] ? lock_is_held_type+0xd7/0x130 [ 2723.020198] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2723.021414] ? ext4_cache_extents+0x148/0x2d0 [ 2723.022401] ? ext4_discard_preallocations+0xe60/0xe60 [ 2723.023564] ? __sanitizer_cov_trace_const_cmp2+0x22/0x80 [ 2723.024779] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2723.025999] ? ext4_ext_search_right+0x2e3/0xbd0 [ 2723.027061] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2723.028312] ext4_ext_map_blocks+0x1fb0/0x5cd0 [ 2723.029358] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 2723.030528] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 2723.031724] ? ext4_ext_release+0x10/0x10 [ 2723.032670] ? lock_release+0x750/0x750 [ 2723.033571] ? lock_release+0x3b2/0x750 [ 2723.034480] ? lock_is_held_type+0xd7/0x130 [ 2723.035491] ? down_write_killable+0x170/0x170 [ 2723.036542] ext4_map_blocks+0x652/0x1970 [ 2723.037498] ? lock_is_held_type+0xd7/0x130 [ 2723.038494] ? ext4_issue_zeroout+0x1c0/0x1c0 [ 2723.039540] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 2723.040790] ? jbd2__journal_start+0xf3/0x8d0 [ 2723.041812] ? __ext4_journal_start_sb+0x392/0x470 [ 2723.042925] ? __ext4_journal_start_sb+0x1d5/0x470 [ 2723.044058] ext4_alloc_file_blocks.isra.0+0x2c1/0xb20 [ 2723.045274] ? ext4_ext_correct_indexes+0x440/0x440 [ 2723.046420] ? down_write_killable+0x170/0x170 [ 2723.047502] ext4_fallocate+0x1a2b/0x3c90 [ 2723.048466] ? lock_acquire+0x1b2/0x530 [ 2723.049392] ? lock_release+0x750/0x750 [ 2723.050325] ? ext4_ext_truncate+0x3e0/0x3e0 [ 2723.051348] ? lock_is_held_type+0xd7/0x130 [ 2723.052379] ? ext4_ext_truncate+0x3e0/0x3e0 [ 2723.053399] vfs_fallocate+0x489/0xe00 [ 2723.054331] __x64_sys_fallocate+0xcf/0x140 [ 2723.055352] do_syscall_64+0x3b/0x90 [ 2723.056247] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2723.057457] RIP: 0033:0x7f35817a9b19 [ 2723.058319] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2723.062628] RSP: 002b:00007f357ed1f188 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 2723.064441] RAX: ffffffffffffffda RBX: 00007f35818bcf60 RCX: 00007f35817a9b19 [ 2723.066129] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 2723.067821] RBP: 00007f357ed1f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2723.069496] R10: 00000000087ffffc R11: 0000000000000246 R12: 0000000000000002 [ 2723.070934] R13: 00007ffdd683fcbf R14: 00007f357ed1f300 R15: 0000000000022000 [ 2723.072415] 07:06:58 executing program 1: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) preadv(r0, &(0x7f00000011c0)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x7, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x0, 0x0, 0x87ffffc) mmap$perf(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000008, 0x1010, r2, 0x4) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000100), 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r3 = syz_open_procfs(0x0, 0x0) preadv(r3, &(0x7f0000000080)=[{&(0x7f0000000000)=""/40, 0x40}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000001240)={0x1, 0x80, 0x9, 0xa1, 0xf9, 0x3, 0x0, 0x7, 0xa0400, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x3, @perf_config_ext={0x58d}, 0x21, 0x1, 0x0, 0x6, 0x9, 0x0, 0x8000, 0x0, 0x80, 0x0, 0x5}, 0xffffffffffffffff, 0x4, r3, 0x0) r4 = gettid() process_vm_readv(r4, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/4078, 0xfee}, {&(0x7f0000000000)=""/123, 0x7b}, {&(0x7f0000000100)=""/57, 0x39}], 0x3, &(0x7f0000000240)=[{&(0x7f0000012940)=""/102400, 0xffffff76}], 0x1, 0x0) perf_event_open(0x0, 0x0, 0x1, r3, 0x8) 07:06:58 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f00000001c0)=0x8) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x14, 0x0, 0x0, 0x1e}, 0x14}}, 0x0) [ 2723.160915] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13367 comm=syz-executor.4 [ 2723.173084] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13368 comm=syz-executor.4 07:06:58 executing program 2: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x204800, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x1) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002480)='fd/3\x00') fdatasync(0xffffffffffffffff) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x40}}, './file0\x00'}) preadv2(r2, &(0x7f0000001300)=[{&(0x7f0000000080)=""/193, 0xc1}, {&(0x7f0000000180)=""/250, 0xfa}, {&(0x7f0000000300)=""/4096, 0x1000}], 0x3, 0x80000000, 0x66, 0x18) openat(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r3, 0x0, 0x0, 0x87ffffc) (fail_nth: 39) 07:06:58 executing program 0: openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r0, 0x0, 0x0, 0x87ffffc) mmap$perf(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000008, 0x10, 0xffffffffffffffff, 0x4) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x12, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = syz_open_procfs(0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001240)={0x1, 0x80, 0x0, 0xa1, 0x0, 0x0, 0x0, 0x7, 0xa0400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x3, @perf_config_ext, 0x21, 0x1, 0x0, 0x0, 0x9, 0x0, 0x8000, 0x0, 0x80, 0x0, 0x5}, 0xffffffffffffffff, 0x4, r1, 0x0) r2 = gettid() process_vm_readv(r2, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/4078, 0xfee}, {&(0x7f0000000000)=""/123, 0x7b}, {&(0x7f0000000100)=""/57, 0x39}], 0x3, &(0x7f0000000240)=[{&(0x7f0000012940)=""/102400, 0xffffff76}], 0x208, 0x0) perf_event_open(0x0, r2, 0x1, r1, 0x8) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/consoles\x00', 0x0, 0x0) [ 2723.313834] FAULT_INJECTION: forcing a failure. [ 2723.313834] name failslab, interval 1, probability 0, space 0, times 0 [ 2723.316358] CPU: 1 PID: 13372 Comm: syz-executor.2 Not tainted 5.18.0-rc1-next-20220406 #1 [ 2723.317982] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2723.320182] Call Trace: [ 2723.320683] [ 2723.321119] dump_stack_lvl+0x8b/0xb3 [ 2723.321883] should_fail.cold+0x5/0xa [ 2723.322633] ? ext4_mb_new_blocks+0x222c/0x4b60 [ 2723.323574] should_failslab+0x5/0x10 [ 2723.324390] kmem_cache_alloc+0x5b/0x480 [ 2723.325302] ext4_mb_new_blocks+0x222c/0x4b60 [ 2723.326307] ? lock_is_held_type+0xd7/0x130 [ 2723.327280] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2723.328504] ? ext4_cache_extents+0x148/0x2d0 [ 2723.329492] ? ext4_discard_preallocations+0xe60/0xe60 [ 2723.330644] ? __sanitizer_cov_trace_const_cmp2+0x22/0x80 [ 2723.331872] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2723.332955] ? ext4_ext_search_right+0x2e3/0xbd0 [ 2723.333890] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2723.334975] ext4_ext_map_blocks+0x1fb0/0x5cd0 [ 2723.335900] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 2723.336933] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 2723.337980] ? ext4_ext_release+0x10/0x10 [ 2723.338806] ? lock_release+0x750/0x750 [ 2723.339597] ? lock_release+0x3b2/0x750 [ 2723.340448] ? lock_is_held_type+0xd7/0x130 [ 2723.341425] ? down_write_killable+0x170/0x170 [ 2723.342446] ext4_map_blocks+0x652/0x1970 [ 2723.343373] ? lock_is_held_type+0xd7/0x130 [ 2723.344358] ? ext4_issue_zeroout+0x1c0/0x1c0 [ 2723.345350] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 2723.346564] ? jbd2__journal_start+0xf3/0x8d0 [ 2723.347567] ? __ext4_journal_start_sb+0x392/0x470 [ 2723.348638] ? __ext4_journal_start_sb+0x1d5/0x470 [ 2723.349718] ext4_alloc_file_blocks.isra.0+0x2c1/0xb20 [ 2723.350880] ? ext4_ext_correct_indexes+0x440/0x440 [ 2723.351988] ? down_write_killable+0x170/0x170 [ 2723.353010] ext4_fallocate+0x1a2b/0x3c90 [ 2723.353921] ? lock_acquire+0x1b2/0x530 [ 2723.354802] ? lock_release+0x750/0x750 [ 2723.355710] ? ext4_ext_truncate+0x3e0/0x3e0 [ 2723.356601] ? lock_is_held_type+0xd7/0x130 [ 2723.357456] ? ext4_ext_truncate+0x3e0/0x3e0 [ 2723.358319] vfs_fallocate+0x489/0xe00 [ 2723.359101] __x64_sys_fallocate+0xcf/0x140 [ 2723.359963] do_syscall_64+0x3b/0x90 [ 2723.360698] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2723.361709] RIP: 0033:0x7fd845bccb19 [ 2723.362434] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2723.366256] RSP: 002b:00007fd843142188 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 2723.367927] RAX: ffffffffffffffda RBX: 00007fd845cdff60 RCX: 00007fd845bccb19 [ 2723.369476] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 2723.371019] RBP: 00007fd8431421d0 R08: 0000000000000000 R09: 0000000000000000 [ 2723.372569] R10: 00000000087ffffc R11: 0000000000000246 R12: 0000000000000002 [ 2723.374116] R13: 00007ffde12fa01f R14: 00007fd843142300 R15: 0000000000022000 [ 2723.375714] 07:07:12 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f00000001c0)=0x8) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x14, 0x0, 0x0, 0x21}, 0x14}}, 0x0) 07:07:12 executing program 0: openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r0, 0x0, 0x0, 0x87ffffc) mmap$perf(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000008, 0x10, 0xffffffffffffffff, 0x4) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x12, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = syz_open_procfs(0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001240)={0x1, 0x80, 0x0, 0xa1, 0x0, 0x0, 0x0, 0x7, 0xa0400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x3, @perf_config_ext, 0x21, 0x1, 0x0, 0x0, 0x9, 0x0, 0x8000, 0x0, 0x80, 0x0, 0x5}, 0xffffffffffffffff, 0x4, r1, 0x0) r2 = gettid() process_vm_readv(r2, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/4078, 0xfee}, {&(0x7f0000000000)=""/123, 0x7b}, {&(0x7f0000000100)=""/57, 0x39}], 0x3, &(0x7f0000000240)=[{&(0x7f0000012940)=""/102400, 0xffffff76}], 0x209, 0x0) perf_event_open(0x0, r2, 0x1, r1, 0x8) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/consoles\x00', 0x0, 0x0) 07:07:12 executing program 1: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) preadv(r0, &(0x7f00000011c0)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x7, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x0, 0x0, 0x87ffffc) mmap$perf(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000008, 0x1010, r2, 0x4) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000100), 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r3 = syz_open_procfs(0x0, 0x0) preadv(r3, &(0x7f0000000080)=[{&(0x7f0000000000)=""/40, 0x40}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000001240)={0x1, 0x80, 0x9, 0xa1, 0xf9, 0x3, 0x0, 0x7, 0xa0400, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x3, @perf_config_ext={0x58d}, 0x21, 0x1, 0x0, 0x6, 0x9, 0x0, 0x8000, 0x0, 0x80, 0x0, 0x5}, 0xffffffffffffffff, 0x4, r3, 0x0) r4 = gettid() process_vm_readv(r4, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/4078, 0xfee}, {&(0x7f0000000000)=""/123, 0x7b}, {&(0x7f0000000100)=""/57, 0x39}], 0x3, &(0x7f0000000240)=[{&(0x7f0000012940)=""/102400, 0xffffff76}], 0x1, 0x0) perf_event_open(0x0, r4, 0x0, r3, 0x8) 07:07:12 executing program 6: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) preadv(r0, &(0x7f00000011c0)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x7, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x0, 0x0, 0x87ffffc) mmap$perf(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000008, 0x1010, r2, 0x4) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000100), 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r3 = syz_open_procfs(0x0, 0x0) perf_event_open(&(0x7f0000001240)={0x1, 0x80, 0x9, 0xa1, 0xf9, 0x3, 0x0, 0x7, 0xa0400, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x3, @perf_config_ext={0x58d}, 0x21, 0x1, 0x0, 0x6, 0x9, 0x0, 0x8000, 0x0, 0x80, 0x0, 0x5}, 0xffffffffffffffff, 0x4, r3, 0x0) r4 = gettid() process_vm_readv(r4, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/4078, 0xfee}, {&(0x7f0000000000)=""/123, 0x7b}, {&(0x7f0000000100)=""/57, 0x39}], 0x3, &(0x7f0000000240)=[{&(0x7f0000012940)=""/102400, 0xffffff76}], 0x1, 0x0) perf_event_open(0x0, r4, 0x1, 0xffffffffffffffff, 0x8) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/consoles\x00', 0x0, 0x0) 07:07:12 executing program 7: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000001340)) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x204800, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x1) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002480)='fd/3\x00') r2 = dup(r1) fdatasync(r2) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x40}}, './file0\x00'}) preadv2(r3, &(0x7f0000001300)=[{&(0x7f0000000080)=""/193, 0xc1}, {&(0x7f0000000180)=""/250, 0xfa}, {&(0x7f0000000300)=""/4096, 0x1000}], 0x3, 0x80000000, 0x66, 0x18) r4 = openat(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000001380)=0x100000) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r5, 0xa00, 0x0, 0x87ffffc) sendfile(r5, r4, 0x0, 0x80000000) 07:07:12 executing program 3: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000040)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x300000c, 0x13, r0, 0x8000000) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xa) fork() (fail_nth: 46) [ 2736.745515] FAULT_INJECTION: forcing a failure. [ 2736.745515] name failslab, interval 1, probability 0, space 0, times 0 [ 2736.746719] CPU: 1 PID: 13386 Comm: syz-executor.3 Not tainted 5.18.0-rc1-next-20220406 #1 [ 2736.747525] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2736.748627] Call Trace: [ 2736.748987] [ 2736.749282] dump_stack_lvl+0x8b/0xb3 [ 2736.749783] should_fail.cold+0x5/0xa [ 2736.750275] ? create_object.isra.0+0x3a/0xa20 [ 2736.750866] should_failslab+0x5/0x10 [ 2736.751368] kmem_cache_alloc+0x5b/0x480 [ 2736.751919] create_object.isra.0+0x3a/0xa20 [ 2736.752482] ? kasan_unpoison+0x23/0x50 07:07:12 executing program 5: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) preadv(r0, &(0x7f00000011c0)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x7, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x0, 0x0, 0x87ffffc) (fail_nth: 40) mmap$perf(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000008, 0x1010, r2, 0x4) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000100), 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r3 = syz_open_procfs(0x0, 0x0) perf_event_open(&(0x7f0000001240)={0x1, 0x80, 0x9, 0xa1, 0xf9, 0x3, 0x0, 0x7, 0xa0400, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x3, @perf_config_ext={0x58d}, 0x21, 0x1, 0x0, 0x6, 0x9, 0x0, 0x8000, 0x0, 0x80, 0x0, 0x5}, 0xffffffffffffffff, 0x4, r3, 0x0) r4 = gettid() perf_event_open(0x0, r4, 0x1, r3, 0x8) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/consoles\x00', 0x0, 0x0) 07:07:12 executing program 2: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x204800, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x1) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002480)='fd/3\x00') fdatasync(0xffffffffffffffff) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x40}}, './file0\x00'}) preadv2(r2, &(0x7f0000001300)=[{&(0x7f0000000080)=""/193, 0xc1}, {&(0x7f0000000180)=""/250, 0xfa}, {&(0x7f0000000300)=""/4096, 0x1000}], 0x3, 0x80000000, 0x66, 0x18) openat(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r3, 0x0, 0x0, 0x87ffffc) (fail_nth: 40) [ 2736.752996] kmem_cache_alloc+0x239/0x480 [ 2736.753622] vm_area_dup+0x78/0x290 [ 2736.753991] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 2736.754543] ? copy_page_range+0x2d29/0x4cc0 [ 2736.754999] ? vm_area_alloc+0x110/0x110 [ 2736.755407] ? vm_iomap_memory+0x190/0x190 [ 2736.755834] ? down_write+0xde/0x150 [ 2736.756209] ? up_write+0x148/0x460 [ 2736.756567] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 2736.757056] ? __vma_link_rb+0x540/0x700 [ 2736.757462] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2736.758009] ? vm_stat_account+0xed/0x180 [ 2736.758425] dup_mm+0x53f/0x1250 [ 2736.758770] ? replace_mm_exe_file+0x490/0x490 [ 2736.759223] ? __raw_spin_lock_init+0x36/0x110 [ 2736.759703] copy_process+0x698c/0x6db0 [ 2736.760114] ? __cleanup_sighand+0xb0/0xb0 [ 2736.760544] ? lock_release+0x3b2/0x750 [ 2736.760932] ? ksys_write+0x20c/0x250 [ 2736.761306] ? kernel_clone+0x2f8/0xa60 [ 2736.761435] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13394 comm=syz-executor.4 [ 2736.761698] kernel_clone+0xe7/0xa60 [ 2736.764515] ? find_held_lock+0x2c/0x110 [ 2736.764943] ? create_io_thread+0xf0/0xf0 [ 2736.765371] ? __mutex_unlock_slowpath+0x15c/0x5e0 [ 2736.765881] ? bit_wait_io_timeout+0x160/0x160 [ 2736.766339] ? lock_is_held_type+0xd7/0x130 [ 2736.766794] __do_sys_fork+0x8a/0xc0 [ 2736.767170] ? kernel_clone+0xa60/0xa60 [ 2736.767619] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 2736.768211] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2736.768765] ? lockdep_hardirqs_on+0x79/0x100 [ 2736.769218] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2736.769748] do_syscall_64+0x3b/0x90 [ 2736.770131] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2736.770681] RIP: 0033:0x7fc1c2a89b19 [ 2736.771063] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2736.772992] RSP: 002b:00007fc1bffff188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 2736.773762] RAX: ffffffffffffffda RBX: 00007fc1c2b9cf60 RCX: 00007fc1c2a89b19 [ 2736.774496] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2736.775242] RBP: 00007fc1bffff1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2736.776005] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2736.776745] R13: 00007fff0449096f R14: 00007fc1bffff300 R15: 0000000000022000 [ 2736.777497] [ 2736.777851] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13397 comm=syz-executor.4 [ 2736.802981] FAULT_INJECTION: forcing a failure. [ 2736.802981] name failslab, interval 1, probability 0, space 0, times 0 [ 2736.806802] CPU: 0 PID: 13395 Comm: syz-executor.5 Not tainted 5.18.0-rc1-next-20220406 #1 [ 2736.808546] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2736.810836] Call Trace: [ 2736.811363] [ 2736.811834] dump_stack_lvl+0x8b/0xb3 [ 2736.812633] should_fail.cold+0x5/0xa [ 2736.813417] ? ext4_mb_new_blocks+0x64b/0x4b60 [ 2736.814359] should_failslab+0x5/0x10 [ 2736.815148] kmem_cache_alloc+0x5b/0x480 [ 2736.816016] ext4_mb_new_blocks+0x64b/0x4b60 [ 2736.816944] ? lock_is_held_type+0xd7/0x130 [ 2736.817858] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2736.819007] ? ext4_cache_extents+0x148/0x2d0 [ 2736.819934] ? ext4_discard_preallocations+0xe60/0xe60 [ 2736.821017] ? __sanitizer_cov_trace_const_cmp2+0x22/0x80 [ 2736.822162] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2736.823303] ? ext4_ext_search_right+0x2e3/0xbd0 [ 2736.824298] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2736.825453] ext4_ext_map_blocks+0x1fb0/0x5cd0 [ 2736.826414] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 2736.827505] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 2736.828611] ? ext4_ext_release+0x10/0x10 [ 2736.829470] ? lock_release+0x750/0x750 [ 2736.830285] ? lock_release+0x3b2/0x750 [ 2736.831106] ? lock_is_held_type+0xd7/0x130 [ 2736.832024] ? down_write_killable+0x170/0x170 [ 2736.832977] ext4_map_blocks+0x652/0x1970 [ 2736.833834] ? lock_is_held_type+0xd7/0x130 [ 2736.834721] ? ext4_issue_zeroout+0x1c0/0x1c0 [ 2736.835659] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 2736.836785] ? jbd2__journal_start+0xf3/0x8d0 [ 2736.837705] ? __ext4_journal_start_sb+0x392/0x470 [ 2736.838693] ? __ext4_journal_start_sb+0x1d5/0x470 [ 2736.839703] ext4_alloc_file_blocks.isra.0+0x2c1/0xb20 [ 2736.840781] ? ext4_ext_correct_indexes+0x440/0x440 [ 2736.841799] ? down_write_killable+0x170/0x170 [ 2736.842745] ext4_fallocate+0x1a2b/0x3c90 [ 2736.843588] ? lock_acquire+0x1b2/0x530 [ 2736.844426] ? lock_release+0x750/0x750 [ 2736.845259] ? ext4_ext_truncate+0x3e0/0x3e0 [ 2736.846166] ? lock_is_held_type+0xd7/0x130 [ 2736.847068] ? ext4_ext_truncate+0x3e0/0x3e0 [ 2736.847988] vfs_fallocate+0x489/0xe00 [ 2736.848804] __x64_sys_fallocate+0xcf/0x140 [ 2736.849698] do_syscall_64+0x3b/0x90 [ 2736.850463] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2736.851529] RIP: 0033:0x7f35817a9b19 [ 2736.852308] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2736.856043] RSP: 002b:00007f357ed1f188 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 2736.857621] RAX: ffffffffffffffda RBX: 00007f35818bcf60 RCX: 00007f35817a9b19 [ 2736.859312] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 2736.861004] RBP: 00007f357ed1f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2736.862706] R10: 00000000087ffffc R11: 0000000000000246 R12: 0000000000000002 [ 2736.864404] R13: 00007ffdd683fcbf R14: 00007f357ed1f300 R15: 0000000000022000 [ 2736.866129] 07:07:12 executing program 1: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) preadv(r0, &(0x7f00000011c0)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x7, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x0, 0x0, 0x87ffffc) mmap$perf(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000008, 0x1010, r2, 0x4) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000100), 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r3 = syz_open_procfs(0x0, 0x0) preadv(r3, &(0x7f0000000080)=[{&(0x7f0000000000)=""/40, 0x40}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000001240)={0x1, 0x80, 0x9, 0xa1, 0xf9, 0x3, 0x0, 0x7, 0xa0400, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x3, @perf_config_ext={0x58d}, 0x21, 0x1, 0x0, 0x6, 0x9, 0x0, 0x8000, 0x0, 0x80, 0x0, 0x5}, 0xffffffffffffffff, 0x4, r3, 0x0) r4 = gettid() process_vm_readv(r4, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/4078, 0xfee}, {&(0x7f0000000000)=""/123, 0x7b}, {&(0x7f0000000100)=""/57, 0x39}], 0x3, &(0x7f0000000240)=[{&(0x7f0000012940)=""/102400, 0xffffff76}], 0x1, 0x0) perf_event_open(0x0, r4, 0x0, r3, 0x8) 07:07:12 executing program 6: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) preadv(r0, &(0x7f00000011c0)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x7, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x0, 0x0, 0x87ffffc) mmap$perf(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000008, 0x1010, r2, 0x4) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000100), 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r3 = syz_open_procfs(0x0, 0x0) perf_event_open(&(0x7f0000001240)={0x1, 0x80, 0x9, 0xa1, 0xf9, 0x3, 0x0, 0x7, 0xa0400, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x3, @perf_config_ext={0x58d}, 0x21, 0x1, 0x0, 0x6, 0x9, 0x0, 0x8000, 0x0, 0x80, 0x0, 0x5}, 0xffffffffffffffff, 0x4, r3, 0x0) r4 = gettid() process_vm_readv(r4, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/4078, 0xfee}, {&(0x7f0000000000)=""/123, 0x7b}, {&(0x7f0000000100)=""/57, 0x39}], 0x3, &(0x7f0000000240)=[{&(0x7f0000012940)=""/102400, 0xffffff76}], 0x1, 0x0) perf_event_open(0x0, r4, 0x1, r3, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/consoles\x00', 0x0, 0x0) 07:07:12 executing program 5: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) preadv(r0, &(0x7f00000011c0)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x7, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x0, 0x0, 0x87ffffc) (fail_nth: 41) mmap$perf(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000008, 0x1010, r2, 0x4) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000100), 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r3 = syz_open_procfs(0x0, 0x0) perf_event_open(&(0x7f0000001240)={0x1, 0x80, 0x9, 0xa1, 0xf9, 0x3, 0x0, 0x7, 0xa0400, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x3, @perf_config_ext={0x58d}, 0x21, 0x1, 0x0, 0x6, 0x9, 0x0, 0x8000, 0x0, 0x80, 0x0, 0x5}, 0xffffffffffffffff, 0x4, r3, 0x0) r4 = gettid() perf_event_open(0x0, r4, 0x1, r3, 0x8) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/consoles\x00', 0x0, 0x0) 07:07:12 executing program 7: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000001340)) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x204800, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x1) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002480)='fd/3\x00') r2 = dup(r1) fdatasync(r2) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x40}}, './file0\x00'}) preadv2(r3, &(0x7f0000001300)=[{&(0x7f0000000080)=""/193, 0xc1}, {&(0x7f0000000180)=""/250, 0xfa}, {&(0x7f0000000300)=""/4096, 0x1000}], 0x3, 0x80000000, 0x66, 0x18) r4 = openat(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000001380)=0x100000) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r5, 0xb00, 0x0, 0x87ffffc) sendfile(r5, r4, 0x0, 0x80000000) 07:07:12 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f00000001c0)=0x8) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x14, 0x0, 0x0, 0x22}, 0x14}}, 0x0) 07:07:12 executing program 2: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x204800, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x1) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002480)='fd/3\x00') fdatasync(0xffffffffffffffff) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x40}}, './file0\x00'}) preadv2(r2, &(0x7f0000001300)=[{&(0x7f0000000080)=""/193, 0xc1}, {&(0x7f0000000180)=""/250, 0xfa}, {&(0x7f0000000300)=""/4096, 0x1000}], 0x3, 0x80000000, 0x66, 0x18) openat(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r3, 0x0, 0x0, 0x87ffffc) 07:07:12 executing program 3: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000040)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x300000c, 0x13, r0, 0x8000000) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xa) fork() (fail_nth: 47) 07:07:12 executing program 0: openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r0, 0x0, 0x0, 0x87ffffc) mmap$perf(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000008, 0x10, 0xffffffffffffffff, 0x4) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x12, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = syz_open_procfs(0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001240)={0x1, 0x80, 0x0, 0xa1, 0x0, 0x0, 0x0, 0x7, 0xa0400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x3, @perf_config_ext, 0x21, 0x1, 0x0, 0x0, 0x9, 0x0, 0x8000, 0x0, 0x80, 0x0, 0x5}, 0xffffffffffffffff, 0x4, r1, 0x0) r2 = gettid() process_vm_readv(r2, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/4078, 0xfee}, {&(0x7f0000000000)=""/123, 0x7b}, {&(0x7f0000000100)=""/57, 0x39}], 0x3, &(0x7f0000000240)=[{&(0x7f0000012940)=""/102400, 0xffffff76}], 0x20a, 0x0) perf_event_open(0x0, r2, 0x1, r1, 0x8) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/consoles\x00', 0x0, 0x0) [ 2737.050889] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13413 comm=syz-executor.4 07:07:12 executing program 1: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) preadv(r0, &(0x7f00000011c0)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x7, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x0, 0x0, 0x87ffffc) mmap$perf(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000008, 0x1010, r2, 0x4) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000100), 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r3 = syz_open_procfs(0x0, 0x0) preadv(r3, &(0x7f0000000080)=[{&(0x7f0000000000)=""/40, 0x40}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000001240)={0x1, 0x80, 0x9, 0xa1, 0xf9, 0x3, 0x0, 0x7, 0xa0400, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x3, @perf_config_ext={0x58d}, 0x21, 0x1, 0x0, 0x6, 0x9, 0x0, 0x8000, 0x0, 0x80, 0x0, 0x5}, 0xffffffffffffffff, 0x4, r3, 0x0) r4 = gettid() process_vm_readv(r4, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/4078, 0xfee}, {&(0x7f0000000000)=""/123, 0x7b}, {&(0x7f0000000100)=""/57, 0x39}], 0x3, &(0x7f0000000240)=[{&(0x7f0000012940)=""/102400, 0xffffff76}], 0x1, 0x0) perf_event_open(0x0, r4, 0x0, r3, 0x8) 07:07:12 executing program 6: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) preadv(r0, &(0x7f00000011c0)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x7, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x0, 0x0, 0x87ffffc) mmap$perf(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000008, 0x1010, r2, 0x4) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000100), 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r3 = syz_open_procfs(0x0, 0x0) perf_event_open(&(0x7f0000001240)={0x1, 0x80, 0x9, 0xa1, 0xf9, 0x3, 0x0, 0x7, 0xa0400, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x3, @perf_config_ext={0x58d}, 0x21, 0x1, 0x0, 0x6, 0x9, 0x0, 0x8000, 0x0, 0x80, 0x0, 0x5}, 0xffffffffffffffff, 0x4, r3, 0x0) r4 = gettid() process_vm_readv(r4, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/4078, 0xfee}, {&(0x7f0000000000)=""/123, 0x7b}, {&(0x7f0000000100)=""/57, 0x39}], 0x3, &(0x7f0000000240)=[{&(0x7f0000012940)=""/102400, 0xffffff76}], 0x1, 0x0) perf_event_open(0x0, r4, 0x1, r3, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/consoles\x00', 0x0, 0x0) [ 2737.061599] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13417 comm=syz-executor.4 [ 2737.080824] FAULT_INJECTION: forcing a failure. [ 2737.080824] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2737.081995] CPU: 1 PID: 13420 Comm: syz-executor.3 Not tainted 5.18.0-rc1-next-20220406 #1 [ 2737.082810] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2737.083948] Call Trace: [ 2737.084208] [ 2737.084430] dump_stack_lvl+0x8b/0xb3 [ 2737.084812] should_fail.cold+0x5/0xa [ 2737.085199] prepare_alloc_pages+0x17b/0x500 [ 2737.085642] __alloc_pages+0x131/0x4e0 [ 2737.086031] ? memtype_seq_stop+0x20/0x20 [ 2737.086437] ? __alloc_pages_slowpath.constprop.0+0x1f10/0x1f10 [ 2737.087022] ? lookup_memtype+0x5b/0x1f0 [ 2737.087425] ? arch_io_reserve_memtype_wc+0xa0/0xa0 [ 2737.087943] alloc_pages+0x1a0/0x2f0 [ 2737.088323] pte_alloc_one+0x16/0x1f0 [ 2737.088712] __pte_alloc+0x69/0x200 [ 2737.089073] ? pmd_install+0x250/0x250 [ 2737.089119] FAULT_INJECTION: forcing a failure. [ 2737.089119] name failslab, interval 1, probability 0, space 0, times 0 [ 2737.089467] copy_page_range+0x207a/0x4cc0 [ 2737.089486] ? lock_chain_count+0x20/0x20 [ 2737.089535] ? vm_iomap_memory+0x190/0x190 [ 2737.089552] ? lockdep_hardirqs_on+0x79/0x100 [ 2737.089573] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2737.094214] ? dup_mm+0x6ff/0x1250 [ 2737.094569] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 2737.095077] ? __vma_link_rb+0x540/0x700 [ 2737.095494] dup_mm+0x961/0x1250 [ 2737.095861] ? replace_mm_exe_file+0x490/0x490 [ 2737.096327] ? __raw_spin_lock_init+0x36/0x110 [ 2737.096785] copy_process+0x698c/0x6db0 [ 2737.097197] ? __cleanup_sighand+0xb0/0xb0 [ 2737.097635] ? lock_release+0x3b2/0x750 [ 2737.098023] ? ksys_write+0x20c/0x250 [ 2737.098412] ? kernel_clone+0x2f8/0xa60 [ 2737.098808] kernel_clone+0xe7/0xa60 [ 2737.099184] ? find_held_lock+0x2c/0x110 [ 2737.099591] ? create_io_thread+0xf0/0xf0 [ 2737.100020] ? __mutex_unlock_slowpath+0x15c/0x5e0 [ 2737.100508] ? bit_wait_io_timeout+0x160/0x160 [ 2737.100983] ? lock_is_held_type+0xd7/0x130 [ 2737.101425] __do_sys_fork+0x8a/0xc0 [ 2737.101823] ? kernel_clone+0xa60/0xa60 [ 2737.102229] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 2737.102819] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2737.103351] ? lockdep_hardirqs_on+0x79/0x100 [ 2737.103832] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2737.104350] do_syscall_64+0x3b/0x90 [ 2737.104738] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2737.105252] RIP: 0033:0x7fc1c2a89b19 [ 2737.105639] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2737.107451] RSP: 002b:00007fc1bffff188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 2737.108257] RAX: ffffffffffffffda RBX: 00007fc1c2b9cf60 RCX: 00007fc1c2a89b19 [ 2737.108997] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2737.109747] RBP: 00007fc1bffff1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2737.110491] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2737.111237] R13: 00007fff0449096f R14: 00007fc1bffff300 R15: 0000000000022000 [ 2737.112006] [ 2737.113337] CPU: 0 PID: 13410 Comm: syz-executor.5 Not tainted 5.18.0-rc1-next-20220406 #1 [ 2737.115252] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2737.117867] Call Trace: [ 2737.118450] [ 2737.118962] dump_stack_lvl+0x8b/0xb3 [ 2737.119876] should_fail.cold+0x5/0xa [ 2737.120756] ? jbd2__journal_start+0x18c/0x8d0 [ 2737.121798] should_failslab+0x5/0x10 [ 2737.122678] kmem_cache_alloc+0x5b/0x480 [ 2737.123626] jbd2__journal_start+0x18c/0x8d0 [ 2737.124626] __ext4_journal_start_sb+0x392/0x470 [ 2737.125688] ? __ext4_journal_stop+0x107/0x1f0 [ 2737.126724] ext4_alloc_file_blocks.isra.0+0x286/0xb20 [ 2737.127947] ? ext4_ext_correct_indexes+0x440/0x440 [ 2737.129081] ? down_write_killable+0x170/0x170 [ 2737.130137] ext4_fallocate+0x1a2b/0x3c90 [ 2737.131078] ? lock_acquire+0x1b2/0x530 [ 2737.131993] ? lock_release+0x750/0x750 [ 2737.132905] ? ext4_ext_truncate+0x3e0/0x3e0 [ 2737.133896] ? lock_is_held_type+0xd7/0x130 [ 2737.134888] ? ext4_ext_truncate+0x3e0/0x3e0 [ 2737.135906] vfs_fallocate+0x489/0xe00 [ 2737.136812] __x64_sys_fallocate+0xcf/0x140 [ 2737.137792] do_syscall_64+0x3b/0x90 [ 2737.138641] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2737.139813] RIP: 0033:0x7f35817a9b19 [ 2737.140642] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2737.144746] RSP: 002b:00007f357ed1f188 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 2737.146429] RAX: ffffffffffffffda RBX: 00007f35818bcf60 RCX: 00007f35817a9b19 [ 2737.148022] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 2737.149598] RBP: 00007f357ed1f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2737.151167] R10: 00000000087ffffc R11: 0000000000000246 R12: 0000000000000002 [ 2737.152750] R13: 00007ffdd683fcbf R14: 00007f357ed1f300 R15: 0000000000022000 [ 2737.154351] 07:07:12 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f00000001c0)=0x8) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x14, 0x0, 0x0, 0x24}, 0x14}}, 0x0) 07:07:12 executing program 7: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000001340)) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x204800, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x1) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002480)='fd/3\x00') r2 = dup(r1) fdatasync(r2) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x40}}, './file0\x00'}) preadv2(r3, &(0x7f0000001300)=[{&(0x7f0000000080)=""/193, 0xc1}, {&(0x7f0000000180)=""/250, 0xfa}, {&(0x7f0000000300)=""/4096, 0x1000}], 0x3, 0x80000000, 0x66, 0x18) r4 = openat(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000001380)=0x100000) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r5, 0xc00, 0x0, 0x87ffffc) sendfile(r5, r4, 0x0, 0x80000000) [ 2737.227860] ------------[ cut here ]------------ [ 2737.228727] WARNING: CPU: 1 PID: 13420 at arch/x86/mm/pat/memtype.c:1099 untrack_pfn+0x247/0x290 [ 2737.229666] Modules linked in: [ 2737.229980] CPU: 1 PID: 13420 Comm: syz-executor.3 Not tainted 5.18.0-rc1-next-20220406 #1 [ 2737.230809] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2737.231941] RIP: 0010:untrack_pfn+0x247/0x290 [ 2737.232400] Code: 84 6c ff ff ff e8 29 cb 30 00 4c 89 ee 4c 89 e7 e8 9e db ff ff e8 19 cb 30 00 48 85 db 0f 85 58 ff ff ff eb 82 e8 09 cb 30 00 <0f> 0b e9 76 ff ff ff 48 89 df e8 8a e5 63 00 e9 98 fe ff ff e8 d0 [ 2737.234211] RSP: 0018:ffff888044d4f748 EFLAGS: 00010212 [ 2737.234729] RAX: 0000000000039db1 RBX: ffff88801cee4100 RCX: ffffc90007600000 [ 2737.235430] RDX: 0000000000040000 RSI: ffffffff81133e77 RDI: 0000000000000003 [ 2737.236125] RBP: 1ffff110089a9ee9 R08: 0000000000000000 R09: ffff88804291a543 [ 2737.236825] R10: ffffffff81133d46 R11: 0000000000000001 R12: 00000000ffffffea [ 2737.237530] R13: 0000000000000000 R14: 0000000000000000 R15: ffff88801cee4150 [ 2737.238259] FS: 00007fc1bffff700(0000) GS:ffff88806cf00000(0000) knlGS:0000000000000000 [ 2737.239036] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2737.239636] CR2: 00007fa22acd5218 CR3: 000000000ecb2000 CR4: 0000000000350ee0 [ 2737.240357] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2737.241087] DR3: 0000000000000000 DR6: 00000000ffff4ff0 DR7: 0000000000000400 [ 2737.241832] Call Trace: [ 2737.242098] [ 2737.242346] ? track_pfn_insert+0x140/0x140 [ 2737.242797] ? vm_normal_page+0x2e0/0x2e0 [ 2737.243247] ? lock_release+0x3b2/0x750 [ 2737.243676] ? lock_downgrade+0x6d0/0x6d0 [ 2737.244109] ? uprobe_munmap+0x1c/0x560 [ 2737.244555] unmap_single_vma+0x1bc/0x310 [ 2737.244992] unmap_vmas+0x16b/0x2f0 [ 2737.245393] ? lock_downgrade+0x6d0/0x6d0 [ 2737.245829] ? unmap_mapping_range+0x280/0x280 [ 2737.246487] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2737.247547] exit_mmap+0x192/0x460 [ 2737.247937] ? do_munmap+0x40/0x40 [ 2737.248626] ? delayed_uprobe_remove+0x27/0x230 [ 2737.249102] mmput+0xc8/0x380 [ 2737.249447] dup_mm+0xdd1/0x1250 [ 2737.249801] ? replace_mm_exe_file+0x490/0x490 [ 2737.250284] ? __raw_spin_lock_init+0x36/0x110 [ 2737.250362] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13433 comm=syz-executor.4 [ 2737.250752] copy_process+0x698c/0x6db0 [ 2737.253738] ? __cleanup_sighand+0xb0/0xb0 [ 2737.254256] ? lock_release+0x3b2/0x750 [ 2737.254675] ? ksys_write+0x20c/0x250 [ 2737.255067] ? kernel_clone+0x2f8/0xa60 [ 2737.255502] kernel_clone+0xe7/0xa60 [ 2737.255900] ? find_held_lock+0x2c/0x110 [ 2737.256338] ? create_io_thread+0xf0/0xf0 [ 2737.256778] ? __mutex_unlock_slowpath+0x15c/0x5e0 [ 2737.257318] ? bit_wait_io_timeout+0x160/0x160 [ 2737.257797] ? lock_is_held_type+0xd7/0x130 [ 2737.258274] __do_sys_fork+0x8a/0xc0 [ 2737.258669] ? kernel_clone+0xa60/0xa60 [ 2737.259087] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 2737.259699] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2737.260257] ? lockdep_hardirqs_on+0x79/0x100 [ 2737.260734] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2737.261297] do_syscall_64+0x3b/0x90 [ 2737.261696] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2737.262252] RIP: 0033:0x7fc1c2a89b19 [ 2737.262638] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2737.264540] RSP: 002b:00007fc1bffff188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 2737.265348] RAX: ffffffffffffffda RBX: 00007fc1c2b9cf60 RCX: 00007fc1c2a89b19 [ 2737.266082] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2737.266831] RBP: 00007fc1bffff1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2737.267584] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2737.268333] R13: 00007fff0449096f R14: 00007fc1bffff300 R15: 0000000000022000 [ 2737.269060] [ 2737.269323] irq event stamp: 2209 [ 2737.269675] hardirqs last enabled at (2217): [] __up_console_sem+0x78/0x80 [ 2737.270586] hardirqs last disabled at (2226): [] __up_console_sem+0x5d/0x80 [ 2737.271483] softirqs last enabled at (1964): [] __irq_exit_rcu+0x113/0x170 [ 2737.272398] softirqs last disabled at (1951): [] __irq_exit_rcu+0x113/0x170 [ 2737.272546] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13434 comm=syz-executor.4 [ 2737.273296] ---[ end trace 0000000000000000 ]--- 07:07:13 executing program 1: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) preadv(r0, &(0x7f00000011c0)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x7, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x0, 0x0, 0x87ffffc) mmap$perf(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000008, 0x1010, r2, 0x4) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000100), 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r3 = syz_open_procfs(0x0, 0x0) preadv(r3, &(0x7f0000000080)=[{&(0x7f0000000000)=""/40, 0x40}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000001240)={0x1, 0x80, 0x9, 0xa1, 0xf9, 0x3, 0x0, 0x7, 0xa0400, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x3, @perf_config_ext={0x58d}, 0x21, 0x1, 0x0, 0x6, 0x9, 0x0, 0x8000, 0x0, 0x80, 0x0, 0x5}, 0xffffffffffffffff, 0x4, r3, 0x0) r4 = gettid() process_vm_readv(r4, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/4078, 0xfee}, {&(0x7f0000000000)=""/123, 0x7b}, {&(0x7f0000000100)=""/57, 0x39}], 0x3, &(0x7f0000000240)=[{&(0x7f0000012940)=""/102400, 0xffffff76}], 0x1, 0x0) perf_event_open(0x0, r4, 0x1, 0xffffffffffffffff, 0x8) 07:07:13 executing program 6: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) preadv(r0, &(0x7f00000011c0)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x7, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x0, 0x0, 0x87ffffc) mmap$perf(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000008, 0x1010, r2, 0x4) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000100), 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r3 = syz_open_procfs(0x0, 0x0) perf_event_open(&(0x7f0000001240)={0x1, 0x80, 0x9, 0xa1, 0xf9, 0x3, 0x0, 0x7, 0xa0400, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x3, @perf_config_ext={0x58d}, 0x21, 0x1, 0x0, 0x6, 0x9, 0x0, 0x8000, 0x0, 0x80, 0x0, 0x5}, 0xffffffffffffffff, 0x4, r3, 0x0) r4 = gettid() process_vm_readv(r4, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/4078, 0xfee}, {&(0x7f0000000000)=""/123, 0x7b}, {&(0x7f0000000100)=""/57, 0x39}], 0x3, &(0x7f0000000240)=[{&(0x7f0000012940)=""/102400, 0xffffff76}], 0x1, 0x0) perf_event_open(0x0, r4, 0x1, r3, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/consoles\x00', 0x0, 0x0) 07:07:13 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f00000001c0)=0x8) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x14, 0x0, 0x0, 0x25}, 0x14}}, 0x0) 07:07:13 executing program 5: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) preadv(r0, &(0x7f00000011c0)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x7, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x0, 0x0, 0x87ffffc) (fail_nth: 42) mmap$perf(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000008, 0x1010, r2, 0x4) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000100), 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r3 = syz_open_procfs(0x0, 0x0) perf_event_open(&(0x7f0000001240)={0x1, 0x80, 0x9, 0xa1, 0xf9, 0x3, 0x0, 0x7, 0xa0400, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x3, @perf_config_ext={0x58d}, 0x21, 0x1, 0x0, 0x6, 0x9, 0x0, 0x8000, 0x0, 0x80, 0x0, 0x5}, 0xffffffffffffffff, 0x4, r3, 0x0) r4 = gettid() perf_event_open(0x0, r4, 0x1, r3, 0x8) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/consoles\x00', 0x0, 0x0) 07:07:13 executing program 3: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000040)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x300000c, 0x13, r0, 0x8000000) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xa) fork() (fail_nth: 48) 07:07:13 executing program 7: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000001340)) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x204800, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x1) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002480)='fd/3\x00') r2 = dup(r1) fdatasync(r2) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x40}}, './file0\x00'}) preadv2(r3, &(0x7f0000001300)=[{&(0x7f0000000080)=""/193, 0xc1}, {&(0x7f0000000180)=""/250, 0xfa}, {&(0x7f0000000300)=""/4096, 0x1000}], 0x3, 0x80000000, 0x66, 0x18) r4 = openat(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000001380)=0x100000) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r5, 0xd00, 0x0, 0x87ffffc) sendfile(r5, r4, 0x0, 0x80000000) [ 2737.467626] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13446 comm=syz-executor.4 [ 2737.478009] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13448 comm=syz-executor.4 07:07:13 executing program 6: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) preadv(r0, &(0x7f00000011c0)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x7, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x0, 0x0, 0x87ffffc) mmap$perf(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000008, 0x1010, r2, 0x4) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000100), 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r3 = syz_open_procfs(0x0, 0x0) perf_event_open(&(0x7f0000001240)={0x1, 0x80, 0x9, 0xa1, 0xf9, 0x3, 0x0, 0x7, 0xa0400, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x3, @perf_config_ext={0x58d}, 0x21, 0x1, 0x0, 0x6, 0x9, 0x0, 0x8000, 0x0, 0x80, 0x0, 0x5}, 0xffffffffffffffff, 0x4, r3, 0x0) r4 = gettid() process_vm_readv(r4, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/4078, 0xfee}, {&(0x7f0000000000)=""/123, 0x7b}, {&(0x7f0000000100)=""/57, 0x39}], 0x3, &(0x7f0000000240)=[{&(0x7f0000012940)=""/102400, 0xffffff76}], 0x1, 0x0) perf_event_open(0x0, r4, 0x1, r3, 0x8) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) 07:07:13 executing program 1: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) preadv(r0, &(0x7f00000011c0)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x7, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x0, 0x0, 0x87ffffc) mmap$perf(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000008, 0x1010, r2, 0x4) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000100), 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r3 = syz_open_procfs(0x0, 0x0) preadv(r3, &(0x7f0000000080)=[{&(0x7f0000000000)=""/40, 0x40}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000001240)={0x1, 0x80, 0x9, 0xa1, 0xf9, 0x3, 0x0, 0x7, 0xa0400, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x3, @perf_config_ext={0x58d}, 0x21, 0x1, 0x0, 0x6, 0x9, 0x0, 0x8000, 0x0, 0x80, 0x0, 0x5}, 0xffffffffffffffff, 0x4, r3, 0x0) r4 = gettid() process_vm_readv(r4, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/4078, 0xfee}, {&(0x7f0000000000)=""/123, 0x7b}, {&(0x7f0000000100)=""/57, 0x39}], 0x3, &(0x7f0000000240)=[{&(0x7f0000012940)=""/102400, 0xffffff76}], 0x1, 0x0) perf_event_open(0x0, r4, 0x1, 0xffffffffffffffff, 0x8) 07:07:13 executing program 0: openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r0, 0x0, 0x0, 0x87ffffc) mmap$perf(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000008, 0x10, 0xffffffffffffffff, 0x4) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x12, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = syz_open_procfs(0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001240)={0x1, 0x80, 0x0, 0xa1, 0x0, 0x0, 0x0, 0x7, 0xa0400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x3, @perf_config_ext, 0x21, 0x1, 0x0, 0x0, 0x9, 0x0, 0x8000, 0x0, 0x80, 0x0, 0x5}, 0xffffffffffffffff, 0x4, r1, 0x0) r2 = gettid() process_vm_readv(r2, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/4078, 0xfee}, {&(0x7f0000000000)=""/123, 0x7b}, {&(0x7f0000000100)=""/57, 0x39}], 0x3, &(0x7f0000000240)=[{&(0x7f0000012940)=""/102400, 0xffffff76}], 0x20b, 0x0) perf_event_open(0x0, r2, 0x1, r1, 0x8) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/consoles\x00', 0x0, 0x0) [ 2737.511582] FAULT_INJECTION: forcing a failure. [ 2737.511582] name failslab, interval 1, probability 0, space 0, times 0 [ 2737.513961] CPU: 0 PID: 13451 Comm: syz-executor.3 Tainted: G W 5.18.0-rc1-next-20220406 #1 [ 2737.515988] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2737.518350] Call Trace: [ 2737.518884] [ 2737.519350] dump_stack_lvl+0x8b/0xb3 [ 2737.520187] should_fail.cold+0x5/0xa [ 2737.520989] ? ptlock_alloc+0x1d/0x70 [ 2737.521795] should_failslab+0x5/0x10 [ 2737.522591] kmem_cache_alloc+0x5b/0x480 [ 2737.523452] ptlock_alloc+0x1d/0x70 [ 2737.524225] pte_alloc_one+0x68/0x1f0 [ 2737.525034] __pte_alloc+0x69/0x200 [ 2737.525791] ? pmd_install+0x250/0x250 [ 2737.526619] copy_page_range+0x207a/0x4cc0 [ 2737.527567] ? vm_iomap_memory+0x190/0x190 [ 2737.528479] ? down_write+0xde/0x150 [ 2737.529259] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 2737.530305] ? __vma_link_rb+0x540/0x700 [ 2737.531165] dup_mm+0x961/0x1250 [ 2737.531905] ? replace_mm_exe_file+0x490/0x490 [ 2737.532855] ? __raw_spin_lock_init+0x36/0x110 [ 2737.533813] copy_process+0x698c/0x6db0 [ 2737.534674] ? __cleanup_sighand+0xb0/0xb0 [ 2737.535572] ? lock_release+0x3b2/0x750 [ 2737.536417] ? ksys_write+0x20c/0x250 [ 2737.537202] ? kernel_clone+0x2f8/0xa60 [ 2737.538037] kernel_clone+0xe7/0xa60 [ 2737.538811] ? find_held_lock+0x2c/0x110 [ 2737.539658] ? create_io_thread+0xf0/0xf0 [ 2737.540528] ? __mutex_unlock_slowpath+0x15c/0x5e0 [ 2737.541544] ? bit_wait_io_timeout+0x160/0x160 [ 2737.542491] ? lock_is_held_type+0xd7/0x130 [ 2737.543394] __do_sys_fork+0x8a/0xc0 [ 2737.544176] ? kernel_clone+0xa60/0xa60 [ 2737.544998] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 2737.546142] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2737.547216] ? lockdep_hardirqs_on+0x79/0x100 [ 2737.548156] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2737.549220] do_syscall_64+0x3b/0x90 [ 2737.549981] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2737.551040] RIP: 0033:0x7fc1c2a89b19 [ 2737.551802] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2737.555544] RSP: 002b:00007fc1bffff188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 2737.557301] RAX: ffffffffffffffda RBX: 00007fc1c2b9cf60 RCX: 00007fc1c2a89b19 [ 2737.558953] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2737.560605] RBP: 00007fc1bffff1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2737.562263] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2737.563928] R13: 00007fff0449096f R14: 00007fc1bffff300 R15: 0000000000022000 [ 2737.565616] [ 2737.638840] FAULT_INJECTION: forcing a failure. [ 2737.638840] name failslab, interval 1, probability 0, space 0, times 0 [ 2737.641530] CPU: 0 PID: 13461 Comm: syz-executor.5 Tainted: G W 5.18.0-rc1-next-20220406 #1 [ 2737.643662] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2737.646135] Call Trace: [ 2737.646697] [ 2737.647192] dump_stack_lvl+0x8b/0xb3 [ 2737.648051] should_fail.cold+0x5/0xa [ 2737.648891] ? create_object.isra.0+0x3a/0xa20 [ 2737.649906] should_failslab+0x5/0x10 [ 2737.650752] kmem_cache_alloc+0x5b/0x480 [ 2737.651686] create_object.isra.0+0x3a/0xa20 [ 2737.652650] ? kasan_unpoison+0x23/0x50 [ 2737.653530] kmem_cache_alloc+0x239/0x480 [ 2737.654455] ext4_mb_new_blocks+0x64b/0x4b60 [ 2737.655437] ? lock_is_held_type+0xd7/0x130 [ 2737.656411] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2737.657619] ? ext4_cache_extents+0x148/0x2d0 [ 2737.658597] ? ext4_discard_preallocations+0xe60/0xe60 [ 2737.659750] ? __sanitizer_cov_trace_const_cmp2+0x22/0x80 [ 2737.660949] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2737.662151] ? ext4_ext_search_right+0x2e3/0xbd0 [ 2737.663180] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2737.664402] ext4_ext_map_blocks+0x1fb0/0x5cd0 [ 2737.665406] ? lock_chain_count+0x20/0x20 [ 2737.666315] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 2737.667472] ? ext4_ext_release+0x10/0x10 [ 2737.668397] ? lock_release+0x750/0x750 [ 2737.669263] ? lock_release+0x3b2/0x750 [ 2737.670135] ? lock_is_held_type+0xd7/0x130 [ 2737.671099] ? down_write_killable+0x170/0x170 [ 2737.672120] ext4_map_blocks+0x652/0x1970 [ 2737.673037] ? lock_is_held_type+0xd7/0x130 [ 2737.673977] ? ext4_issue_zeroout+0x1c0/0x1c0 [ 2737.674951] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 2737.676154] ? jbd2__journal_start+0xf3/0x8d0 [ 2737.677126] ? __ext4_journal_start_sb+0x392/0x470 [ 2737.678175] ? __ext4_journal_start_sb+0x1d5/0x470 [ 2737.679232] ext4_alloc_file_blocks.isra.0+0x2c1/0xb20 [ 2737.680388] ? ext4_ext_correct_indexes+0x440/0x440 [ 2737.681465] ? down_write_killable+0x170/0x170 [ 2737.682467] ext4_fallocate+0x1a2b/0x3c90 [ 2737.683359] ? lock_acquire+0x1b2/0x530 [ 2737.684238] ? lock_release+0x750/0x750 [ 2737.685106] ? ext4_ext_truncate+0x3e0/0x3e0 [ 2737.686047] ? lock_is_held_type+0xd7/0x130 [ 2737.686976] ? ext4_ext_truncate+0x3e0/0x3e0 [ 2737.687922] vfs_fallocate+0x489/0xe00 [ 2737.688775] __x64_sys_fallocate+0xcf/0x140 [ 2737.689706] do_syscall_64+0x3b/0x90 [ 2737.690506] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2737.691624] RIP: 0033:0x7f35817a9b19 [ 2737.692414] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2737.696314] RSP: 002b:00007f357ed1f188 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 2737.697911] RAX: ffffffffffffffda RBX: 00007f35818bcf60 RCX: 00007f35817a9b19 [ 2737.699412] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 2737.700927] RBP: 00007f357ed1f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2737.702430] R10: 00000000087ffffc R11: 0000000000000246 R12: 0000000000000002 [ 2737.703934] R13: 00007ffdd683fcbf R14: 00007f357ed1f300 R15: 0000000000022000 [ 2737.705468] VM DIAGNOSIS: 07:07:13 Registers: info registers vcpu 0 RAX=ffffffff86a41f20 RBX=0000000000000000 RCX=0000000000000004 RDX=0000000000000003 RSI=0000000000000004 RDI=ffffffff85203948 RBP=0000000000000000 RSP=ffff888045d3f1a8 R8 =0000000000000001 R9 =0000000000000000 R10=fffffbfff0b1bd12 R11=0000000000000001 R12=ffff888015c93580 R13=0000000000000000 R14=ffffffff85203940 R15=0000000000000002 RIP=ffffffff81289610 RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007fd843142700 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f5aa0b4f650 CR3=00000000427d4000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff4ff0 DR7=0000000000000600 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000ff0000000000 00000000ff000000 YMM01=0000000000000000 0000000000000000 6166003436657369 7664616600327461 YMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM03=0000000000000000 0000000000000000 0000000000000001 ffffffff81bfd162 YMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000001 YMM05=0000000000000000 0000000000000000 ffffffff81bfd162 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000001 YMM07=0000000000000000 0000000000000000 ffffffff818c479f 0000000000000000 YMM08=0000000000000000 0000000000000000 ffffffff81bfd9f6 0000000000000000 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 RAX=dffffc0000000060 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd RSI=ffffffff823f0b3c RDI=ffffffff873c7ca0 RBP=ffffffff873c7c60 RSP=ffff888044d4f080 R8 =0000000000000026 R9 =0000000000000032 R10=ffffffff823d821b R11=000000000000000a R12=0000000000000020 R13=fffffbfff0e78fdf R14=fffffbfff0e78f96 R15=dffffc0000000000 RIP=ffffffff823f0b90 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007fc1bffff700 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fa22acd5218 CR3=000000000ecb2000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff4ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 000000ff00000000 YMM01=0000000000000000 0000000000000000 ff00000000000000 0000000100000000 YMM02=0000000000000000 0000000000000000 7463656a6e695f31 313230385f7a7973 YMM03=0000000000000000 0000000000000000 00007fc1c2b707c8 00007fc1c2b707c0 YMM04=0000000000000000 0000000000000000 ffffffffffffffff ffffffff00000000 YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 000000524f525245 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 00524f5252450040 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000