00018c0), 0x4) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) fork() 23:15:02 executing program 3: setgroups(0x2, &(0x7f00000014c0)=[0x0, 0x0]) getresuid(0x0, 0x0, 0x0) r0 = socket$inet_icmp(0x2, 0x2, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$inet_icmp(0x2, 0x2, 0x1) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="00000000000000002e2f66696c6530000193bf33d05f94742fd1c277cdd4ac58e484f828344a892faa7645861331d7d2993997f22491cace109cce015b288508bd7364f35e891e852bc11d9189216b260e5ccebc180935247aea1d71277647ec12b4c02e766489fed013a45e4bb773d62531a41d97adb2ef850b2aa9964952bba10883ce919263ba1569b7ff3fa61abc416973644e89594b5874aa795147b37ebb9f4051a8c0f7c7bc37522deb21ba18641bc66d9bfbcc0efcb641fd8ef9c58f7d290e"]) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) 23:15:02 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000018c0), 0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, 0x0) ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b65, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) fork() 23:15:02 executing program 6: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000100)=[{0x4d}, {0x6}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000080)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 23:15:02 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0x0, 0x1}, 0x6) r2 = dup(r0) ioctl$sock_bt_hci(r1, 0x400448e7, &(0x7f0000000040)="37006f78516e4c7f49c4266d4abfe3bb50a37e48ba1b65e9c7294f868e39e41e6236c3ca60b9f2547186899a6d60b7269765cab1f328a256e14d45755fae64f7b4452fbef532fc953f75cbd6a066e49e287eff4c55576bd7d54ed4800917c3f8e3c858814c1387bade24f616bbc8027251739829d565794c2a4286e6e66857a7cb23123c1d20007b3d03b62b9753314b966dbd6b05ce213dc52e6268cde804f5c294c15ff12ac1fedc132c") getsockopt$SO_TIMESTAMP(r2, 0x1, 0x1d, &(0x7f0000000100), &(0x7f0000000140)=0x4) ioctl$sock_bt_hci(r2, 0x400448e0, &(0x7f0000000240)) bind$bt_hci(r0, &(0x7f0000000180)={0x1f, 0x4, 0x3}, 0x6) 23:15:02 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r1) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x34, r2, 0x401, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc}]}, 0x34}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x40000000000000}}, './file0\x00'}) sendmsg$NFT_MSG_GETRULE(r3, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xc0, 0x7, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_RULE_EXPRESSIONS={0x88, 0x4, 0x0, 0x1, [{0x84, 0x1, 0x0, 0x1, [@tunnel={{0xb}, @void}, @dup_ipv4={{0x8}, @void}, @socket={{0xb}, @void}, @log={{0x8}, @void}, @tunnel={{0xb}, @void}, @lookup={{0xb}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_LOOKUP_SET={0x9, 0x1, 'syz0\x00'}, @NFTA_LOOKUP_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_LOOKUP_SET={0x9, 0x1, 'syz1\x00'}, @NFTA_LOOKUP_SREG={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_LOOKUP_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}]}}, @limit={{0xa}, @void}]}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0xc0}, 0x1, 0x0, 0x0, 0x24040810}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) [ 306.242800] audit: type=1326 audit(1688253302.253:12): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=4751 comm="syz-executor.6" exe="/syz-executor.6" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc6cb383b19 code=0x0 23:15:02 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000018c0), 0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, 0x0) ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b65, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:15:02 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000018c0), 0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) fork() 23:15:02 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_int(r0, 0x11, 0xa, &(0x7f0000000000), 0x4) sendmmsg$inet6(r0, &(0x7f00000005c0)=[{{&(0x7f00000000c0)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c, 0x0}}], 0x1, 0x0) sendmmsg$inet6(r0, &(0x7f0000003940)=[{{&(0x7f0000000040)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0xd}, 0x8000}, 0x1c, &(0x7f0000000080)=[{&(0x7f0000000600)="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", 0x1000}, {&(0x7f0000000100)="7c061d304b3f59e8fb6d960faca4eff4755ca12aeee2791872119d2d625529ae5496a3fb0411f0253566cb0f5af4fbc0d3958fcf28ee6f7937f6d80e957a8fa15bc885bd", 0x44}], 0x2, &(0x7f0000001600)=[@hoplimit={{0x14}}, @tclass={{0x14, 0x29, 0x43, 0x8000}}, @hopopts_2292={{0x1080, 0x29, 0x36, {0x16, 0x20d, '\x00', [@calipso={0x7, 0x58, {0x4, 0x14, 0xd6, 0x8835, [0x81, 0x0, 0x1, 0x3ff, 0x4, 0x2, 0x5, 0x8, 0xffffffffffffff00, 0x1]}}, @jumbo={0xc2, 0x4, 0x4}, @generic={0xc4, 0x1000, "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"}, @jumbo={0xc2, 0x4, 0x8}]}}}, @hopopts={{0x30, 0x29, 0x36, {0x2c, 0x2, '\x00', [@hao={0xc9, 0x10, @mcast2}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x7}}], 0x10f8}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000180)="be88e57272d969eccdda693442c6cf31ba01397eda1c3a393540ef7330c68a4bfa17fe26ce9eb4e177cc76bcf2fd547586d0120fd02bf450993a14c05451380eb4e9fd3ffe432ace7a18b20370c4cc989922f16e2ec59353b46fe85355de97f0651f3800b58a9cd4da04eef95214da2b4747aae4df13e390f237c51fc8734c66e53df929379e49e12a769925030b032740bca40421", 0x95}, {&(0x7f0000000240)}, {&(0x7f0000000280)="e836d3238ebacf974127ce8669622fbe2b9ce84bdfda0f931c43ea263fe4cb482c5a135151ee8e79fa91e6ff1179375b4dc32ae4a77b0aeb19ac53ee5b046c36c979ef0bffad966bf5f2", 0x4a}, {&(0x7f0000000300)="9deae02dbfab9feeabe873ecbd953b4141df0bcdd1ba051998338b7325b5171c7049bba81b9cb941dba0a9c7eeef4ff27bd0b023e8d31d083a54ffd2fd9557ed1600f768b49c9998a578d329531ae7e2ca1a44a255a119e06b6c5f064d41c748c77e552bb68ec04f4d40ab0443265ff04dbe1fdfcc9fbf994f25f3a41826e30c6df8695dac01d6f0453f49d70ee1d1c1a7059df044aa9ffe03cebcf265d2ef375517aa2f81a4d730007bf91e740bf289d0a78c78099426a5ead42c81400668c5c4f135eaa1bcf60de5bb1a4ed32340e30c8602668050ca4656de1ddd87430273fd83ec1cabced8", 0xe7}, {&(0x7f0000000400)="70e2ce1b26264702d16ce293058dc2ef79595627b32b44fa173c6f5c047863c12fb1c5d63fdd5286a00b761973dec68457d51f28f45cfacbbe387aecb91a7d54e91e1c15d84743e78be96b004637d22a2bf858292d7ba8b4a4703946643a2198b920b1096943da8506de693e212be5dba5b444fc", 0x74}, {&(0x7f0000002700)="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", 0x1000}], 0x6, &(0x7f0000000500)=[@tclass={{0x14, 0x29, 0x43, 0x7}}, @tclass={{0x14, 0x29, 0x43, 0x9e}}, @tclass={{0x14, 0x29, 0x43, 0x1}}], 0x48}}, {{&(0x7f0000000580)={0xa, 0x4e22, 0x10001, @empty, 0x7}, 0x1c, &(0x7f0000003740)=[{&(0x7f0000003700)="b1faaad68ecab8bbbace3acef6459eec390bc0e4dc51", 0x16}], 0x1, &(0x7f0000003780)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x9}}, @rthdrdstopts={{0x48, 0x29, 0x37, {0x0, 0x5, '\x00', [@enc_lim={0x4, 0x1, 0x2}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x3e}}, @enc_lim={0x4, 0x1, 0x5}, @hao={0xc9, 0x10, @remote}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x3ff}}, @rthdr_2292={{0x28, 0x29, 0x39, {0x73, 0x2, 0x2, 0x9, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02']}}}, @hoplimit={{0x14, 0x29, 0x34, 0x2}}, @rthdrdstopts={{0x68, 0x29, 0x37, {0x4, 0xa, '\x00', [@ra, @ra={0x5, 0x2, 0xa9}, @calipso={0x7, 0x40, {0x0, 0xe, 0x4, 0x0, [0x2, 0x51, 0xfffffffffffffa74, 0x6, 0x4, 0x1ff, 0x10000000]}}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}]}}}, @rthdrdstopts={{0x88, 0x29, 0x37, {0x1, 0xd, '\x00', [@pad1, @calipso={0x7, 0x50, {0x1, 0x12, 0x2, 0x4, [0x6e6, 0xda87, 0x9, 0x9, 0x0, 0x6, 0xfff, 0x4, 0x7]}}, @jumbo={0xc2, 0x4, 0x7}, @ra={0x5, 0x2, 0x4}, @jumbo={0xc2, 0x4, 0x4}, @generic={0x5, 0x2, 'dT'}]}}}], 0x1a8}}], 0x3, 0x4000854) 23:15:02 executing program 3: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff4000/0x3000)=nil) shmat(r0, &(0x7f0000ffa000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x17) madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0xc) madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x15) 23:15:02 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000018c0), 0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, 0x0) ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b65, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:15:02 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000018c0), 0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, 0x0) ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b65, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:15:02 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000018c0), 0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, 0x0) ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b65, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:15:02 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x0, @remote}, 0x1c, &(0x7f0000000140)=[{&(0x7f00000000c0)="d7061e52", 0x4}], 0x1}}, {{&(0x7f0000000040)={0xa, 0x0, 0x0, @private1}, 0x1c, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="e523c27876dc0049f516cae224c57f64627fd0e149ef313e573cdd45f799991a8f978ea40da5a6cd5e5a8b293b383b11"], 0x38}}], 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r1, &(0x7f0000000080)="01", 0x292e9) ioctl$sock_TIOCINQ(r1, 0x541b, &(0x7f0000000000)) r2 = epoll_create1(0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000000)) ioctl$AUTOFS_IOC_SETTIMEOUT(r2, 0x80049367, &(0x7f0000000180)=0x8001) [ 307.074287] audit: type=1326 audit(1688253303.084:13): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=4751 comm="syz-executor.6" exe="/syz-executor.6" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc6cb383b19 code=0x0 23:15:16 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000018c0), 0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, 0x0) ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b65, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:15:16 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000018c0), 0x4) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) fork() 23:15:16 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000018c0), 0x4) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) fork() 23:15:16 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) fork() 23:15:16 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) io_setup(0xa, &(0x7f0000000000)=0x0) r2 = signalfd(0xffffffffffffffff, &(0x7f00000011c0), 0x8) io_submit(r1, 0x2, &(0x7f0000000180)=[&(0x7f0000001080)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x8, 0x0, r2, 0x0}]) fcntl$setstatus(r0, 0x4, 0x40000) sendmsg$IPCTNL_MSG_CT_GET_DYING(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x6, 0x1, 0x201, 0x0, 0x0, {0x3, 0x0, 0x4}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4040}, 0x48000) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x6dc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2000c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup(r3) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r4 = epoll_create1(0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000000)) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r6, &(0x7f0000000000)) 23:15:16 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000018c0), 0x4) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) fork() 23:15:16 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000018c0), 0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, 0x0) ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b65, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:15:16 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000018c0), 0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, 0x0) ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b65, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) fork() 23:15:16 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000018c0), 0x4) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) fork() 23:15:16 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) socketpair(0x9, 0x80000, 0xd2, &(0x7f00000000c0)) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x9006}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x4, 0x3}, 0x4) close(r0) 23:15:16 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000018c0), 0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, 0x0) ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b65, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) fork() 23:15:16 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000018c0), 0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, 0x0) ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b65, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:15:16 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000018c0), 0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, 0x0) ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b65, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:15:16 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000018c0), 0x4) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) fork() 23:15:16 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000018c0), 0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, 0x0) ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b65, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) fork() 23:15:16 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000018c0), 0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, 0x0) ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b65, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:15:16 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000018c0), 0x4) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) fork() 23:15:16 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000018c0), 0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, 0x0) ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b65, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:15:31 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) fork() 23:15:31 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000018c0), 0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, 0x0) ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b65, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) fork() 23:15:31 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) io_setup(0xa, &(0x7f0000000000)=0x0) r2 = signalfd(0xffffffffffffffff, &(0x7f00000011c0), 0x8) io_submit(r1, 0x2, &(0x7f0000000180)=[&(0x7f0000001080)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x8, 0x0, r2, 0x0}]) fcntl$setstatus(r0, 0x4, 0x40000) sendmsg$IPCTNL_MSG_CT_GET_DYING(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x6, 0x1, 0x201, 0x0, 0x0, {0x3, 0x0, 0x4}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4040}, 0x48000) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x6dc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2000c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup(r3) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r4 = epoll_create1(0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000000)) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r6, &(0x7f0000000000)) 23:15:31 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000018c0), 0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:15:31 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000018c0), 0x4) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:15:31 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000018c0), 0x4) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) fork() 23:15:31 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000018c0), 0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, 0x0) ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b65, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:15:31 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) socketpair(0x9, 0x80000, 0xd2, &(0x7f00000000c0)) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x9006}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x4, 0x3}, 0x4) close(r0) 23:15:31 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000018c0), 0x4) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:15:31 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) fork() 23:15:31 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:15:31 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) fork() 23:15:31 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:15:31 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000018c0), 0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, 0x0) ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b65, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:15:31 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000018c0), 0x4) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:15:31 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) readv(r0, &(0x7f0000000800)=[{&(0x7f00000001c0)=""/88, 0x58}, {&(0x7f0000000240)=""/217, 0xd9}, {&(0x7f0000000340)=""/193, 0xc1}, {&(0x7f0000000440)=""/213, 0xd5}, {&(0x7f0000000600)=""/80, 0x50}, {&(0x7f0000000680)=""/102, 0x66}, {&(0x7f0000000700)=""/113, 0x71}, {&(0x7f0000000040)=""/45, 0x2d}, {&(0x7f0000000780)=""/99, 0x63}], 0x9) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r2, r1, 0x0, 0xfffffdef) open_tree(r1, &(0x7f0000000000)='./file0\x00', 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) r3 = creat(&(0x7f0000000140)='./file1\x00', 0x18a) openat(r3, &(0x7f0000000180)='./file1\x00', 0x84080, 0x18) [ 335.960470] audit: type=1400 audit(1688253331.969:14): avc: denied { read } for pid=4906 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 23:15:31 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) fork() 23:15:45 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:15:45 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000018c0), 0x4) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:15:45 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000018c0), 0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, 0x0) ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b65, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:15:45 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000018c0), 0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, 0x0) ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b65, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) fork() 23:15:45 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) fork() 23:15:45 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) io_setup(0xa, &(0x7f0000000000)=0x0) r2 = signalfd(0xffffffffffffffff, &(0x7f00000011c0), 0x8) io_submit(r1, 0x2, &(0x7f0000000180)=[&(0x7f0000001080)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x8, 0x0, r2, 0x0}]) fcntl$setstatus(r0, 0x4, 0x40000) sendmsg$IPCTNL_MSG_CT_GET_DYING(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x6, 0x1, 0x201, 0x0, 0x0, {0x3, 0x0, 0x4}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4040}, 0x48000) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x6dc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2000c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup(r3) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) epoll_create1(0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r5, &(0x7f0000000000)) 23:15:45 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) readv(r0, &(0x7f0000000800)=[{&(0x7f00000001c0)=""/88, 0x58}, {&(0x7f0000000240)=""/217, 0xd9}, {&(0x7f0000000340)=""/193, 0xc1}, {&(0x7f0000000440)=""/213, 0xd5}, {&(0x7f0000000600)=""/80, 0x50}, {&(0x7f0000000680)=""/102, 0x66}, {&(0x7f0000000700)=""/113, 0x71}, {&(0x7f0000000040)=""/45, 0x2d}, {&(0x7f0000000780)=""/99, 0x63}], 0x9) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r2, r1, 0x0, 0xfffffdef) open_tree(r1, &(0x7f0000000000)='./file0\x00', 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) r3 = creat(&(0x7f0000000140)='./file1\x00', 0x18a) openat(r3, &(0x7f0000000180)='./file1\x00', 0x84080, 0x18) 23:15:45 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) readv(r0, &(0x7f0000000800)=[{&(0x7f00000001c0)=""/88, 0x58}, {&(0x7f0000000240)=""/217, 0xd9}, {&(0x7f0000000340)=""/193, 0xc1}, {&(0x7f0000000440)=""/213, 0xd5}, {&(0x7f0000000600)=""/80, 0x50}, {&(0x7f0000000680)=""/102, 0x66}, {&(0x7f0000000700)=""/113, 0x71}, {&(0x7f0000000040)=""/45, 0x2d}, {&(0x7f0000000780)=""/99, 0x63}], 0x9) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r2, r1, 0x0, 0xfffffdef) open_tree(r1, &(0x7f0000000000)='./file0\x00', 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) r3 = creat(&(0x7f0000000140)='./file1\x00', 0x18a) openat(r3, &(0x7f0000000180)='./file1\x00', 0x84080, 0x18) 23:15:45 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000018c0), 0x4) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:15:45 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) readv(r0, &(0x7f0000000800)=[{&(0x7f00000001c0)=""/88, 0x58}, {&(0x7f0000000240)=""/217, 0xd9}, {&(0x7f0000000340)=""/193, 0xc1}, {&(0x7f0000000440)=""/213, 0xd5}, {&(0x7f0000000600)=""/80, 0x50}, {&(0x7f0000000680)=""/102, 0x66}, {&(0x7f0000000700)=""/113, 0x71}, {&(0x7f0000000040)=""/45, 0x2d}, {&(0x7f0000000780)=""/99, 0x63}], 0x9) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r2, r1, 0x0, 0xfffffdef) open_tree(r1, &(0x7f0000000000)='./file0\x00', 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) r3 = creat(&(0x7f0000000140)='./file1\x00', 0x18a) openat(r3, &(0x7f0000000180)='./file1\x00', 0x84080, 0x18) 23:15:45 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000018c0), 0x4) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:15:45 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000018c0), 0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:15:45 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:15:45 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000018c0), 0x4) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:15:45 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) fork() 23:15:45 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) io_setup(0xa, &(0x7f0000000000)=0x0) r2 = signalfd(0xffffffffffffffff, &(0x7f00000011c0), 0x8) io_submit(r1, 0x2, &(0x7f0000000180)=[&(0x7f0000001080)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x8, 0x0, r2, 0x0}]) fcntl$setstatus(r0, 0x4, 0x40000) sendmsg$IPCTNL_MSG_CT_GET_DYING(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x6, 0x1, 0x201, 0x0, 0x0, {0x3, 0x0, 0x4}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4040}, 0x48000) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x6dc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2000c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup(r3) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) epoll_create1(0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r5, &(0x7f0000000000)) 23:15:45 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000018c0), 0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, 0x0) ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b65, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:15:46 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:15:46 executing program 7: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) fork() [ 353.088025] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 353.091699] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 353.094028] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 353.098091] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 353.100396] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 353.101962] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 355.174298] Bluetooth: hci7: command 0x0409 tx timeout [ 357.222320] Bluetooth: hci7: command 0x041b tx timeout [ 359.270305] Bluetooth: hci7: command 0x040f tx timeout [ 361.318272] Bluetooth: hci7: command 0x0419 tx timeout [ 371.331679] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 371.332832] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 371.385832] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 371.388105] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 382.441895] kworker/dying (388) used greatest stack depth: 24336 bytes left 23:16:22 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) io_setup(0xa, &(0x7f0000000000)=0x0) r2 = signalfd(0xffffffffffffffff, &(0x7f00000011c0), 0x8) io_submit(r1, 0x2, &(0x7f0000000180)=[&(0x7f0000001080)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x8, 0x0, r2, 0x0}]) fcntl$setstatus(r0, 0x4, 0x40000) sendmsg$IPCTNL_MSG_CT_GET_DYING(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x6, 0x1, 0x201, 0x0, 0x0, {0x3, 0x0, 0x4}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4040}, 0x48000) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x6dc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2000c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup(r3) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) epoll_create1(0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r5, &(0x7f0000000000)) 23:16:22 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000018c0), 0x4) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:16:22 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) readv(r0, &(0x7f0000000800)=[{&(0x7f00000001c0)=""/88, 0x58}, {&(0x7f0000000240)=""/217, 0xd9}, {&(0x7f0000000340)=""/193, 0xc1}, {&(0x7f0000000440)=""/213, 0xd5}, {&(0x7f0000000600)=""/80, 0x50}, {&(0x7f0000000680)=""/102, 0x66}, {&(0x7f0000000700)=""/113, 0x71}, {&(0x7f0000000040)=""/45, 0x2d}, {&(0x7f0000000780)=""/99, 0x63}], 0x9) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r2, r1, 0x0, 0xfffffdef) open_tree(r1, &(0x7f0000000000)='./file0\x00', 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) r3 = creat(&(0x7f0000000140)='./file1\x00', 0x18a) openat(r3, &(0x7f0000000180)='./file1\x00', 0x84080, 0x18) 23:16:22 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:16:22 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:16:22 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000018c0), 0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, 0x0) ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b65, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:16:22 executing program 7: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) fork() 23:16:22 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000018c0), 0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, 0x0) ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b65, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) fork() 23:16:22 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:16:22 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000018c0), 0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, 0x0) ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b65, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) fork() 23:16:33 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) io_setup(0xa, &(0x7f0000000000)=0x0) r2 = signalfd(0xffffffffffffffff, &(0x7f00000011c0), 0x8) io_submit(r1, 0x2, &(0x7f0000000180)=[&(0x7f0000001080)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x8, 0x0, r2, 0x0}]) fcntl$setstatus(r0, 0x4, 0x40000) sendmsg$IPCTNL_MSG_CT_GET_DYING(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x6, 0x1, 0x201, 0x0, 0x0, {0x3, 0x0, 0x4}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4040}, 0x48000) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x6dc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2000c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup(r3) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, 0xffffffffffffffff, &(0x7f0000000000)) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r5, &(0x7f0000000000)) 23:16:33 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:16:33 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:16:33 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000018c0), 0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, 0x0) ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b65, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:16:33 executing program 7: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) fork() 23:16:33 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000018c0), 0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, 0x0) ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b65, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) fork() 23:16:33 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:16:33 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) fork() 23:16:33 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:16:34 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:16:34 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000018c0), 0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) fork() 23:16:34 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:16:34 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:16:34 executing program 7: perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) fork() 23:16:34 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000018c0), 0x4) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) fork() 23:16:34 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) [ 398.339968] cgroup: fork rejected by pids controller in /syz7 23:16:47 executing program 7: perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) fork() 23:16:47 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) fork() 23:16:47 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:16:47 executing program 6: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:16:47 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) io_setup(0xa, &(0x7f0000000000)=0x0) r2 = signalfd(0xffffffffffffffff, &(0x7f00000011c0), 0x8) io_submit(r1, 0x2, &(0x7f0000000180)=[&(0x7f0000001080)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x8, 0x0, r2, 0x0}]) fcntl$setstatus(r0, 0x4, 0x40000) sendmsg$IPCTNL_MSG_CT_GET_DYING(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x6, 0x1, 0x201, 0x0, 0x0, {0x3, 0x0, 0x4}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4040}, 0x48000) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x6dc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2000c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup(r3) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, 0xffffffffffffffff, &(0x7f0000000000)) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r5, &(0x7f0000000000)) 23:16:47 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:16:47 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000018c0), 0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, 0x0) ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b65, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:16:47 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:16:47 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000018c0), 0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, 0x0) ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b65, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:16:47 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:16:47 executing program 6: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:16:47 executing program 5: perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:16:47 executing program 6: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:16:48 executing program 5: perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:16:48 executing program 6: perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:16:48 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000018c0), 0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, 0x0) ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b65, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:17:02 executing program 6: perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:17:02 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:17:02 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) io_setup(0xa, &(0x7f0000000000)=0x0) r2 = signalfd(0xffffffffffffffff, &(0x7f00000011c0), 0x8) io_submit(r1, 0x2, &(0x7f0000000180)=[&(0x7f0000001080)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x8, 0x0, r2, 0x0}]) fcntl$setstatus(r0, 0x4, 0x40000) sendmsg$IPCTNL_MSG_CT_GET_DYING(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x6, 0x1, 0x201, 0x0, 0x0, {0x3, 0x0, 0x4}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4040}, 0x48000) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x6dc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2000c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup(r3) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, 0xffffffffffffffff, &(0x7f0000000000)) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r5, &(0x7f0000000000)) 23:17:02 executing program 7: perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) fork() 23:17:02 executing program 5: perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:17:02 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000018c0), 0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:17:02 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) fork() 23:17:02 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:17:02 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:17:02 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000018c0), 0x4) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:17:02 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:17:02 executing program 6: perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:17:02 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:17:02 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:17:02 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000018c0), 0x4) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:17:02 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) fork() 23:17:02 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:17:02 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:17:14 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) io_setup(0xa, &(0x7f0000000000)=0x0) r2 = signalfd(0xffffffffffffffff, &(0x7f00000011c0), 0x8) io_submit(r1, 0x2, &(0x7f0000000180)=[&(0x7f0000001080)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x8, 0x0, r2, 0x0}]) fcntl$setstatus(r0, 0x4, 0x40000) sendmsg$IPCTNL_MSG_CT_GET_DYING(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x6, 0x1, 0x201, 0x0, 0x0, {0x3, 0x0, 0x4}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4040}, 0x48000) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x6dc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2000c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup(r3) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r4, &(0x7f0000000000)) ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r5, &(0x7f0000000000)) 23:17:14 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:17:14 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:17:14 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) fork() 23:17:14 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:17:14 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:17:14 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) fork() 23:17:14 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:17:14 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:17:14 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:17:14 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:17:14 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:17:14 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:17:14 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:17:14 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:17:14 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) fork() 23:17:35 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x0, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:17:35 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) fork() 23:17:35 executing program 2: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:17:35 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) io_setup(0xa, &(0x7f0000000000)=0x0) r2 = signalfd(0xffffffffffffffff, &(0x7f00000011c0), 0x8) io_submit(r1, 0x2, &(0x7f0000000180)=[&(0x7f0000001080)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x8, 0x0, r2, 0x0}]) fcntl$setstatus(r0, 0x4, 0x40000) sendmsg$IPCTNL_MSG_CT_GET_DYING(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x6, 0x1, 0x201, 0x0, 0x0, {0x3, 0x0, 0x4}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4040}, 0x48000) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x6dc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2000c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup(r3) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r4, &(0x7f0000000000)) ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r5, &(0x7f0000000000)) 23:17:35 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) fork() 23:17:35 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:17:35 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:17:35 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:17:35 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:17:35 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x0, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:17:35 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x0, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:17:35 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:17:35 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) fork() 23:17:35 executing program 2: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:17:35 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) fork() 23:17:35 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:17:35 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:17:35 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x0, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:17:35 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x0, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:17:46 executing program 0: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) fork() 23:17:46 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) fork() 23:17:46 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) io_setup(0xa, &(0x7f0000000000)=0x0) r2 = signalfd(0xffffffffffffffff, &(0x7f00000011c0), 0x8) io_submit(r1, 0x2, &(0x7f0000000180)=[&(0x7f0000001080)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x8, 0x0, r2, 0x0}]) fcntl$setstatus(r0, 0x4, 0x40000) sendmsg$IPCTNL_MSG_CT_GET_DYING(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x6, 0x1, 0x201, 0x0, 0x0, {0x3, 0x0, 0x4}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4040}, 0x48000) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x6dc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2000c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup(r3) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r4, &(0x7f0000000000)) ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r5, &(0x7f0000000000)) 23:17:46 executing program 2: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:17:46 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:17:47 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x0, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:17:47 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:17:47 executing program 2: perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:17:47 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:17:47 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:17:47 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:17:47 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:17:47 executing program 2: perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:17:47 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:17:47 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:17:47 executing program 0: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) fork() 23:17:47 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:17:47 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) fork() [ 478.694780] Bluetooth: hci7: command 0x0406 tx timeout 23:17:59 executing program 3: perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:17:59 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:17:59 executing program 2: perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:17:59 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:17:59 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:17:59 executing program 0: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) fork() 23:17:59 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) io_setup(0xa, &(0x7f0000000000)=0x0) r2 = signalfd(0xffffffffffffffff, &(0x7f00000011c0), 0x8) io_submit(r1, 0x2, &(0x7f0000000180)=[&(0x7f0000001080)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x8, 0x0, r2, 0x0}]) fcntl$setstatus(r0, 0x4, 0x40000) sendmsg$IPCTNL_MSG_CT_GET_DYING(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x6, 0x1, 0x201, 0x0, 0x0, {0x3, 0x0, 0x4}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4040}, 0x48000) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x6dc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2000c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup(r3) r4 = epoll_create1(0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000000)) ioctl$TIOCVHANGUP(r5, 0x5437, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r6, &(0x7f0000000000)) 23:17:59 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) fork() 23:17:59 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:17:59 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:17:59 executing program 1: perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:17:59 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:17:59 executing program 3: perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:18:12 executing program 1: perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:18:12 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x0, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) fork() 23:18:12 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:18:12 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:18:12 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) io_setup(0xa, &(0x7f0000000000)=0x0) r2 = signalfd(0xffffffffffffffff, &(0x7f00000011c0), 0x8) io_submit(r1, 0x2, &(0x7f0000000180)=[&(0x7f0000001080)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x8, 0x0, r2, 0x0}]) fcntl$setstatus(r0, 0x4, 0x40000) sendmsg$IPCTNL_MSG_CT_GET_DYING(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x6, 0x1, 0x201, 0x0, 0x0, {0x3, 0x0, 0x4}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4040}, 0x48000) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x6dc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2000c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup(r3) r4 = epoll_create1(0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000000)) ioctl$TIOCVHANGUP(r5, 0x5437, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r6, &(0x7f0000000000)) 23:18:12 executing program 0: perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) fork() 23:18:12 executing program 3: perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:18:12 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:18:12 executing program 1: perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:18:12 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:18:12 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:18:12 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:18:12 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:18:12 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x0, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) fork() 23:18:12 executing program 0: perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) fork() 23:18:12 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:18:12 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:18:12 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:18:12 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:18:24 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:18:24 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:18:24 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) io_setup(0xa, &(0x7f0000000000)=0x0) r2 = signalfd(0xffffffffffffffff, &(0x7f00000011c0), 0x8) io_submit(r1, 0x2, &(0x7f0000000180)=[&(0x7f0000001080)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x8, 0x0, r2, 0x0}]) fcntl$setstatus(r0, 0x4, 0x40000) sendmsg$IPCTNL_MSG_CT_GET_DYING(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x6, 0x1, 0x201, 0x0, 0x0, {0x3, 0x0, 0x4}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4040}, 0x48000) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x6dc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2000c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup(r3) r4 = epoll_create1(0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000000)) ioctl$TIOCVHANGUP(r5, 0x5437, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r6, &(0x7f0000000000)) 23:18:24 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, 0x0, 0x0) 23:18:24 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:18:24 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:18:24 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x0, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) fork() 23:18:24 executing program 0: perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) fork() 23:18:24 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:18:36 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) io_setup(0xa, &(0x7f0000000000)=0x0) r2 = signalfd(0xffffffffffffffff, &(0x7f00000011c0), 0x8) io_submit(r1, 0x2, &(0x7f0000000180)=[&(0x7f0000001080)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x8, 0x0, r2, 0x0}]) fcntl$setstatus(r0, 0x4, 0x40000) sendmsg$IPCTNL_MSG_CT_GET_DYING(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x6, 0x1, 0x201, 0x0, 0x0, {0x3, 0x0, 0x4}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4040}, 0x48000) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x6dc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2000c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r3 = epoll_create1(0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000000)) ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r5, &(0x7f0000000000)) 23:18:36 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:18:36 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, 0x0, 0x0) 23:18:36 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) fork() 23:18:36 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:18:36 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, 0x0, 0x0) 23:18:36 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x0, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:18:36 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) fork() 23:18:36 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, 0x0, 0x0) 23:18:36 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x0, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:18:36 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:18:36 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x0, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:18:36 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, 0x0, 0x0) 23:18:36 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) fork() 23:18:36 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) fork() 23:18:36 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x0, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:18:48 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) io_setup(0xa, &(0x7f0000000000)=0x0) r2 = signalfd(0xffffffffffffffff, &(0x7f00000011c0), 0x8) io_submit(r1, 0x2, &(0x7f0000000180)=[&(0x7f0000001080)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x8, 0x0, r2, 0x0}]) fcntl$setstatus(r0, 0x4, 0x40000) sendmsg$IPCTNL_MSG_CT_GET_DYING(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x6, 0x1, 0x201, 0x0, 0x0, {0x3, 0x0, 0x4}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4040}, 0x48000) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x6dc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2000c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r3 = epoll_create1(0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000000)) ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r5, &(0x7f0000000000)) 23:18:48 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) fork() 23:18:48 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, 0x0, 0x0) 23:18:48 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:18:48 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0), 0x0) 23:18:48 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) fork() 23:18:48 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x0, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:18:48 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) [ 532.706143] cgroup: fork rejected by pids controller in /syz0 23:18:48 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:18:48 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) fork() 23:18:48 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0), 0x0) 23:18:48 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0), 0x0) 23:18:48 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x0, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:18:48 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x0, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:18:48 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) fork() 23:18:48 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:19:00 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0), 0x0) 23:19:00 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) fork() 23:19:00 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:19:00 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) io_setup(0xa, &(0x7f0000000000)=0x0) r2 = signalfd(0xffffffffffffffff, &(0x7f00000011c0), 0x8) io_submit(r1, 0x2, &(0x7f0000000180)=[&(0x7f0000001080)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x8, 0x0, r2, 0x0}]) fcntl$setstatus(r0, 0x4, 0x40000) sendmsg$IPCTNL_MSG_CT_GET_DYING(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x6, 0x1, 0x201, 0x0, 0x0, {0x3, 0x0, 0x4}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4040}, 0x48000) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x6dc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2000c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r3 = epoll_create1(0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000000)) ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r5, &(0x7f0000000000)) 23:19:00 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0), 0x0) 23:19:00 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) fork() 23:19:00 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x0, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:19:00 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:19:00 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:19:00 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x0, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:19:00 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:19:00 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0), 0x0) 23:19:00 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) fork() 23:19:00 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:19:00 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{0x0}], 0x1) 23:19:00 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) fork() 23:19:00 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:19:00 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{0x0}], 0x1) 23:19:12 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) fork() 23:19:12 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{0x0}], 0x1) 23:19:12 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:19:12 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{0x0}], 0x1) 23:19:12 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:19:12 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) io_setup(0xa, &(0x7f0000000000)=0x0) r2 = signalfd(0xffffffffffffffff, &(0x7f00000011c0), 0x8) io_submit(r1, 0x2, &(0x7f0000000180)=[&(0x7f0000001080)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x8, 0x0, r2, 0x0}]) fcntl$setstatus(r0, 0x4, 0x40000) sendmsg$IPCTNL_MSG_CT_GET_DYING(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x6, 0x1, 0x201, 0x0, 0x0, {0x3, 0x0, 0x4}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4040}, 0x48000) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x6dc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r3 = epoll_create1(0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000000)) ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r5, &(0x7f0000000000)) 23:19:12 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x0, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) fork() 23:19:12 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:19:12 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) fork() 23:19:12 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:19:12 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{0x0}], 0x1) 23:19:12 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{0x0}], 0x1) 23:19:12 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:19:12 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:19:12 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:19:12 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) io_setup(0xa, &(0x7f0000000000)=0x0) r2 = signalfd(0xffffffffffffffff, &(0x7f00000011c0), 0x8) io_submit(r1, 0x2, &(0x7f0000000180)=[&(0x7f0000001080)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x8, 0x0, r2, 0x0}]) fcntl$setstatus(r0, 0x4, 0x40000) sendmsg$IPCTNL_MSG_CT_GET_DYING(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x6, 0x1, 0x201, 0x0, 0x0, {0x3, 0x0, 0x4}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4040}, 0x48000) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x6dc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r3 = epoll_create1(0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000000)) ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r5, &(0x7f0000000000)) 23:19:12 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:19:25 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:19:25 executing program 6: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:19:25 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) io_setup(0xa, &(0x7f0000000000)=0x0) r2 = signalfd(0xffffffffffffffff, &(0x7f00000011c0), 0x8) io_submit(r1, 0x2, &(0x7f0000000180)=[&(0x7f0000001080)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x8, 0x0, r2, 0x0}]) fcntl$setstatus(r0, 0x4, 0x40000) sendmsg$IPCTNL_MSG_CT_GET_DYING(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x6, 0x1, 0x201, 0x0, 0x0, {0x3, 0x0, 0x4}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4040}, 0x48000) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x6dc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r3 = epoll_create1(0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000000)) ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r5, &(0x7f0000000000)) 23:19:25 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:19:25 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x0, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) fork() 23:19:25 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) fork() 23:19:25 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000018c0), 0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, 0x0) ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b65, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:19:25 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, 0x0, 0x0) 23:19:25 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) io_setup(0xa, &(0x7f0000000000)=0x0) r2 = signalfd(0xffffffffffffffff, &(0x7f00000011c0), 0x8) io_submit(r1, 0x2, &(0x7f0000000180)=[&(0x7f0000001080)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x8, 0x0, r2, 0x0}]) fcntl$setstatus(r0, 0x4, 0x40000) sendmsg$IPCTNL_MSG_CT_GET_DYING(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x6, 0x1, 0x201, 0x0, 0x0, {0x3, 0x0, 0x4}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4040}, 0x48000) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x6dc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r3 = epoll_create1(0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000000)) ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r5, &(0x7f0000000000)) 23:19:25 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:19:25 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:19:25 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000018c0), 0x4) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:19:25 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, 0x0, 0x0) 23:19:25 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:19:37 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x0, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) fork() 23:19:37 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000018c0), 0x4) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:19:37 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, 0x0, 0x0) 23:19:37 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) io_setup(0xa, &(0x7f0000000000)=0x0) r2 = signalfd(0xffffffffffffffff, &(0x7f00000011c0), 0x8) io_submit(r1, 0x2, &(0x7f0000000180)=[&(0x7f0000001080)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x8, 0x0, r2, 0x0}]) fcntl$setstatus(r0, 0x4, 0x40000) sendmsg$IPCTNL_MSG_CT_GET_DYING(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x6, 0x1, 0x201, 0x0, 0x0, {0x3, 0x0, 0x4}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4040}, 0x48000) dup(0xffffffffffffffff) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r3 = epoll_create1(0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000000)) ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r5, &(0x7f0000000000)) 23:19:37 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000018c0), 0x4) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:19:37 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, 0x0, 0x0) 23:19:37 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, 0x0, 0x0) fork() 23:19:37 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:19:37 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) (fail_nth: 1) 23:19:37 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:19:37 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) fork() 23:19:37 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0), 0x0) 23:19:37 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, 0x0, 0x0) [ 581.784865] FAULT_INJECTION: forcing a failure. [ 581.784865] name failslab, interval 1, probability 0, space 0, times 1 [ 581.786677] CPU: 0 PID: 6106 Comm: syz-executor.5 Not tainted 6.4.0-next-20230630 #1 [ 581.787644] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 581.788675] Call Trace: [ 581.789010] [ 581.789309] dump_stack_lvl+0xc1/0xf0 [ 581.789816] should_fail_ex+0x4b4/0x5b0 [ 581.790346] should_failslab+0x9/0x20 [ 581.790840] __kmem_cache_alloc_node+0x66/0x320 [ 581.791445] ? io_rsrc_data_alloc+0x5e/0x4a0 [ 581.792024] kmalloc_trace+0x26/0xc0 [ 581.792530] io_rsrc_data_alloc+0x5e/0x4a0 [ 581.793094] io_sqe_buffers_register+0x102/0x870 [ 581.793701] ? __do_sys_io_uring_register+0x199/0x2210 [ 581.794367] ? __pfx_io_sqe_buffers_register+0x10/0x10 [ 581.795036] ? __fget_files+0x267/0x480 [ 581.795580] __do_sys_io_uring_register+0xfc3/0x2210 [ 581.796248] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 581.797003] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 581.797757] ? fput+0x2f/0x1a0 [ 581.798205] ? __pfx___do_sys_io_uring_register+0x10/0x10 [ 581.798897] ? __pfx_ksys_write+0x10/0x10 [ 581.799440] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 581.800106] do_syscall_64+0x3f/0x90 [ 581.800629] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 581.801385] RIP: 0033:0x7f33ff157b19 [ 581.801427] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 581.801457] RSP: 002b:00007f33fc6cd188 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 581.801487] RAX: ffffffffffffffda RBX: 00007f33ff26af60 RCX: 00007f33ff157b19 [ 581.801508] RDX: 00000000200001c0 RSI: 0000000000000000 RDI: 0000000000000004 [ 581.801528] RBP: 00007f33fc6cd1d0 R08: 0000000000000000 R09: 0000000000000000 [ 581.801547] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001 [ 581.801567] R13: 00007ffe2fb64dcf R14: 00007f33fc6cd300 R15: 0000000000022000 [ 581.801612] 23:19:37 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0), 0x0) 23:19:37 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:19:37 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) fork() 23:19:49 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0), 0x0) [ 593.693851] FAULT_INJECTION: forcing a failure. [ 593.693851] name failslab, interval 1, probability 0, space 0, times 0 [ 593.694671] CPU: 0 PID: 6132 Comm: syz-executor.6 Not tainted 6.4.0-next-20230630 #1 [ 593.695228] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 593.695777] Call Trace: [ 593.695962] [ 593.696127] dump_stack_lvl+0xc1/0xf0 [ 593.696420] should_fail_ex+0x4b4/0x5b0 [ 593.696722] should_failslab+0x9/0x20 [ 593.697007] __kmem_cache_alloc_node+0x66/0x320 [ 593.697351] ? io_rsrc_data_alloc+0x5e/0x4a0 [ 593.697677] kmalloc_trace+0x26/0xc0 [ 593.697952] io_rsrc_data_alloc+0x5e/0x4a0 [ 593.698264] io_sqe_buffers_register+0x102/0x870 [ 593.698611] ? __do_sys_io_uring_register+0x199/0x2210 [ 593.698994] ? __pfx_io_sqe_buffers_register+0x10/0x10 [ 593.699351] ? __fget_files+0x267/0x480 [ 593.699660] __do_sys_io_uring_register+0xfc3/0x2210 [ 593.700028] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 593.700455] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 593.700882] ? fput+0x2f/0x1a0 [ 593.701127] ? __pfx___do_sys_io_uring_register+0x10/0x10 [ 593.701525] ? __pfx_ksys_write+0x10/0x10 [ 593.701816] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 593.702204] do_syscall_64+0x3f/0x90 [ 593.702479] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 593.702874] RIP: 0033:0x7fc6cb383b19 [ 593.703144] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 593.704328] RSP: 002b:00007fc6c88f9188 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 593.704883] RAX: ffffffffffffffda RBX: 00007fc6cb496f60 RCX: 00007fc6cb383b19 [ 593.705386] RDX: 00000000200001c0 RSI: 0000000000000000 RDI: 0000000000000004 [ 593.705878] RBP: 00007fc6c88f91d0 R08: 0000000000000000 R09: 0000000000000000 [ 593.706376] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001 [ 593.706874] R13: 00007ffe33bf0c7f R14: 00007fc6c88f9300 R15: 0000000000022000 [ 593.707390] 23:19:49 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, 0x0, 0x0) 23:19:49 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) (fail_nth: 1) 23:19:49 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, 0x0, 0x0) fork() 23:19:49 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) io_setup(0xa, &(0x7f0000000000)=0x0) r2 = signalfd(0xffffffffffffffff, &(0x7f00000011c0), 0x8) io_submit(r1, 0x2, &(0x7f0000000180)=[&(0x7f0000001080)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x8, 0x0, r2, 0x0}]) fcntl$setstatus(r0, 0x4, 0x40000) dup(0xffffffffffffffff) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r3 = epoll_create1(0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000000)) ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r5, &(0x7f0000000000)) 23:19:49 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, 0x0, 0x0) 23:19:49 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) fork() 23:19:49 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) (fail_nth: 2) 23:19:49 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) (fail_nth: 2) 23:19:49 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{0x0}], 0x1) 23:19:49 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0), 0x0) 23:19:49 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, 0x0, 0x0) 23:19:49 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) (fail_nth: 3) 23:19:49 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) (fail_nth: 3) 23:19:49 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{0x0}], 0x1) 23:19:50 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, 0x0, 0x0) fork() 23:19:50 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) fork() 23:19:50 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) io_setup(0xa, &(0x7f0000000000)=0x0) r1 = signalfd(0xffffffffffffffff, &(0x7f00000011c0), 0x8) io_submit(r0, 0x2, &(0x7f0000000180)=[&(0x7f0000001080)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x8, 0x0, r1, 0x0}]) dup(0xffffffffffffffff) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r2 = epoll_create1(0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000000)) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r4, &(0x7f0000000000)) 23:19:50 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0), 0x0) 23:19:50 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{0x0}], 0x1) [ 594.043713] FAULT_INJECTION: forcing a failure. [ 594.043713] name failslab, interval 1, probability 0, space 0, times 0 [ 594.043755] CPU: 0 PID: 6160 Comm: syz-executor.5 Not tainted 6.4.0-next-20230630 #1 [ 594.043786] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 594.043802] Call Trace: [ 594.043809] [ 594.043820] dump_stack_lvl+0xc1/0xf0 [ 594.043877] should_fail_ex+0x4b4/0x5b0 [ 594.043914] ? io_rsrc_data_alloc+0x97/0x4a0 [ 594.043948] should_failslab+0x9/0x20 [ 594.043979] __kmem_cache_alloc_node+0x66/0x320 [ 594.044017] ? io_rsrc_data_alloc+0x97/0x4a0 [ 594.044057] ? io_rsrc_data_alloc+0x97/0x4a0 [ 594.044091] __kmalloc+0x4a/0x160 [ 594.044123] io_rsrc_data_alloc+0x97/0x4a0 [ 594.044170] io_sqe_buffers_register+0x102/0x870 [ 594.044208] ? __do_sys_io_uring_register+0x199/0x2210 [ 594.044255] ? __pfx_io_sqe_buffers_register+0x10/0x10 [ 594.044298] ? __fget_files+0x267/0x480 [ 594.044356] __do_sys_io_uring_register+0xfc3/0x2210 [ 594.044396] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 594.044440] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 594.044484] ? fput+0x2f/0x1a0 [ 594.044520] ? __pfx___do_sys_io_uring_register+0x10/0x10 [ 594.044557] ? __pfx_ksys_write+0x10/0x10 [ 594.044618] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 594.044664] do_syscall_64+0x3f/0x90 [ 594.044708] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 594.044757] RIP: 0033:0x7f33ff157b19 [ 594.044777] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 594.044805] RSP: 002b:00007f33fc6cd188 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 594.044834] RAX: ffffffffffffffda RBX: 00007f33ff26af60 RCX: 00007f33ff157b19 [ 594.044854] RDX: 00000000200001c0 RSI: 0000000000000000 RDI: 0000000000000004 [ 594.044872] RBP: 00007f33fc6cd1d0 R08: 0000000000000000 R09: 0000000000000000 [ 594.044891] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001 [ 594.044908] R13: 00007ffe2fb64dcf R14: 00007f33fc6cd300 R15: 0000000000022000 [ 594.044951] [ 594.084108] FAULT_INJECTION: forcing a failure. [ 594.084108] name failslab, interval 1, probability 0, space 0, times 0 [ 594.084153] CPU: 0 PID: 6163 Comm: syz-executor.6 Not tainted 6.4.0-next-20230630 #1 [ 594.084197] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 594.084216] Call Trace: [ 594.084224] [ 594.084236] dump_stack_lvl+0xc1/0xf0 [ 594.084289] should_fail_ex+0x4b4/0x5b0 [ 594.084330] ? io_rsrc_data_alloc+0x97/0x4a0 [ 594.084371] should_failslab+0x9/0x20 [ 594.084406] __kmem_cache_alloc_node+0x66/0x320 [ 594.084451] ? io_rsrc_data_alloc+0x97/0x4a0 [ 594.084498] ? io_rsrc_data_alloc+0x97/0x4a0 [ 594.084539] __kmalloc+0x4a/0x160 [ 594.084623] io_rsrc_data_alloc+0x97/0x4a0 [ 594.084681] io_sqe_buffers_register+0x102/0x870 [ 594.084725] ? __do_sys_io_uring_register+0x199/0x2210 [ 594.084780] ? __pfx_io_sqe_buffers_register+0x10/0x10 [ 594.084831] ? __fget_files+0x267/0x480 [ 594.084899] __do_sys_io_uring_register+0xfc3/0x2210 [ 594.084948] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 594.084999] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 594.085051] ? fput+0x2f/0x1a0 [ 594.085093] ? __pfx___do_sys_io_uring_register+0x10/0x10 [ 594.085138] ? __pfx_ksys_write+0x10/0x10 [ 594.085180] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 594.085232] do_syscall_64+0x3f/0x90 [ 594.085284] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 594.085341] RIP: 0033:0x7fc6cb383b19 [ 594.085365] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 594.085397] RSP: 002b:00007fc6c88f9188 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 594.085430] RAX: ffffffffffffffda RBX: 00007fc6cb496f60 RCX: 00007fc6cb383b19 [ 594.085454] RDX: 00000000200001c0 RSI: 0000000000000000 RDI: 0000000000000004 [ 594.085476] RBP: 00007fc6c88f91d0 R08: 0000000000000000 R09: 0000000000000000 [ 594.085497] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001 [ 594.085518] R13: 00007ffe33bf0c7f R14: 00007fc6c88f9300 R15: 0000000000022000 [ 594.085569] 23:20:03 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) (fail_nth: 4) 23:20:03 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, 0x0, 0x0) 23:20:03 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) io_setup(0xa, &(0x7f0000000000)) signalfd(0xffffffffffffffff, &(0x7f00000011c0), 0x8) dup(0xffffffffffffffff) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = epoll_create1(0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, &(0x7f0000000000)) 23:20:03 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) (fail_nth: 1) 23:20:03 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0), 0x0) 23:20:03 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) fork() 23:20:03 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0), 0x0) fork() 23:20:03 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) (fail_nth: 4) [ 607.492597] FAULT_INJECTION: forcing a failure. [ 607.492597] name failslab, interval 1, probability 0, space 0, times 0 [ 607.493622] CPU: 0 PID: 6195 Comm: syz-executor.2 Not tainted 6.4.0-next-20230630 #1 [ 607.494296] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 607.494981] Call Trace: [ 607.495214] [ 607.495422] dump_stack_lvl+0xc1/0xf0 [ 607.495783] should_fail_ex+0x4b4/0x5b0 [ 607.496143] should_failslab+0x9/0x20 [ 607.496484] __kmem_cache_alloc_node+0x66/0x320 [ 607.496913] ? io_rsrc_data_alloc+0x5e/0x4a0 [ 607.497325] kmalloc_trace+0x26/0xc0 [ 607.497662] io_rsrc_data_alloc+0x5e/0x4a0 [ 607.498050] io_sqe_buffers_register+0x102/0x870 [ 607.498475] ? __do_sys_io_uring_register+0x199/0x2210 [ 607.498942] ? __pfx_io_sqe_buffers_register+0x10/0x10 [ 607.499410] ? __fget_files+0x267/0x480 [ 607.499787] __do_sys_io_uring_register+0xfc3/0x2210 [ 607.500241] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 607.500772] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 607.501285] ? fput+0x2f/0x1a0 [ 607.501595] ? __pfx___do_sys_io_uring_register+0x10/0x10 [ 607.502090] ? __pfx_ksys_write+0x10/0x10 [ 607.502464] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 607.502952] do_syscall_64+0x3f/0x90 [ 607.503307] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 607.503795] RIP: 0033:0x7fe674943b19 [ 607.504134] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 607.505696] RSP: 002b:00007fe671eb9188 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 607.506343] RAX: ffffffffffffffda RBX: 00007fe674a56f60 RCX: 00007fe674943b19 [ 607.506957] RDX: 00000000200001c0 RSI: 0000000000000000 RDI: 0000000000000004 [ 607.507570] RBP: 00007fe671eb91d0 R08: 0000000000000000 R09: 0000000000000000 [ 607.508170] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001 [ 607.508782] R13: 00007ffc8e25421f R14: 00007fe671eb9300 R15: 0000000000022000 [ 607.509412] 23:20:03 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{0x0}], 0x1) 23:20:03 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) (fail_nth: 5) 23:20:03 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) (fail_nth: 5) 23:20:03 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0), 0x0) [ 607.647052] FAULT_INJECTION: forcing a failure. [ 607.647052] name failslab, interval 1, probability 0, space 0, times 0 [ 607.648797] CPU: 0 PID: 6208 Comm: syz-executor.6 Not tainted 6.4.0-next-20230630 #1 [ 607.649938] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 607.651124] Call Trace: [ 607.651524] [ 607.651888] dump_stack_lvl+0xc1/0xf0 [ 607.652501] should_fail_ex+0x4b4/0x5b0 [ 607.653142] ? io_rsrc_data_alloc+0xe5/0x4a0 [ 607.653820] should_failslab+0x9/0x20 [ 607.654411] __kmem_cache_alloc_node+0x66/0x320 [ 607.655144] ? io_rsrc_data_alloc+0xe5/0x4a0 [ 607.655863] ? io_rsrc_data_alloc+0xe5/0x4a0 [ 607.656589] __kmalloc+0x4a/0x160 [ 607.657171] io_rsrc_data_alloc+0xe5/0x4a0 [ 607.657838] io_sqe_buffers_register+0x102/0x870 [ 607.658611] ? __do_sys_io_uring_register+0x199/0x2210 [ 607.659462] ? __pfx_io_sqe_buffers_register+0x10/0x10 [ 607.660303] ? __fget_files+0x267/0x480 [ 607.660985] __do_sys_io_uring_register+0xfc3/0x2210 [ 607.661814] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 607.662755] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 607.663683] ? fput+0x2f/0x1a0 [ 607.664226] ? __pfx___do_sys_io_uring_register+0x10/0x10 [ 607.665118] ? __pfx_ksys_write+0x10/0x10 [ 607.665783] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 607.666640] do_syscall_64+0x3f/0x90 [ 607.667264] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 607.668106] RIP: 0033:0x7fc6cb383b19 [ 607.668701] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 607.671497] RSP: 002b:00007fc6c88f9188 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 607.672688] RAX: ffffffffffffffda RBX: 00007fc6cb496f60 RCX: 00007fc6cb383b19 [ 607.673804] RDX: 00000000200001c0 RSI: 0000000000000000 RDI: 0000000000000004 [ 607.674913] RBP: 00007fc6c88f91d0 R08: 0000000000000000 R09: 0000000000000000 [ 607.675858] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001 [ 607.676822] R13: 00007ffe33bf0c7f R14: 00007fc6c88f9300 R15: 0000000000022000 [ 607.677800] 23:20:03 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) (fail_nth: 2) [ 607.722405] FAULT_INJECTION: forcing a failure. [ 607.722405] name failslab, interval 1, probability 0, space 0, times 0 [ 607.724414] CPU: 0 PID: 6211 Comm: syz-executor.5 Not tainted 6.4.0-next-20230630 #1 [ 607.725511] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 607.726612] Call Trace: [ 607.726974] [ 607.727303] dump_stack_lvl+0xc1/0xf0 [ 607.727863] should_fail_ex+0x4b4/0x5b0 [ 607.728428] ? io_rsrc_data_alloc+0xe5/0x4a0 [ 607.729091] should_failslab+0x9/0x20 [ 607.729639] __kmem_cache_alloc_node+0x66/0x320 [ 607.730307] ? io_rsrc_data_alloc+0xe5/0x4a0 [ 607.730939] ? io_rsrc_data_alloc+0xe5/0x4a0 [ 607.731589] __kmalloc+0x4a/0x160 [ 607.732105] io_rsrc_data_alloc+0xe5/0x4a0 [ 607.732749] io_sqe_buffers_register+0x102/0x870 23:20:03 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{0x0}], 0x1) [ 607.733426] ? __do_sys_io_uring_register+0x199/0x2210 [ 607.734371] ? __pfx_io_sqe_buffers_register+0x10/0x10 [ 607.735127] ? __fget_files+0x267/0x480 [ 607.735761] __do_sys_io_uring_register+0xfc3/0x2210 [ 607.735811] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 607.735858] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 607.735905] ? fput+0x2f/0x1a0 [ 607.735945] ? __pfx___do_sys_io_uring_register+0x10/0x10 [ 607.735986] ? __pfx_ksys_write+0x10/0x10 [ 607.736024] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 607.736074] do_syscall_64+0x3f/0x90 [ 607.736121] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 23:20:03 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) io_setup(0xa, &(0x7f0000000000)) signalfd(0xffffffffffffffff, &(0x7f00000011c0), 0x8) dup(0xffffffffffffffff) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = epoll_create1(0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, &(0x7f0000000000)) 23:20:03 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0), 0x0) fork() [ 607.736174] RIP: 0033:0x7f33ff157b19 [ 607.736196] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 607.736226] RSP: 002b:00007f33fc6cd188 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 607.736257] RAX: ffffffffffffffda RBX: 00007f33ff26af60 RCX: 00007f33ff157b19 [ 607.736278] RDX: 00000000200001c0 RSI: 0000000000000000 RDI: 0000000000000004 [ 607.736298] RBP: 00007f33fc6cd1d0 R08: 0000000000000000 R09: 0000000000000000 [ 607.736317] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001 [ 607.736336] R13: 00007ffe2fb64dcf R14: 00007f33fc6cd300 R15: 0000000000022000 [ 607.736383] 23:20:03 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) fork() 23:20:03 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0), 0x0) 23:20:16 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) (fail_nth: 6) 23:20:16 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0), 0x0) 23:20:16 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) fork() 23:20:16 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) io_setup(0xa, &(0x7f0000000000)) dup(0xffffffffffffffff) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = epoll_create1(0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, &(0x7f0000000000)) 23:20:16 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) (fail_nth: 3) 23:20:16 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{0x0}], 0x1) 23:20:16 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0), 0x0) fork() 23:20:16 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) (fail_nth: 6) [ 620.235775] FAULT_INJECTION: forcing a failure. [ 620.235775] name failslab, interval 1, probability 0, space 0, times 0 [ 620.237299] CPU: 1 PID: 6242 Comm: syz-executor.2 Not tainted 6.4.0-next-20230630 #1 [ 620.238240] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 620.239224] Call Trace: [ 620.239553] [ 620.239842] dump_stack_lvl+0xc1/0xf0 [ 620.240347] should_fail_ex+0x4b4/0x5b0 [ 620.240854] ? io_rsrc_data_alloc+0x97/0x4a0 [ 620.241424] should_failslab+0x9/0x20 [ 620.241906] __kmem_cache_alloc_node+0x66/0x320 [ 620.242503] ? io_rsrc_data_alloc+0x97/0x4a0 [ 620.243067] ? io_rsrc_data_alloc+0x97/0x4a0 [ 620.243631] __kmalloc+0x4a/0x160 [ 620.244078] io_rsrc_data_alloc+0x97/0x4a0 [ 620.244621] io_sqe_buffers_register+0x102/0x870 [ 620.245221] ? __do_sys_io_uring_register+0x199/0x2210 [ 620.245884] ? __pfx_io_sqe_buffers_register+0x10/0x10 [ 620.246540] ? __fget_files+0x267/0x480 [ 620.247067] __do_sys_io_uring_register+0xfc3/0x2210 [ 620.247703] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 620.248437] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 620.249188] ? fput+0x2f/0x1a0 [ 620.249609] ? __pfx___do_sys_io_uring_register+0x10/0x10 [ 620.250282] ? ksys_write+0x19e/0x250 [ 620.250762] ? __pfx_ksys_write+0x10/0x10 [ 620.251281] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 620.251940] do_syscall_64+0x3f/0x90 [ 620.252425] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 620.253089] RIP: 0033:0x7fe674943b19 [ 620.253556] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 620.255714] RSP: 002b:00007fe671eb9188 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 620.256644] RAX: ffffffffffffffda RBX: 00007fe674a56f60 RCX: 00007fe674943b19 [ 620.257520] RDX: 00000000200001c0 RSI: 0000000000000000 RDI: 0000000000000004 [ 620.258387] RBP: 00007fe671eb91d0 R08: 0000000000000000 R09: 0000000000000000 [ 620.259294] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001 [ 620.260152] R13: 00007ffc8e25421f R14: 00007fe671eb9300 R15: 0000000000022000 [ 620.261071] 23:20:16 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) (fail_nth: 7) [ 620.402251] FAULT_INJECTION: forcing a failure. [ 620.402251] name failslab, interval 1, probability 0, space 0, times 0 [ 620.403675] CPU: 1 PID: 6257 Comm: syz-executor.6 Not tainted 6.4.0-next-20230630 #1 [ 620.404634] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 620.405637] Call Trace: [ 620.405965] [ 620.406253] dump_stack_lvl+0xc1/0xf0 [ 620.406764] should_fail_ex+0x4b4/0x5b0 [ 620.407270] ? io_sqe_buffers_register+0x185/0x870 [ 620.407893] should_failslab+0x9/0x20 [ 620.408377] __kmem_cache_alloc_node+0x66/0x320 [ 620.408982] ? io_sqe_buffers_register+0x185/0x870 [ 620.409597] ? io_rsrc_data_alloc+0x307/0x4a0 [ 620.410173] ? io_sqe_buffers_register+0x185/0x870 [ 620.410784] __kmalloc+0x4a/0x160 [ 620.411236] io_sqe_buffers_register+0x185/0x870 [ 620.411833] ? __do_sys_io_uring_register+0x199/0x2210 [ 620.412494] ? __pfx_io_sqe_buffers_register+0x10/0x10 [ 620.413170] __do_sys_io_uring_register+0xfc3/0x2210 [ 620.413803] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 620.414541] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 620.415268] ? fput+0x2f/0x1a0 [ 620.415705] ? __pfx___do_sys_io_uring_register+0x10/0x10 [ 620.416390] ? ksys_write+0x19e/0x250 [ 620.416872] ? __pfx_ksys_write+0x10/0x10 [ 620.417420] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 620.418088] do_syscall_64+0x3f/0x90 [ 620.418583] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 620.419243] RIP: 0033:0x7fc6cb383b19 [ 620.419709] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 620.421869] RSP: 002b:00007fc6c88f9188 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 620.422804] RAX: ffffffffffffffda RBX: 00007fc6cb496f60 RCX: 00007fc6cb383b19 [ 620.423658] RDX: 00000000200001c0 RSI: 0000000000000000 RDI: 0000000000000004 [ 620.424531] RBP: 00007fc6c88f91d0 R08: 0000000000000000 R09: 0000000000000000 [ 620.425384] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001 [ 620.426236] R13: 00007ffe33bf0c7f R14: 00007fc6c88f9300 R15: 0000000000022000 [ 620.427114] 23:20:29 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) (fail_nth: 7) 23:20:29 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) (fail_nth: 8) 23:20:29 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) fork() 23:20:29 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) (fail_nth: 4) 23:20:29 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{0x0}], 0x1) 23:20:29 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) io_setup(0xa, &(0x7f0000000000)) dup(0xffffffffffffffff) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = epoll_create1(0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, &(0x7f0000000000)) 23:20:29 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{0x0}], 0x1) fork() 23:20:29 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) io_setup(0xa, &(0x7f0000000000)) signalfd(0xffffffffffffffff, &(0x7f00000011c0), 0x8) dup(0xffffffffffffffff) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = epoll_create1(0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, &(0x7f0000000000)) [ 633.109320] FAULT_INJECTION: forcing a failure. [ 633.109320] name failslab, interval 1, probability 0, space 0, times 0 [ 633.110883] CPU: 0 PID: 6278 Comm: syz-executor.5 Not tainted 6.4.0-next-20230630 #1 [ 633.111886] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 633.112929] Call Trace: [ 633.113287] [ 633.113597] dump_stack_lvl+0xc1/0xf0 [ 633.114135] should_fail_ex+0x4b4/0x5b0 [ 633.114679] ? io_sqe_buffers_register+0x185/0x870 [ 633.115343] should_failslab+0x9/0x20 [ 633.115859] __kmem_cache_alloc_node+0x66/0x320 [ 633.116493] ? io_sqe_buffers_register+0x185/0x870 [ 633.117160] ? io_rsrc_data_alloc+0x307/0x4a0 [ 633.117777] ? io_sqe_buffers_register+0x185/0x870 [ 633.118441] __kmalloc+0x4a/0x160 [ 633.118918] io_sqe_buffers_register+0x185/0x870 [ 633.119559] ? __do_sys_io_uring_register+0x199/0x2210 [ 633.120269] ? __pfx_io_sqe_buffers_register+0x10/0x10 [ 633.121001] __do_sys_io_uring_register+0xfc3/0x2210 [ 633.121714] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 633.122496] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 633.123279] ? fput+0x2f/0x1a0 23:20:29 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{0x0}], 0x1) [ 633.123850] ? __pfx___do_sys_io_uring_register+0x10/0x10 [ 633.124598] ? __pfx_ksys_write+0x10/0x10 [ 633.125172] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 633.125884] do_syscall_64+0x3f/0x90 [ 633.126406] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 633.127109] RIP: 0033:0x7f33ff157b19 [ 633.127610] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 633.129902] RSP: 002b:00007f33fc6cd188 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 633.130891] RAX: ffffffffffffffda RBX: 00007f33ff26af60 RCX: 00007f33ff157b19 [ 633.131811] RDX: 00000000200001c0 RSI: 0000000000000000 RDI: 0000000000000004 [ 633.132725] RBP: 00007f33fc6cd1d0 R08: 0000000000000000 R09: 0000000000000000 [ 633.133666] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001 [ 633.134586] R13: 00007ffe2fb64dcf R14: 00007f33fc6cd300 R15: 0000000000022000 [ 633.135538] 23:20:29 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{0x0}], 0x1) fork() 23:20:29 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) (fail_nth: 5) 23:20:29 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) fork() 23:20:29 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) (fail_nth: 9) [ 633.245420] FAULT_INJECTION: forcing a failure. [ 633.245420] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 633.246299] CPU: 1 PID: 6292 Comm: syz-executor.6 Not tainted 6.4.0-next-20230630 #1 [ 633.246837] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 633.247395] Call Trace: [ 633.247608] [ 633.247775] dump_stack_lvl+0xc1/0xf0 [ 633.248059] should_fail_ex+0x4b4/0x5b0 [ 633.248349] _copy_from_user+0x30/0xf0 [ 633.248634] io_copy_iov+0xbf/0x1c0 [ 633.248902] ? __pfx_io_copy_iov+0x10/0x10 [ 633.249221] ? kasan_set_track+0x25/0x30 [ 633.249520] ? __kasan_kmalloc+0x7f/0x90 [ 633.249823] io_sqe_buffers_register+0x202/0x870 [ 633.250169] ? __do_sys_io_uring_register+0x199/0x2210 [ 633.250548] ? __pfx_io_sqe_buffers_register+0x10/0x10 [ 633.250921] __do_sys_io_uring_register+0xfc3/0x2210 [ 633.251288] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 633.251707] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 633.252129] ? fput+0x2f/0x1a0 [ 633.252373] ? __pfx___do_sys_io_uring_register+0x10/0x10 [ 633.252753] ? ksys_write+0x19e/0x250 [ 633.253021] ? __pfx_ksys_write+0x10/0x10 [ 633.253329] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 633.253712] do_syscall_64+0x3f/0x90 [ 633.253991] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 633.254370] RIP: 0033:0x7fc6cb383b19 [ 633.254638] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 633.255886] RSP: 002b:00007fc6c88f9188 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 633.255903] RAX: ffffffffffffffda RBX: 00007fc6cb496f60 RCX: 00007fc6cb383b19 23:20:29 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{0x0}], 0x1) [ 633.255915] RDX: 00000000200001c0 RSI: 0000000000000000 RDI: 0000000000000004 [ 633.255925] RBP: 00007fc6c88f91d0 R08: 0000000000000000 R09: 0000000000000000 [ 633.255936] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001 [ 633.255947] R13: 00007ffe33bf0c7f R14: 00007fc6c88f9300 R15: 0000000000022000 [ 633.255971] [ 633.282797] FAULT_INJECTION: forcing a failure. [ 633.282797] name failslab, interval 1, probability 0, space 0, times 0 [ 633.282839] CPU: 0 PID: 6295 Comm: syz-executor.2 Not tainted 6.4.0-next-20230630 #1 [ 633.282872] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 633.282889] Call Trace: [ 633.282897] [ 633.282907] dump_stack_lvl+0xc1/0xf0 [ 633.282959] should_fail_ex+0x4b4/0x5b0 [ 633.282998] ? io_rsrc_data_alloc+0xe5/0x4a0 [ 633.283034] should_failslab+0x9/0x20 [ 633.283072] __kmem_cache_alloc_node+0x66/0x320 [ 633.283113] ? io_rsrc_data_alloc+0xe5/0x4a0 [ 633.283155] ? io_rsrc_data_alloc+0xe5/0x4a0 23:20:29 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) io_setup(0xa, &(0x7f0000000000)) dup(0xffffffffffffffff) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = epoll_create1(0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, &(0x7f0000000000)) [ 633.283192] __kmalloc+0x4a/0x160 [ 633.283226] io_rsrc_data_alloc+0xe5/0x4a0 [ 633.283277] io_sqe_buffers_register+0x102/0x870 [ 633.283318] ? __do_sys_io_uring_register+0x199/0x2210 [ 633.283368] ? __pfx_io_sqe_buffers_register+0x10/0x10 [ 633.283414] ? __fget_files+0x267/0x480 [ 633.283476] __do_sys_io_uring_register+0xfc3/0x2210 [ 633.283520] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 633.283567] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 633.283613] ? fput+0x2f/0x1a0 [ 633.283652] ? __pfx___do_sys_io_uring_register+0x10/0x10 23:20:29 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) (fail_nth: 6) 23:20:29 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) (fail_nth: 8) 23:20:29 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) (fail_nth: 10) 23:20:29 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, 0x0, 0x0) fork() 23:20:29 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{0x0}], 0x1) fork() [ 633.283692] ? __pfx_ksys_write+0x10/0x10 [ 633.283730] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 633.283779] do_syscall_64+0x3f/0x90 [ 633.283826] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 633.283879] RIP: 0033:0x7fe674943b19 [ 633.283902] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 633.283931] RSP: 002b:00007fe671eb9188 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 633.283962] RAX: ffffffffffffffda RBX: 00007fe674a56f60 RCX: 00007fe674943b19 [ 633.283983] RDX: 00000000200001c0 RSI: 0000000000000000 RDI: 0000000000000004 [ 633.284003] RBP: 00007fe671eb91d0 R08: 0000000000000000 R09: 0000000000000000 [ 633.284026] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001 [ 633.284046] R13: 00007ffc8e25421f R14: 00007fe671eb9300 R15: 0000000000022000 [ 633.284092] [ 633.430735] FAULT_INJECTION: forcing a failure. [ 633.430735] name failslab, interval 1, probability 0, space 0, times 0 [ 633.430760] CPU: 1 PID: 6306 Comm: syz-executor.6 Not tainted 6.4.0-next-20230630 #1 23:20:29 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) (fail_nth: 11) [ 633.430777] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 633.430786] Call Trace: [ 633.430791] [ 633.430796] dump_stack_lvl+0xc1/0xf0 [ 633.430827] should_fail_ex+0x4b4/0x5b0 [ 633.430847] ? kvmalloc_node+0xaa/0x200 [ 633.430872] should_failslab+0x9/0x20 [ 633.430889] __kmem_cache_alloc_node+0x66/0x320 [ 633.430909] ? do_syscall_64+0x3f/0x90 [ 633.430933] ? kvmalloc_node+0xaa/0x200 [ 633.430959] ? kvmalloc_node+0xaa/0x200 [ 633.430982] __kmalloc_node+0x4d/0x160 [ 633.431000] kvmalloc_node+0xaa/0x200 [ 633.431026] io_pin_pages+0x70/0x290 [ 633.431049] io_sqe_buffer_register+0x151/0x16b0 [ 633.431077] ? _copy_from_user+0x5c/0xf0 23:20:29 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) (fail_nth: 1) [ 633.431099] ? io_copy_iov+0xdf/0x1c0 [ 633.431117] ? __pfx_io_sqe_buffer_register+0x10/0x10 [ 633.431138] ? kasan_set_track+0x25/0x30 [ 633.431159] ? __kasan_kmalloc+0x7f/0x90 [ 633.431185] io_sqe_buffers_register+0x2b2/0x870 [ 633.431212] ? __pfx_io_sqe_buffers_register+0x10/0x10 [ 633.431246] __do_sys_io_uring_register+0xfc3/0x2210 23:20:29 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) (fail_nth: 7) [ 633.431269] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 633.431294] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 633.431317] ? fput+0x2f/0x1a0 [ 633.431338] ? __pfx___do_sys_io_uring_register+0x10/0x10 [ 633.431356] ? ksys_write+0x19e/0x250 [ 633.431373] ? __pfx_ksys_write+0x10/0x10 [ 633.431391] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 633.431417] do_syscall_64+0x3f/0x90 [ 633.431440] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 633.431467] RIP: 0033:0x7fc6cb383b19 [ 633.431479] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 633.431494] RSP: 002b:00007fc6c88f9188 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 633.431510] RAX: ffffffffffffffda RBX: 00007fc6cb496f60 RCX: 00007fc6cb383b19 [ 633.431521] RDX: 00000000200001c0 RSI: 0000000000000000 RDI: 0000000000000004 [ 633.431531] RBP: 00007fc6c88f91d0 R08: 0000000000000000 R09: 0000000000000000 [ 633.431541] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000002 [ 633.431551] R13: 00007ffe33bf0c7f R14: 00007fc6c88f9300 R15: 0000000000022000 [ 633.431574] [ 633.519045] FAULT_INJECTION: forcing a failure. [ 633.519045] name failslab, interval 1, probability 0, space 0, times 0 [ 633.519092] CPU: 0 PID: 6315 Comm: syz-executor.1 Not tainted 6.4.0-next-20230630 #1 [ 633.519129] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 633.519147] Call Trace: [ 633.519156] [ 633.519175] dump_stack_lvl+0xc1/0xf0 [ 633.519233] should_fail_ex+0x4b4/0x5b0 [ 633.519279] should_failslab+0x9/0x20 [ 633.519314] __kmem_cache_alloc_node+0x66/0x320 [ 633.519355] ? io_rsrc_data_alloc+0x5e/0x4a0 [ 633.519403] kmalloc_trace+0x26/0xc0 [ 633.519436] io_rsrc_data_alloc+0x5e/0x4a0 [ 633.519487] io_sqe_buffers_register+0x102/0x870 [ 633.519528] ? __do_sys_io_uring_register+0x199/0x2210 [ 633.519578] ? __pfx_io_sqe_buffers_register+0x10/0x10 [ 633.519624] ? __fget_files+0x267/0x480 [ 633.519686] __do_sys_io_uring_register+0xfc3/0x2210 [ 633.519729] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 633.519776] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 633.519823] ? fput+0x2f/0x1a0 [ 633.519863] ? __pfx___do_sys_io_uring_register+0x10/0x10 [ 633.519903] ? __pfx_ksys_write+0x10/0x10 [ 633.519940] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 633.519989] do_syscall_64+0x3f/0x90 [ 633.520036] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 633.520088] RIP: 0033:0x7fd3f7162b19 [ 633.520110] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 633.520140] RSP: 002b:00007fd3f46d8188 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 633.520171] RAX: ffffffffffffffda RBX: 00007fd3f7275f60 RCX: 00007fd3f7162b19 [ 633.520192] RDX: 00000000200001c0 RSI: 0000000000000000 RDI: 0000000000000004 [ 633.520212] RBP: 00007fd3f46d81d0 R08: 0000000000000000 R09: 0000000000000000 [ 633.520231] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001 [ 633.520250] R13: 00007ffee432bf2f R14: 00007fd3f46d8300 R15: 0000000000022000 [ 633.520297] [ 633.583090] FAULT_INJECTION: forcing a failure. [ 633.583090] name failslab, interval 1, probability 0, space 0, times 0 [ 633.583136] CPU: 0 PID: 6321 Comm: syz-executor.2 Not tainted 6.4.0-next-20230630 #1 [ 633.583179] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 633.583198] Call Trace: [ 633.583207] [ 633.583219] dump_stack_lvl+0xc1/0xf0 [ 633.583276] should_fail_ex+0x4b4/0x5b0 [ 633.583318] ? io_sqe_buffers_register+0x185/0x870 [ 633.583360] should_failslab+0x9/0x20 [ 633.583393] __kmem_cache_alloc_node+0x66/0x320 [ 633.583433] ? io_sqe_buffers_register+0x185/0x870 [ 633.583474] ? io_rsrc_data_alloc+0x307/0x4a0 [ 633.583515] ? io_sqe_buffers_register+0x185/0x870 [ 633.583556] __kmalloc+0x4a/0x160 [ 633.583590] io_sqe_buffers_register+0x185/0x870 [ 633.583635] ? __do_sys_io_uring_register+0x199/0x2210 [ 633.583684] ? __pfx_io_sqe_buffers_register+0x10/0x10 [ 633.583752] __do_sys_io_uring_register+0xfc3/0x2210 [ 633.583795] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 633.583842] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 633.583889] ? fput+0x2f/0x1a0 [ 633.583927] ? __pfx___do_sys_io_uring_register+0x10/0x10 [ 633.583967] ? __pfx_ksys_write+0x10/0x10 [ 633.584005] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 633.584053] do_syscall_64+0x3f/0x90 [ 633.584099] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 633.584151] RIP: 0033:0x7fe674943b19 [ 633.584173] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 633.584202] RSP: 002b:00007fe671eb9188 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 633.584233] RAX: ffffffffffffffda RBX: 00007fe674a56f60 RCX: 00007fe674943b19 [ 633.584255] RDX: 00000000200001c0 RSI: 0000000000000000 RDI: 0000000000000004 [ 633.584274] RBP: 00007fe671eb91d0 R08: 0000000000000000 R09: 0000000000000000 [ 633.584293] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001 [ 633.584312] R13: 00007ffc8e25421f R14: 00007fe671eb9300 R15: 0000000000022000 [ 633.584363] 23:20:29 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) (fail_nth: 9) 23:20:29 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) io_setup(0xa, &(0x7f0000000000)) signalfd(0xffffffffffffffff, &(0x7f00000011c0), 0x8) dup(0xffffffffffffffff) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = epoll_create1(0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, &(0x7f0000000000)) 23:20:29 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) fork() (fail_nth: 1) 23:20:29 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) (fail_nth: 2) 23:20:29 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) (fail_nth: 8) 23:20:29 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, 0x0, 0x0) fork() 23:20:29 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) (fail_nth: 12) [ 633.724990] FAULT_INJECTION: forcing a failure. [ 633.724990] name failslab, interval 1, probability 0, space 0, times 0 [ 633.725014] CPU: 1 PID: 6324 Comm: syz-executor.7 Not tainted 6.4.0-next-20230630 #1 [ 633.725031] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 633.725057] Call Trace: [ 633.725062] [ 633.725067] dump_stack_lvl+0xc1/0xf0 [ 633.725096] should_fail_ex+0x4b4/0x5b0 [ 633.725117] ? copy_process+0x3c2/0x7320 [ 633.725142] should_failslab+0x9/0x20 [ 633.725159] kmem_cache_alloc_node+0x65/0x3b0 [ 633.725183] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 633.725207] copy_process+0x3c2/0x7320 [ 633.725232] ? __pfx_perf_tp_event+0x10/0x10 [ 633.725253] ? lock_release+0x1e3/0x680 [ 633.725276] ? __pfx_copy_process+0x10/0x10 [ 633.725300] ? find_held_lock+0x2c/0x110 [ 633.725325] ? ksys_write+0x122/0x250 [ 633.725345] ? ksys_write+0x20f/0x250 [ 633.725360] ? lock_release+0x1e3/0x680 [ 633.725383] kernel_clone+0xeb/0x7d0 [ 633.725408] ? __pfx_kernel_clone+0x10/0x10 [ 633.725436] ? perf_trace_run_bpf_submit+0xf3/0x190 [ 633.725455] ? perf_trace_run_bpf_submit+0xf3/0x190 [ 633.725480] __do_sys_fork+0x80/0xc0 [ 633.725504] ? __pfx___do_sys_fork+0x10/0x10 [ 633.725528] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 633.725561] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 633.725581] ? syscall_enter_from_user_mode+0x21/0x50 [ 633.725604] ? syscall_enter_from_user_mode+0x21/0x50 [ 633.725626] do_syscall_64+0x3f/0x90 [ 633.725650] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 633.725678] RIP: 0033:0x7f2ec8a71b19 [ 633.725689] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 633.725704] RSP: 002b:00007f2ec5fe7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 633.725719] RAX: ffffffffffffffda RBX: 00007f2ec8b84f60 RCX: 00007f2ec8a71b19 [ 633.725730] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 633.725740] RBP: 00007f2ec5fe71d0 R08: 0000000000000000 R09: 0000000000000000 [ 633.725749] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 633.725759] R13: 00007ffff806eeff R14: 00007f2ec5fe7300 R15: 0000000000022000 [ 633.725781] [ 633.755541] FAULT_INJECTION: forcing a failure. [ 633.755541] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 633.755742] CPU: 0 PID: 6329 Comm: syz-executor.6 Not tainted 6.4.0-next-20230630 #1 [ 633.755779] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 633.755797] Call Trace: [ 633.755806] [ 633.755818] dump_stack_lvl+0xc1/0xf0 [ 633.755870] should_fail_ex+0x4b4/0x5b0 [ 633.755908] __should_fail_alloc_page+0xe0/0x110 [ 633.755952] prepare_alloc_pages+0x178/0x500 [ 633.755994] ? __pfx___lock_acquire+0x10/0x10 [ 633.756036] __alloc_pages+0x149/0x480 [ 633.756078] ? __pfx___alloc_pages+0x10/0x10 [ 633.756131] ? __pfx_lock_acquire+0x10/0x10 [ 633.756164] ? mt_find+0x2a7/0x8b0 [ 633.756202] ? lock_release+0x1e3/0x680 [ 633.756244] vma_alloc_folio+0xe2/0x480 [ 633.756285] __handle_mm_fault+0xd6c/0x2980 [ 633.756321] ? __pfx___handle_mm_fault+0x10/0x10 [ 633.756370] ? _raw_spin_unlock+0x1e/0x40 [ 633.756402] ? follow_page_mask+0x230/0x1970 [ 633.756450] handle_mm_fault+0x1af/0xba0 [ 633.756491] __get_user_pages+0xb8f/0x11e0 [ 633.756542] ? __pfx___get_user_pages+0x10/0x10 [ 633.756590] ? io_sqe_buffers_register+0x2b2/0x870 [ 633.756627] ? __do_sys_io_uring_register+0xfc3/0x2210 [ 633.756662] ? do_syscall_64+0x3f/0x90 [ 633.756705] ? lock_is_held_type+0x9f/0x120 [ 633.756750] __gup_longterm_locked+0x3d9/0x2760 [ 633.756800] ? lock_acquire+0x19a/0x4c0 [ 633.756833] ? io_pin_pages+0xc9/0x290 [ 633.756870] ? __pfx___gup_longterm_locked+0x10/0x10 [ 633.756910] ? __pfx_lock_acquire+0x10/0x10 [ 633.756944] ? mark_held_locks+0x9e/0xe0 [ 633.756983] ? lock_is_held_type+0x9f/0x120 [ 633.757035] pin_user_pages+0x141/0x160 [ 633.757100] ? __pfx_pin_user_pages+0x10/0x10 [ 633.757136] ? __kasan_kmalloc+0x7f/0x90 [ 633.757194] io_pin_pages+0xe6/0x290 [ 633.757233] io_sqe_buffer_register+0x151/0x16b0 [ 633.757286] ? _copy_from_user+0x5c/0xf0 [ 633.757321] ? io_copy_iov+0xdf/0x1c0 [ 633.757353] ? __pfx_io_sqe_buffer_register+0x10/0x10 [ 633.757392] ? kasan_set_track+0x25/0x30 [ 633.757430] ? __kasan_kmalloc+0x7f/0x90 [ 633.757479] io_sqe_buffers_register+0x2b2/0x870 [ 633.757529] ? __pfx_io_sqe_buffers_register+0x10/0x10 [ 633.757592] __do_sys_io_uring_register+0xfc3/0x2210 [ 633.757633] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 633.757677] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 633.757720] ? fput+0x2f/0x1a0 [ 633.757756] ? __pfx___do_sys_io_uring_register+0x10/0x10 [ 633.757794] ? __pfx_ksys_write+0x10/0x10 [ 633.757829] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 633.757874] do_syscall_64+0x3f/0x90 [ 633.757916] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 633.757966] RIP: 0033:0x7fc6cb383b19 [ 633.757987] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 633.758015] RSP: 002b:00007fc6c88f9188 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 633.758044] RAX: ffffffffffffffda RBX: 00007fc6cb496f60 RCX: 00007fc6cb383b19 [ 633.758064] RDX: 00000000200001c0 RSI: 0000000000000000 RDI: 0000000000000004 [ 633.758082] RBP: 00007fc6c88f91d0 R08: 0000000000000000 R09: 0000000000000000 [ 633.758100] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000002 [ 633.758118] R13: 00007ffe33bf0c7f R14: 00007fc6c88f9300 R15: 0000000000022000 [ 633.758161] [ 633.770776] FAULT_INJECTION: forcing a failure. [ 633.770776] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 633.770801] CPU: 1 PID: 6332 Comm: syz-executor.5 Not tainted 6.4.0-next-20230630 #1 [ 633.770819] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 633.770828] Call Trace: [ 633.770833] [ 633.770839] dump_stack_lvl+0xc1/0xf0 [ 633.770870] should_fail_ex+0x4b4/0x5b0 [ 633.770893] _copy_from_user+0x30/0xf0 [ 633.770915] io_copy_iov+0xbf/0x1c0 [ 633.770934] ? __pfx_io_copy_iov+0x10/0x10 [ 633.770953] ? kasan_set_track+0x25/0x30 [ 633.770977] ? __kasan_kmalloc+0x7f/0x90 [ 633.771004] io_sqe_buffers_register+0x202/0x870 [ 633.771026] ? __do_sys_io_uring_register+0x199/0x2210 [ 633.771054] ? __pfx_io_sqe_buffers_register+0x10/0x10 [ 633.771089] __do_sys_io_uring_register+0xfc3/0x2210 [ 633.771112] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 633.771138] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 633.771163] ? fput+0x2f/0x1a0 [ 633.771189] ? __pfx___do_sys_io_uring_register+0x10/0x10 [ 633.771209] ? ksys_write+0x19e/0x250 [ 633.771226] ? __pfx_ksys_write+0x10/0x10 [ 633.771246] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 633.771273] do_syscall_64+0x3f/0x90 [ 633.771298] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 633.771328] RIP: 0033:0x7f33ff157b19 [ 633.771341] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 633.771357] RSP: 002b:00007f33fc6cd188 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 633.771374] RAX: ffffffffffffffda RBX: 00007f33ff26af60 RCX: 00007f33ff157b19 [ 633.771386] RDX: 00000000200001c0 RSI: 0000000000000000 RDI: 0000000000000004 [ 633.771397] RBP: 00007f33fc6cd1d0 R08: 0000000000000000 R09: 0000000000000000 [ 633.771407] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001 [ 633.771417] R13: 00007ffe2fb64dcf R14: 00007f33fc6cd300 R15: 0000000000022000 [ 633.771442] 23:20:42 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) io_setup(0xa, &(0x7f0000000000)) signalfd(0xffffffffffffffff, &(0x7f00000011c0), 0x8) dup(0xffffffffffffffff) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = epoll_create1(0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, &(0x7f0000000000)) 23:20:42 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) (fail_nth: 3) 23:20:42 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, 0x0, 0x0) fork() 23:20:42 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) fork() (fail_nth: 2) 23:20:42 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) (fail_nth: 10) 23:20:42 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) (fail_nth: 13) 23:20:42 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) signalfd(0xffffffffffffffff, &(0x7f00000011c0), 0x8) dup(0xffffffffffffffff) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = epoll_create1(0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, &(0x7f0000000000)) 23:20:42 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) (fail_nth: 9) [ 646.040042] FAULT_INJECTION: forcing a failure. [ 646.040042] name failslab, interval 1, probability 0, space 0, times 0 [ 646.041665] CPU: 1 PID: 6345 Comm: syz-executor.5 Not tainted 6.4.0-next-20230630 #1 [ 646.042696] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 646.043775] Call Trace: [ 646.044128] [ 646.044449] dump_stack_lvl+0xc1/0xf0 [ 646.044996] should_fail_ex+0x4b4/0x5b0 [ 646.045561] ? kvmalloc_node+0xaa/0x200 [ 646.046124] should_failslab+0x9/0x20 [ 646.046654] __kmem_cache_alloc_node+0x66/0x320 [ 646.047297] ? do_syscall_64+0x3f/0x90 [ 646.047848] ? kvmalloc_node+0xaa/0x200 [ 646.048421] ? kvmalloc_node+0xaa/0x200 [ 646.048990] __kmalloc_node+0x4d/0x160 [ 646.049543] kvmalloc_node+0xaa/0x200 [ 646.050088] io_pin_pages+0x70/0x290 [ 646.050617] io_sqe_buffer_register+0x151/0x16b0 [ 646.051293] ? _copy_from_user+0x5c/0xf0 [ 646.051859] ? io_copy_iov+0xdf/0x1c0 [ 646.052401] ? __pfx_io_sqe_buffer_register+0x10/0x10 [ 646.053114] ? kasan_set_track+0x25/0x30 [ 646.053720] ? __kasan_kmalloc+0x7f/0x90 [ 646.054311] io_sqe_buffers_register+0x2b2/0x870 [ 646.054973] ? __pfx_io_sqe_buffers_register+0x10/0x10 [ 646.055705] __do_sys_io_uring_register+0xfc3/0x2210 [ 646.056403] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 646.057206] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 646.058005] ? fput+0x2f/0x1a0 [ 646.058469] ? __pfx___do_sys_io_uring_register+0x10/0x10 [ 646.059198] ? ksys_write+0x19e/0x250 [ 646.059718] ? __pfx_ksys_write+0x10/0x10 [ 646.060298] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 646.061013] do_syscall_64+0x3f/0x90 [ 646.061564] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 646.062256] RIP: 0033:0x7f33ff157b19 [ 646.062768] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 646.064697] FAULT_INJECTION: forcing a failure. [ 646.064697] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 646.065010] RSP: 002b:00007f33fc6cd188 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 646.066882] RAX: ffffffffffffffda RBX: 00007f33ff26af60 RCX: 00007f33ff157b19 [ 646.067783] RDX: 00000000200001c0 RSI: 0000000000000000 RDI: 0000000000000004 [ 646.068728] RBP: 00007f33fc6cd1d0 R08: 0000000000000000 R09: 0000000000000000 [ 646.069671] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000002 [ 646.070611] R13: 00007ffe2fb64dcf R14: 00007f33fc6cd300 R15: 0000000000022000 [ 646.071577] [ 646.071905] CPU: 0 PID: 6352 Comm: syz-executor.2 Not tainted 6.4.0-next-20230630 #1 [ 646.072454] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 646.073018] Call Trace: [ 646.073216] [ 646.073384] dump_stack_lvl+0xc1/0xf0 [ 646.073670] should_fail_ex+0x4b4/0x5b0 [ 646.073965] _copy_from_user+0x30/0xf0 [ 646.074249] io_copy_iov+0xbf/0x1c0 [ 646.074513] ? __pfx_io_copy_iov+0x10/0x10 [ 646.074815] ? kasan_set_track+0x25/0x30 [ 646.075113] ? __kasan_kmalloc+0x7f/0x90 [ 646.075417] io_sqe_buffers_register+0x202/0x870 [ 646.075756] ? __do_sys_io_uring_register+0x199/0x2210 [ 646.076137] ? __pfx_io_sqe_buffers_register+0x10/0x10 [ 646.076526] __do_sys_io_uring_register+0xfc3/0x2210 [ 646.076894] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 646.077321] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 646.077746] ? fput+0x2f/0x1a0 [ 646.077996] ? __pfx___do_sys_io_uring_register+0x10/0x10 [ 646.078386] ? __pfx_ksys_write+0x10/0x10 [ 646.078683] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 646.079058] do_syscall_64+0x3f/0x90 [ 646.079341] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 646.079716] RIP: 0033:0x7fe674943b19 [ 646.079973] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 646.081211] RSP: 002b:00007fe671eb9188 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 646.081736] RAX: ffffffffffffffda RBX: 00007fe674a56f60 RCX: 00007fe674943b19 [ 646.082228] RDX: 00000000200001c0 RSI: 0000000000000000 RDI: 0000000000000004 [ 646.082836] RBP: 00007fe671eb91d0 R08: 0000000000000000 R09: 0000000000000000 [ 646.083462] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001 [ 646.084113] R13: 00007ffc8e25421f R14: 00007fe671eb9300 R15: 0000000000022000 [ 646.084620] [ 646.097973] FAULT_INJECTION: forcing a failure. [ 646.097973] name failslab, interval 1, probability 0, space 0, times 0 [ 646.099491] CPU: 1 PID: 6353 Comm: syz-executor.1 Not tainted 6.4.0-next-20230630 #1 [ 646.100518] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 646.101603] Call Trace: [ 646.101958] [ 646.102279] dump_stack_lvl+0xc1/0xf0 [ 646.102824] should_fail_ex+0x4b4/0x5b0 [ 646.103375] ? io_rsrc_data_alloc+0x97/0x4a0 [ 646.103984] should_failslab+0x9/0x20 [ 646.104511] __kmem_cache_alloc_node+0x66/0x320 [ 646.105154] ? io_rsrc_data_alloc+0x97/0x4a0 [ 646.105780] ? io_rsrc_data_alloc+0x97/0x4a0 [ 646.106402] __kmalloc+0x4a/0x160 [ 646.106890] io_rsrc_data_alloc+0x97/0x4a0 [ 646.107490] io_sqe_buffers_register+0x102/0x870 [ 646.108147] ? __do_sys_io_uring_register+0x199/0x2210 [ 646.108869] ? __pfx_io_sqe_buffers_register+0x10/0x10 [ 646.109595] ? __fget_files+0x267/0x480 [ 646.110177] __do_sys_io_uring_register+0xfc3/0x2210 [ 646.110875] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 646.111673] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 646.112479] ? fput+0x2f/0x1a0 [ 646.112945] ? __pfx___do_sys_io_uring_register+0x10/0x10 [ 646.113701] ? ksys_write+0x19e/0x250 [ 646.114269] ? __pfx_ksys_write+0x10/0x10 [ 646.114887] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 646.115620] do_syscall_64+0x3f/0x90 [ 646.116174] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 646.116896] RIP: 0033:0x7fd3f7162b19 [ 646.117442] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 646.119831] RSP: 002b:00007fd3f46d8188 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 646.120836] RAX: ffffffffffffffda RBX: 00007fd3f7275f60 RCX: 00007fd3f7162b19 [ 646.121793] RDX: 00000000200001c0 RSI: 0000000000000000 RDI: 0000000000000004 [ 646.122735] RBP: 00007fd3f46d81d0 R08: 0000000000000000 R09: 0000000000000000 [ 646.123704] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001 [ 646.124647] R13: 00007ffee432bf2f R14: 00007fd3f46d8300 R15: 0000000000022000 [ 646.125630] 23:20:42 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) (fail_nth: 10) [ 646.200641] FAULT_INJECTION: forcing a failure. [ 646.200641] name failslab, interval 1, probability 0, space 0, times 0 [ 646.201752] CPU: 0 PID: 6362 Comm: syz-executor.6 Not tainted 6.4.0-next-20230630 #1 [ 646.202463] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 646.203230] Call Trace: [ 646.203466] [ 646.203679] dump_stack_lvl+0xc1/0xf0 [ 646.204038] should_fail_ex+0x4b4/0x5b0 [ 646.204404] ? kvmalloc_node+0xaa/0x200 [ 646.204771] should_failslab+0x9/0x20 [ 646.205119] __kmem_cache_alloc_node+0x66/0x320 [ 646.205562] ? __pfx_pin_user_pages+0x10/0x10 [ 646.205968] ? kvmalloc_node+0xaa/0x200 [ 646.206336] ? __pfx___up_read+0x10/0x10 [ 646.206710] ? kvmalloc_node+0xaa/0x200 [ 646.207079] __kmalloc_node+0x4d/0x160 [ 646.207433] kvmalloc_node+0xaa/0x200 [ 646.207787] io_sqe_buffer_register+0x20d/0x16b0 [ 646.208207] ? _copy_from_user+0x5c/0xf0 [ 646.208486] ? __pfx_io_sqe_buffer_register+0x10/0x10 [ 646.208867] ? kasan_set_track+0x25/0x30 [ 646.209171] ? __kasan_kmalloc+0x7f/0x90 [ 646.209518] io_sqe_buffers_register+0x2b2/0x870 [ 646.209850] ? __pfx_io_sqe_buffers_register+0x10/0x10 [ 646.210230] __do_sys_io_uring_register+0xfc3/0x2210 [ 646.210577] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 646.210975] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 646.211382] ? fput+0x2f/0x1a0 [ 646.211614] ? __pfx___do_sys_io_uring_register+0x10/0x10 [ 646.212042] ? __pfx_ksys_write+0x10/0x10 [ 646.212357] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 646.212757] do_syscall_64+0x3f/0x90 [ 646.213081] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 646.213120] RIP: 0033:0x7fc6cb383b19 [ 646.213136] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 23:20:42 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) (fail_nth: 11) 23:20:42 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) signalfd(0xffffffffffffffff, &(0x7f00000011c0), 0x8) dup(0xffffffffffffffff) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = epoll_create1(0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, &(0x7f0000000000)) [ 646.213154] RSP: 002b:00007fc6c88f9188 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 646.213175] RAX: ffffffffffffffda RBX: 00007fc6cb496f60 RCX: 00007fc6cb383b19 [ 646.213203] RDX: 00000000200001c0 RSI: 0000000000000000 RDI: 0000000000000004 [ 646.213215] RBP: 00007fc6c88f91d0 R08: 0000000000000000 R09: 0000000000000000 [ 646.213227] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000002 [ 646.213240] R13: 00007ffe33bf0c7f R14: 00007fc6c88f9300 R15: 0000000000022000 [ 646.213269] [ 646.302965] FAULT_INJECTION: forcing a failure. [ 646.302965] name failslab, interval 1, probability 0, space 0, times 0 [ 646.303012] CPU: 0 PID: 6368 Comm: syz-executor.2 Not tainted 6.4.0-next-20230630 #1 [ 646.303053] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 646.303070] Call Trace: [ 646.303079] [ 646.303090] dump_stack_lvl+0xc1/0xf0 [ 646.303146] should_fail_ex+0x4b4/0x5b0 [ 646.303186] ? kvmalloc_node+0xaa/0x200 [ 646.303241] should_failslab+0x9/0x20 [ 646.303275] __kmem_cache_alloc_node+0x66/0x320 [ 646.303317] ? do_syscall_64+0x3f/0x90 [ 646.303364] ? kvmalloc_node+0xaa/0x200 23:20:42 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) (fail_nth: 12) [ 646.303420] ? kvmalloc_node+0xaa/0x200 [ 646.303470] __kmalloc_node+0x4d/0x160 [ 646.303508] kvmalloc_node+0xaa/0x200 [ 646.303562] io_pin_pages+0x70/0x290 [ 646.303607] io_sqe_buffer_register+0x151/0x16b0 23:20:42 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) (fail_nth: 4) [ 646.303667] ? _copy_from_user+0x5c/0xf0 [ 646.303705] ? io_copy_iov+0xdf/0x1c0 [ 646.303742] ? __pfx_io_sqe_buffer_register+0x10/0x10 [ 646.303786] ? kasan_set_track+0x25/0x30 [ 646.303830] ? __kasan_kmalloc+0x7f/0x90 [ 646.303885] io_sqe_buffers_register+0x2b2/0x870 [ 646.303941] ? __pfx_io_sqe_buffers_register+0x10/0x10 [ 646.304012] __do_sys_io_uring_register+0xfc3/0x2210 [ 646.304060] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 646.304110] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 23:20:42 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) (fail_nth: 11) 23:20:42 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0), 0x0) fork() [ 646.304159] ? fput+0x2f/0x1a0 [ 646.304201] ? __pfx___do_sys_io_uring_register+0x10/0x10 [ 646.304244] ? __pfx_ksys_write+0x10/0x10 [ 646.304283] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 646.304335] do_syscall_64+0x3f/0x90 [ 646.304383] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 646.304439] RIP: 0033:0x7fe674943b19 [ 646.304462] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 646.304494] RSP: 002b:00007fe671eb9188 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 646.304527] RAX: ffffffffffffffda RBX: 00007fe674a56f60 RCX: 00007fe674943b19 [ 646.304550] RDX: 00000000200001c0 RSI: 0000000000000000 RDI: 0000000000000004 [ 646.304571] RBP: 00007fe671eb91d0 R08: 0000000000000000 R09: 0000000000000000 [ 646.304591] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000002 [ 646.304611] R13: 00007ffc8e25421f R14: 00007fe671eb9300 R15: 0000000000022000 [ 646.304659] [ 646.483689] FAULT_INJECTION: forcing a failure. [ 646.483689] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 646.483740] CPU: 0 PID: 6376 Comm: syz-executor.5 Not tainted 6.4.0-next-20230630 #1 [ 646.483777] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 646.483795] Call Trace: [ 646.483805] [ 646.483817] dump_stack_lvl+0xc1/0xf0 [ 646.483873] should_fail_ex+0x4b4/0x5b0 [ 646.483916] __should_fail_alloc_page+0xe0/0x110 [ 646.483963] prepare_alloc_pages+0x178/0x500 [ 646.484014] ? perf_trace_preemptirq_template+0x252/0x420 [ 646.484067] __alloc_pages+0x149/0x480 [ 646.484113] ? __pfx___alloc_pages+0x10/0x10 [ 646.484169] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 646.484209] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 646.484247] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 646.496126] vma_alloc_folio+0xe2/0x480 [ 646.496173] __handle_mm_fault+0xd6c/0x2980 [ 646.496212] ? __pfx___handle_mm_fault+0x10/0x10 [ 646.496265] ? _raw_spin_unlock+0x1e/0x40 [ 646.496300] ? follow_page_mask+0x230/0x1970 [ 646.496351] handle_mm_fault+0x1af/0xba0 [ 646.496395] __get_user_pages+0xb8f/0x11e0 [ 646.496450] ? __pfx___get_user_pages+0x10/0x10 [ 646.496502] ? io_sqe_buffers_register+0x2b2/0x870 23:20:42 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) fork() (fail_nth: 3) [ 646.496542] ? __do_sys_io_uring_register+0xfc3/0x2210 [ 646.496579] ? do_syscall_64+0x3f/0x90 [ 646.496625] ? lock_is_held_type+0x9f/0x120 [ 646.496672] __gup_longterm_locked+0x3d9/0x2760 [ 646.496726] ? lock_acquire+0x19a/0x4c0 [ 646.496762] ? io_pin_pages+0xc9/0x290 [ 646.496802] ? __pfx___gup_longterm_locked+0x10/0x10 [ 646.496845] ? __pfx_lock_acquire+0x10/0x10 [ 646.496881] ? mark_held_locks+0x9e/0xe0 [ 646.496923] ? lock_is_held_type+0x9f/0x120 [ 646.496975] pin_user_pages+0x141/0x160 [ 646.497016] ? __pfx_pin_user_pages+0x10/0x10 [ 646.497054] ? __kasan_kmalloc+0x7f/0x90 [ 646.497118] io_pin_pages+0xe6/0x290 [ 646.497159] io_sqe_buffer_register+0x151/0x16b0 [ 646.497228] ? _copy_from_user+0x5c/0xf0 [ 646.497265] ? io_copy_iov+0xdf/0x1c0 [ 646.497300] ? __pfx_io_sqe_buffer_register+0x10/0x10 [ 646.497341] ? kasan_set_track+0x25/0x30 [ 646.497382] ? __kasan_kmalloc+0x7f/0x90 [ 646.497435] io_sqe_buffers_register+0x2b2/0x870 [ 646.497489] ? __pfx_io_sqe_buffers_register+0x10/0x10 [ 646.497557] __do_sys_io_uring_register+0xfc3/0x2210 [ 646.497601] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 646.497646] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 646.497693] ? fput+0x2f/0x1a0 [ 646.497731] ? __pfx___do_sys_io_uring_register+0x10/0x10 [ 646.497772] ? __pfx_ksys_write+0x10/0x10 [ 646.497810] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 646.497857] do_syscall_64+0x3f/0x90 [ 646.497903] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 646.497955] RIP: 0033:0x7f33ff157b19 [ 646.497977] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 646.498007] RSP: 002b:00007f33fc6cd188 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 646.498038] RAX: ffffffffffffffda RBX: 00007f33ff26af60 RCX: 00007f33ff157b19 [ 646.498059] RDX: 00000000200001c0 RSI: 0000000000000000 RDI: 0000000000000004 [ 646.498079] RBP: 00007f33fc6cd1d0 R08: 0000000000000000 R09: 0000000000000000 [ 646.498098] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000002 [ 646.498118] R13: 00007ffe2fb64dcf R14: 00007f33fc6cd300 R15: 0000000000022000 [ 646.498165] [ 646.621961] FAULT_INJECTION: forcing a failure. [ 646.621961] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 646.622006] CPU: 0 PID: 6386 Comm: syz-executor.7 Not tainted 6.4.0-next-20230630 #1 [ 646.622039] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 646.622056] Call Trace: [ 646.622064] [ 646.622074] dump_stack_lvl+0xc1/0xf0 [ 646.622127] should_fail_ex+0x4b4/0x5b0 [ 646.622166] __should_fail_alloc_page+0xe0/0x110 [ 646.622224] prepare_alloc_pages+0x178/0x500 [ 646.622276] __alloc_pages+0x149/0x480 [ 646.622317] ? __pfx_lock_release+0x10/0x10 [ 646.622356] ? __pfx___alloc_pages+0x10/0x10 [ 646.622414] ? kmem_cache_alloc_node+0x347/0x3b0 [ 646.622462] copy_process+0x456/0x7320 [ 646.622514] ? __pfx_perf_tp_event+0x10/0x10 [ 646.622554] ? lock_release+0x1e3/0x680 [ 646.622600] ? __pfx_copy_process+0x10/0x10 [ 646.622648] ? find_held_lock+0x2c/0x110 [ 646.622697] ? ksys_write+0x122/0x250 [ 646.622734] ? ksys_write+0x20f/0x250 [ 646.622764] ? lock_release+0x1e3/0x680 [ 646.622809] kernel_clone+0xeb/0x7d0 [ 646.622861] ? __pfx_kernel_clone+0x10/0x10 [ 646.622916] ? perf_trace_run_bpf_submit+0xf3/0x190 [ 646.622953] ? perf_trace_run_bpf_submit+0xf3/0x190 [ 646.623003] __do_sys_fork+0x80/0xc0 [ 646.623052] ? __pfx___do_sys_fork+0x10/0x10 [ 646.623099] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 646.623163] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 646.623202] ? syscall_enter_from_user_mode+0x21/0x50 [ 646.623247] ? syscall_enter_from_user_mode+0x21/0x50 [ 646.623293] do_syscall_64+0x3f/0x90 [ 646.623339] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 646.623391] RIP: 0033:0x7f2ec8a71b19 [ 646.623414] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 646.623443] RSP: 002b:00007f2ec5fe7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 646.623474] RAX: ffffffffffffffda RBX: 00007f2ec8b84f60 RCX: 00007f2ec8a71b19 [ 646.623495] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 646.623514] RBP: 00007f2ec5fe71d0 R08: 0000000000000000 R09: 0000000000000000 [ 646.623533] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 646.623552] R13: 00007ffff806eeff R14: 00007f2ec5fe7300 R15: 0000000000022000 [ 646.623595] 23:20:57 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) (fail_nth: 12) 23:20:57 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) (fail_nth: 1) 23:20:57 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) fork() (fail_nth: 4) 23:20:57 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) (fail_nth: 13) 23:20:57 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0), 0x0) fork() 23:20:57 executing program 4: signalfd(0xffffffffffffffff, &(0x7f00000011c0), 0x8) dup(0xffffffffffffffff) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = epoll_create1(0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, &(0x7f0000000000)) 23:20:57 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) (fail_nth: 14) 23:20:57 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) (fail_nth: 5) [ 662.008059] FAULT_INJECTION: forcing a failure. [ 662.008059] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 662.009634] CPU: 1 PID: 6398 Comm: syz-executor.2 Not tainted 6.4.0-next-20230630 #1 [ 662.010604] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 662.011605] Call Trace: [ 662.011941] [ 662.012235] dump_stack_lvl+0xc1/0xf0 [ 662.012745] should_fail_ex+0x4b4/0x5b0 [ 662.013267] __should_fail_alloc_page+0xe0/0x110 [ 662.013891] prepare_alloc_pages+0x178/0x500 [ 662.014463] ? __pfx___lock_acquire+0x10/0x10 [ 662.015036] __alloc_pages+0x149/0x480 [ 662.015563] ? __pfx___alloc_pages+0x10/0x10 [ 662.016146] ? __pfx_lock_acquire+0x10/0x10 [ 662.016707] ? mt_find+0x2a7/0x8b0 [ 662.016953] FAULT_INJECTION: forcing a failure. [ 662.016953] name failslab, interval 1, probability 0, space 0, times 0 [ 662.017145] ? lock_release+0x1e3/0x680 [ 662.018617] vma_alloc_folio+0xe2/0x480 [ 662.019143] __handle_mm_fault+0xd6c/0x2980 [ 662.019701] ? __pfx___handle_mm_fault+0x10/0x10 [ 662.020322] ? _raw_spin_unlock+0x1e/0x40 [ 662.020853] ? follow_page_mask+0x230/0x1970 [ 662.021455] handle_mm_fault+0x1af/0xba0 [ 662.021979] __get_user_pages+0xb8f/0x11e0 [ 662.022549] ? __pfx___get_user_pages+0x10/0x10 [ 662.023155] ? io_sqe_buffers_register+0x2b2/0x870 [ 662.023800] ? __do_sys_io_uring_register+0xfc3/0x2210 [ 662.024455] ? do_syscall_64+0x3f/0x90 [ 662.024970] ? lock_is_held_type+0x9f/0x120 [ 662.025537] __gup_longterm_locked+0x3d9/0x2760 [ 662.026171] ? lock_acquire+0x19a/0x4c0 [ 662.026718] ? io_pin_pages+0xc9/0x290 [ 662.027247] ? __pfx___gup_longterm_locked+0x10/0x10 [ 662.027890] ? __pfx_lock_acquire+0x10/0x10 [ 662.028456] ? mark_held_locks+0x9e/0xe0 [ 662.028981] ? lock_is_held_type+0x9f/0x120 [ 662.029581] pin_user_pages+0x141/0x160 [ 662.030098] ? __pfx_pin_user_pages+0x10/0x10 [ 662.030691] ? __kasan_kmalloc+0x7f/0x90 [ 662.031230] io_pin_pages+0xe6/0x290 [ 662.031738] io_sqe_buffer_register+0x151/0x16b0 [ 662.032356] ? _copy_from_user+0x5c/0xf0 [ 662.032884] ? io_copy_iov+0xdf/0x1c0 [ 662.033374] ? __pfx_io_sqe_buffer_register+0x10/0x10 [ 662.034046] ? kasan_set_track+0x25/0x30 [ 662.034571] ? __kasan_kmalloc+0x7f/0x90 [ 662.035120] io_sqe_buffers_register+0x2b2/0x870 [ 662.035734] ? __pfx_io_sqe_buffers_register+0x10/0x10 [ 662.036444] __do_sys_io_uring_register+0xfc3/0x2210 [ 662.037083] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 662.037855] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 662.038590] ? fput+0x2f/0x1a0 [ 662.039022] ? __pfx___do_sys_io_uring_register+0x10/0x10 [ 662.039728] ? ksys_write+0x19e/0x250 [ 662.040229] ? __pfx_ksys_write+0x10/0x10 [ 662.040758] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 662.041458] do_syscall_64+0x3f/0x90 [ 662.041949] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 662.042631] RIP: 0033:0x7fe674943b19 [ 662.043099] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 662.045308] RSP: 002b:00007fe671eb9188 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 662.046239] RAX: ffffffffffffffda RBX: 00007fe674a56f60 RCX: 00007fe674943b19 [ 662.047130] RDX: 00000000200001c0 RSI: 0000000000000000 RDI: 0000000000000004 [ 662.048014] RBP: 00007fe671eb91d0 R08: 0000000000000000 R09: 0000000000000000 [ 662.048896] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000002 [ 662.049781] R13: 00007ffc8e25421f R14: 00007fe671eb9300 R15: 0000000000022000 [ 662.050697] [ 662.051000] CPU: 0 PID: 6403 Comm: syz-executor.1 Not tainted 6.4.0-next-20230630 #1 [ 662.051668] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 662.052346] Call Trace: [ 662.052567] [ 662.052772] dump_stack_lvl+0xc1/0xf0 [ 662.053128] should_fail_ex+0x4b4/0x5b0 [ 662.053487] ? io_rsrc_data_alloc+0xe5/0x4a0 [ 662.053874] should_failslab+0x9/0x20 [ 662.054192] __kmem_cache_alloc_node+0x66/0x320 [ 662.054596] ? io_rsrc_data_alloc+0xe5/0x4a0 [ 662.054978] ? io_rsrc_data_alloc+0xe5/0x4a0 [ 662.055363] __kmalloc+0x4a/0x160 [ 662.055657] io_rsrc_data_alloc+0xe5/0x4a0 [ 662.056030] io_sqe_buffers_register+0x102/0x870 [ 662.056432] ? __do_sys_io_uring_register+0x199/0x2210 [ 662.056889] ? __pfx_io_sqe_buffers_register+0x10/0x10 [ 662.057321] ? __fget_files+0x267/0x480 [ 662.057703] __do_sys_io_uring_register+0xfc3/0x2210 [ 662.058117] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 662.058619] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 662.059089] ? fput+0x2f/0x1a0 [ 662.059383] ? __pfx___do_sys_io_uring_register+0x10/0x10 [ 662.059821] ? __pfx_ksys_write+0x10/0x10 [ 662.060185] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 662.060618] do_syscall_64+0x3f/0x90 [ 662.060947] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 662.061376] RIP: 0033:0x7fd3f7162b19 [ 662.061708] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 662.063095] RSP: 002b:00007fd3f46d8188 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 662.063723] RAX: ffffffffffffffda RBX: 00007fd3f7275f60 RCX: 00007fd3f7162b19 [ 662.064319] RDX: 00000000200001c0 RSI: 0000000000000000 RDI: 0000000000000004 [ 662.064899] RBP: 00007fd3f46d81d0 R08: 0000000000000000 R09: 0000000000000000 [ 662.065498] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001 [ 662.066085] R13: 00007ffee432bf2f R14: 00007fd3f46d8300 R15: 0000000000022000 [ 662.066691] [ 662.071599] FAULT_INJECTION: forcing a failure. [ 662.071599] name failslab, interval 1, probability 0, space 0, times 0 [ 662.072570] CPU: 0 PID: 6401 Comm: syz-executor.7 Not tainted 6.4.0-next-20230630 #1 [ 662.073212] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 662.073893] Call Trace: [ 662.074113] [ 662.074312] dump_stack_lvl+0xc1/0xf0 [ 662.074651] should_fail_ex+0x4b4/0x5b0 [ 662.074989] ? prepare_creds+0x2f/0x6f0 [ 662.075334] should_failslab+0x9/0x20 [ 662.075661] kmem_cache_alloc+0x62/0x370 [ 662.076007] ? get_random_u64+0x394/0x660 [ 662.076348] prepare_creds+0x2f/0x6f0 [ 662.076679] copy_creds+0x7a/0xbd0 [ 662.076980] copy_process+0xe2a/0x7320 [ 662.077329] ? __pfx_perf_tp_event+0x10/0x10 [ 662.077692] ? lock_release+0x1e3/0x680 [ 662.078041] ? __pfx_copy_process+0x10/0x10 [ 662.078398] ? find_held_lock+0x2c/0x110 [ 662.078760] ? ksys_write+0x122/0x250 [ 662.079072] ? ksys_write+0x20f/0x250 [ 662.079397] ? lock_release+0x1e3/0x680 [ 662.079729] kernel_clone+0xeb/0x7d0 [ 662.080060] ? __pfx_kernel_clone+0x10/0x10 [ 662.080416] ? perf_trace_run_bpf_submit+0xf3/0x190 [ 662.080834] ? perf_trace_run_bpf_submit+0xf3/0x190 [ 662.081244] __do_sys_fork+0x80/0xc0 [ 662.081582] ? __pfx___do_sys_fork+0x10/0x10 [ 662.081963] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 662.082439] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 662.082879] ? syscall_enter_from_user_mode+0x21/0x50 [ 662.083321] ? syscall_enter_from_user_mode+0x21/0x50 [ 662.083733] do_syscall_64+0x3f/0x90 [ 662.084051] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 662.084472] RIP: 0033:0x7f2ec8a71b19 [ 662.084787] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 662.086164] RSP: 002b:00007f2ec5fe7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 662.086789] RAX: ffffffffffffffda RBX: 00007f2ec8b84f60 RCX: 00007f2ec8a71b19 [ 662.087335] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 662.087922] RBP: 00007f2ec5fe71d0 R08: 0000000000000000 R09: 0000000000000000 [ 662.088498] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 662.089080] R13: 00007ffff806eeff R14: 00007f2ec5fe7300 R15: 0000000000022000 [ 662.089690] [ 662.091664] FAULT_INJECTION: forcing a failure. [ 662.091664] name failslab, interval 1, probability 0, space 0, times 0 [ 662.092634] CPU: 0 PID: 6402 Comm: syz-executor.5 Not tainted 6.4.0-next-20230630 #1 [ 662.093231] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 662.093869] Call Trace: [ 662.094078] [ 662.094269] dump_stack_lvl+0xc1/0xf0 [ 662.094595] should_fail_ex+0x4b4/0x5b0 [ 662.094915] ? kvmalloc_node+0xaa/0x200 [ 662.095254] should_failslab+0x9/0x20 [ 662.095559] __kmem_cache_alloc_node+0x66/0x320 [ 662.095951] ? __pfx_pin_user_pages+0x10/0x10 [ 662.096312] ? kvmalloc_node+0xaa/0x200 [ 662.096651] ? __pfx___up_read+0x10/0x10 [ 662.096979] ? kvmalloc_node+0xaa/0x200 [ 662.097324] __kmalloc_node+0x4d/0x160 [ 662.097641] kvmalloc_node+0xaa/0x200 [ 662.097973] io_sqe_buffer_register+0x20d/0x16b0 [ 662.098359] ? _copy_from_user+0x5c/0xf0 [ 662.098708] ? __pfx_io_sqe_buffer_register+0x10/0x10 [ 662.099119] ? kasan_set_track+0x25/0x30 [ 662.099470] ? __kasan_kmalloc+0x7f/0x90 [ 662.099803] io_sqe_buffers_register+0x2b2/0x870 [ 662.100211] ? __pfx_io_sqe_buffers_register+0x10/0x10 [ 662.100646] __do_sys_io_uring_register+0xfc3/0x2210 [ 662.101071] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 662.101546] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 662.102029] ? fput+0x2f/0x1a0 [ 662.102302] ? __pfx___do_sys_io_uring_register+0x10/0x10 [ 662.102758] ? __pfx_ksys_write+0x10/0x10 [ 662.103085] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 662.103529] do_syscall_64+0x3f/0x90 [ 662.103833] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 662.104268] RIP: 0033:0x7f33ff157b19 [ 662.104563] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 662.106001] RSP: 002b:00007f33fc6cd188 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 662.106584] RAX: ffffffffffffffda RBX: 00007f33ff26af60 RCX: 00007f33ff157b19 [ 662.107159] RDX: 00000000200001c0 RSI: 0000000000000000 RDI: 0000000000000004 [ 662.107734] RBP: 00007f33fc6cd1d0 R08: 0000000000000000 R09: 0000000000000000 [ 662.108307] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000002 [ 662.108879] R13: 00007ffe2fb64dcf R14: 00007f33fc6cd300 R15: 0000000000022000 [ 662.109475] [ 662.112699] FAULT_INJECTION: forcing a failure. [ 662.112699] name failslab, interval 1, probability 0, space 0, times 0 [ 662.114234] CPU: 1 PID: 6405 Comm: syz-executor.3 Not tainted 6.4.0-next-20230630 #1 [ 662.115220] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 662.116228] Call Trace: [ 662.116572] [ 662.116876] dump_stack_lvl+0xc1/0xf0 [ 662.117412] should_fail_ex+0x4b4/0x5b0 [ 662.117926] should_failslab+0x9/0x20 [ 662.118425] __kmem_cache_alloc_node+0x66/0x320 [ 662.119024] ? io_rsrc_data_alloc+0x5e/0x4a0 [ 662.119598] kmalloc_trace+0x26/0xc0 [ 662.120087] io_rsrc_data_alloc+0x5e/0x4a0 [ 662.120639] io_sqe_buffers_register+0x102/0x870 [ 662.121249] ? __do_sys_io_uring_register+0x199/0x2210 [ 662.121939] ? __pfx_io_sqe_buffers_register+0x10/0x10 [ 662.122611] ? __fget_files+0x267/0x480 [ 662.123141] __do_sys_io_uring_register+0xfc3/0x2210 [ 662.123791] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 662.124519] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 662.125259] ? fput+0x2f/0x1a0 [ 662.125696] ? __pfx___do_sys_io_uring_register+0x10/0x10 [ 662.126393] ? ksys_write+0x19e/0x250 [ 662.126874] ? __pfx_ksys_write+0x10/0x10 [ 662.127411] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 662.128071] do_syscall_64+0x3f/0x90 [ 662.128570] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 662.129225] RIP: 0033:0x7f9443ec5b19 [ 662.129710] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 662.131846] RSP: 002b:00007f944143b188 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 662.132778] RAX: ffffffffffffffda RBX: 00007f9443fd8f60 RCX: 00007f9443ec5b19 [ 662.133669] RDX: 00000000200001c0 RSI: 0000000000000000 RDI: 0000000000000004 [ 662.134549] RBP: 00007f944143b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 662.135442] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001 [ 662.136325] R13: 00007ffcfa8d7dff R14: 00007f944143b300 R15: 0000000000022000 [ 662.137224] 23:20:58 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) (fail_nth: 14) 23:20:58 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) fork() (fail_nth: 5) 23:20:58 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) (fail_nth: 15) 23:20:58 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) (fail_nth: 6) 23:20:58 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) (fail_nth: 15) 23:20:58 executing program 4: signalfd(0xffffffffffffffff, &(0x7f00000011c0), 0x8) dup(0xffffffffffffffff) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = epoll_create1(0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, &(0x7f0000000000)) [ 662.283950] FAULT_INJECTION: forcing a failure. [ 662.283950] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 662.285040] CPU: 0 PID: 6417 Comm: syz-executor.6 Not tainted 6.4.0-next-20230630 #1 [ 662.285581] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 662.286134] Call Trace: [ 662.286321] [ 662.286486] dump_stack_lvl+0xc1/0xf0 [ 662.286774] should_fail_ex+0x4b4/0x5b0 [ 662.287065] _copy_to_user+0x30/0xc0 [ 662.287339] simple_read_from_buffer+0xd0/0x170 [ 662.287670] proc_fail_nth_read+0x1a2/0x240 [ 662.287986] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 662.288331] ? security_file_permission+0xb5/0xe0 [ 662.288686] vfs_read+0x1de/0x8f0 [ 662.288934] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 662.289277] ? __pfx_vfs_read+0x10/0x10 [ 662.289596] ? __fget_files+0x267/0x480 [ 662.289902] ksys_read+0x122/0x250 [ 662.290155] ? __pfx_ksys_read+0x10/0x10 [ 662.290445] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 662.290818] do_syscall_64+0x3f/0x90 [ 662.291093] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 662.291467] RIP: 0033:0x7fc6cb33669c [ 662.291728] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 662.292938] RSP: 002b:00007fc6c88f9170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 662.293523] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fc6cb33669c [ 662.293550] RDX: 000000000000000f RSI: 00007fc6c88f91e0 RDI: 0000000000000005 [ 662.293560] RBP: 00007fc6c88f91d0 R08: 0000000000000000 R09: 0000000000000000 [ 662.293571] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000002 [ 662.293580] R13: 00007ffe33bf0c7f R14: 00007fc6c88f9300 R15: 0000000000022000 [ 662.293604] 23:20:58 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) (fail_nth: 2) [ 662.335123] FAULT_INJECTION: forcing a failure. [ 662.335123] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 662.335149] CPU: 0 PID: 6419 Comm: syz-executor.5 Not tainted 6.4.0-next-20230630 #1 [ 662.335166] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 662.335179] Call Trace: [ 662.335184] [ 662.335190] dump_stack_lvl+0xc1/0xf0 [ 662.335219] should_fail_ex+0x4b4/0x5b0 [ 662.335242] _copy_to_user+0x30/0xc0 [ 662.335261] simple_read_from_buffer+0xd0/0x170 [ 662.335282] proc_fail_nth_read+0x1a2/0x240 [ 662.335305] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 662.335325] ? security_file_permission+0xb5/0xe0 [ 662.335356] vfs_read+0x1de/0x8f0 [ 662.335372] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 662.335392] ? __pfx_vfs_read+0x10/0x10 [ 662.335412] ? __fget_files+0x267/0x480 [ 662.335446] ksys_read+0x122/0x250 [ 662.335461] ? __pfx_ksys_read+0x10/0x10 [ 662.335480] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 662.335506] do_syscall_64+0x3f/0x90 [ 662.335531] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 662.335558] RIP: 0033:0x7f33ff10a69c [ 662.335570] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 662.335585] RSP: 002b:00007f33fc6cd170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 662.335602] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f33ff10a69c [ 662.335612] RDX: 000000000000000f RSI: 00007f33fc6cd1e0 RDI: 0000000000000005 [ 662.335623] RBP: 00007f33fc6cd1d0 R08: 0000000000000000 R09: 0000000000000000 [ 662.335633] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000002 [ 662.335643] R13: 00007ffe2fb64dcf R14: 00007f33fc6cd300 R15: 0000000000022000 [ 662.335666] 23:21:10 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) (fail_nth: 7) 23:21:10 executing program 4: signalfd(0xffffffffffffffff, 0x0, 0x0) dup(0xffffffffffffffff) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = epoll_create1(0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, &(0x7f0000000000)) 23:21:10 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:21:10 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) (fail_nth: 13) 23:21:10 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) fork() (fail_nth: 6) 23:21:10 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:21:10 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) (fail_nth: 3) 23:21:10 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0), 0x0) fork() [ 674.659927] FAULT_INJECTION: forcing a failure. [ 674.659927] name failslab, interval 1, probability 0, space 0, times 0 [ 674.660713] CPU: 1 PID: 6437 Comm: syz-executor.7 Not tainted 6.4.0-next-20230630 #1 [ 674.661239] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 674.661757] Call Trace: [ 674.661934] [ 674.662088] dump_stack_lvl+0xc1/0xf0 [ 674.662377] should_fail_ex+0x4b4/0x5b0 [ 674.662643] ? security_prepare_creds+0x116/0x190 [ 674.662986] should_failslab+0x9/0x20 [ 674.663241] __kmem_cache_alloc_node+0x66/0x320 [ 674.663585] ? security_prepare_creds+0x116/0x190 [ 674.663912] ? security_prepare_creds+0x116/0x190 [ 674.664259] __kmalloc+0x4a/0x160 [ 674.664501] security_prepare_creds+0x116/0x190 [ 674.664836] prepare_creds+0x509/0x6f0 [ 674.665098] copy_creds+0x7a/0xbd0 [ 674.665370] copy_process+0xe2a/0x7320 [ 674.665649] ? __pfx_perf_tp_event+0x10/0x10 [ 674.665960] ? lock_release+0x1e3/0x680 [ 674.666230] ? __pfx_copy_process+0x10/0x10 [ 674.666544] ? find_held_lock+0x2c/0x110 [ 674.666818] ? ksys_write+0x122/0x250 [ 674.667092] ? ksys_write+0x20f/0x250 [ 674.667354] ? lock_release+0x1e3/0x680 [ 674.667642] kernel_clone+0xeb/0x7d0 [ 674.667899] ? __pfx_kernel_clone+0x10/0x10 [ 674.668205] ? perf_trace_run_bpf_submit+0xf3/0x190 [ 674.668534] ? perf_trace_run_bpf_submit+0xf3/0x190 [ 674.668883] __do_sys_fork+0x80/0xc0 [ 674.669139] ? __pfx___do_sys_fork+0x10/0x10 [ 674.669463] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 674.669854] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 674.670216] ? syscall_enter_from_user_mode+0x21/0x50 [ 674.670560] ? syscall_enter_from_user_mode+0x21/0x50 [ 674.670915] do_syscall_64+0x3f/0x90 [ 674.671169] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 674.671542] RIP: 0033:0x7f2ec8a71b19 [ 674.671785] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 674.673022] RSP: 002b:00007f2ec5fe7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 674.673503] RAX: ffffffffffffffda RBX: 00007f2ec8b84f60 RCX: 00007f2ec8a71b19 [ 674.673992] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 674.674468] RBP: 00007f2ec5fe71d0 R08: 0000000000000000 R09: 0000000000000000 [ 674.674943] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 674.675401] R13: 00007ffff806eeff R14: 00007f2ec5fe7300 R15: 0000000000022000 [ 674.675889] [ 674.684328] FAULT_INJECTION: forcing a failure. [ 674.684328] name failslab, interval 1, probability 0, space 0, times 0 [ 674.685106] CPU: 1 PID: 6443 Comm: syz-executor.3 Not tainted 6.4.0-next-20230630 #1 [ 674.685640] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 674.686176] Call Trace: [ 674.686368] [ 674.686527] dump_stack_lvl+0xc1/0xf0 [ 674.686802] should_fail_ex+0x4b4/0x5b0 [ 674.687085] ? io_rsrc_data_alloc+0x97/0x4a0 [ 674.687402] should_failslab+0x9/0x20 [ 674.687652] __kmem_cache_alloc_node+0x66/0x320 [ 674.687953] ? io_rsrc_data_alloc+0x97/0x4a0 [ 674.688247] ? io_rsrc_data_alloc+0x97/0x4a0 [ 674.688544] __kmalloc+0x4a/0x160 [ 674.688775] io_rsrc_data_alloc+0x97/0x4a0 [ 674.689054] io_sqe_buffers_register+0x102/0x870 [ 674.689373] ? __do_sys_io_uring_register+0x199/0x2210 [ 674.689746] ? __pfx_io_sqe_buffers_register+0x10/0x10 [ 674.690086] ? __fget_files+0x267/0x480 [ 674.690490] __do_sys_io_uring_register+0xfc3/0x2210 [ 674.690820] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 674.691195] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 674.691582] ? fput+0x2f/0x1a0 [ 674.691806] ? __pfx___do_sys_io_uring_register+0x10/0x10 [ 674.692150] ? ksys_write+0x19e/0x250 [ 674.692405] ? __pfx_ksys_write+0x10/0x10 [ 674.692676] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 674.693012] do_syscall_64+0x3f/0x90 [ 674.693267] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 674.693629] RIP: 0033:0x7f9443ec5b19 [ 674.693869] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 674.694961] RSP: 002b:00007f944143b188 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 674.695440] RAX: ffffffffffffffda RBX: 00007f9443fd8f60 RCX: 00007f9443ec5b19 [ 674.695882] RDX: 00000000200001c0 RSI: 0000000000000000 RDI: 0000000000000004 [ 674.696319] RBP: 00007f944143b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 674.696758] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001 [ 674.697193] R13: 00007ffcfa8d7dff R14: 00007f944143b300 R15: 0000000000022000 [ 674.697653] [ 674.707495] FAULT_INJECTION: forcing a failure. [ 674.707495] name failslab, interval 1, probability 0, space 0, times 0 [ 674.709015] CPU: 0 PID: 6444 Comm: syz-executor.1 Not tainted 6.4.0-next-20230630 #1 [ 674.710072] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 674.711081] Call Trace: [ 674.711413] [ 674.711709] dump_stack_lvl+0xc1/0xf0 [ 674.712228] should_fail_ex+0x4b4/0x5b0 [ 674.712750] ? io_sqe_buffers_register+0x185/0x870 [ 674.713378] should_failslab+0x9/0x20 [ 674.713880] __kmem_cache_alloc_node+0x66/0x320 [ 674.714479] ? io_sqe_buffers_register+0x185/0x870 [ 674.715096] ? io_rsrc_data_alloc+0x307/0x4a0 [ 674.715678] ? io_sqe_buffers_register+0x185/0x870 [ 674.716304] __kmalloc+0x4a/0x160 [ 674.716764] io_sqe_buffers_register+0x185/0x870 23:21:10 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{0x0}], 0x1) fork() [ 674.717377] ? __do_sys_io_uring_register+0x199/0x2210 [ 674.718214] ? __pfx_io_sqe_buffers_register+0x10/0x10 [ 674.718905] __do_sys_io_uring_register+0xfc3/0x2210 [ 674.719575] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 674.720320] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 674.721081] ? fput+0x2f/0x1a0 [ 674.721518] ? __pfx___do_sys_io_uring_register+0x10/0x10 [ 674.722230] ? __pfx_ksys_write+0x10/0x10 [ 674.722765] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 674.723442] do_syscall_64+0x3f/0x90 [ 674.723942] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 674.724612] RIP: 0033:0x7fd3f7162b19 [ 674.725079] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 674.727406] RSP: 002b:00007fd3f46d8188 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 674.728543] RAX: ffffffffffffffda RBX: 00007fd3f7275f60 RCX: 00007fd3f7162b19 [ 674.729682] RDX: 00000000200001c0 RSI: 0000000000000000 RDI: 0000000000000004 [ 674.730672] RBP: 00007fd3f46d81d0 R08: 0000000000000000 R09: 0000000000000000 [ 674.731496] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001 [ 674.732343] R13: 00007ffee432bf2f R14: 00007fd3f46d8300 R15: 0000000000022000 [ 674.733225] 23:21:10 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x2, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) [ 674.746251] FAULT_INJECTION: forcing a failure. [ 674.746251] name failslab, interval 1, probability 0, space 0, times 0 [ 674.747736] CPU: 0 PID: 6446 Comm: syz-executor.2 Not tainted 6.4.0-next-20230630 #1 [ 674.748639] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 674.749637] Call Trace: [ 674.749950] [ 674.750243] dump_stack_lvl+0xc1/0xf0 [ 674.750730] should_fail_ex+0x4b4/0x5b0 [ 674.751246] ? kvmalloc_node+0xaa/0x200 [ 674.751746] should_failslab+0x9/0x20 [ 674.752237] __kmem_cache_alloc_node+0x66/0x320 [ 674.752809] ? __pfx_pin_user_pages+0x10/0x10 [ 674.753384] ? kvmalloc_node+0xaa/0x200 [ 674.753905] ? __pfx___up_read+0x10/0x10 [ 674.754439] ? kvmalloc_node+0xaa/0x200 [ 674.754938] __kmalloc_node+0x4d/0x160 [ 674.755444] kvmalloc_node+0xaa/0x200 [ 674.755945] io_sqe_buffer_register+0x20d/0x16b0 [ 674.756571] ? _copy_from_user+0x5c/0xf0 [ 674.757090] ? __pfx_io_sqe_buffer_register+0x10/0x10 [ 674.757823] ? kasan_set_track+0x25/0x30 [ 674.758348] ? __kasan_kmalloc+0x7f/0x90 [ 674.758903] io_sqe_buffers_register+0x2b2/0x870 [ 674.759521] ? __pfx_io_sqe_buffers_register+0x10/0x10 [ 674.760255] __do_sys_io_uring_register+0xfc3/0x2210 [ 674.760897] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 674.761696] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 674.762432] ? fput+0x2f/0x1a0 [ 674.762892] ? __pfx___do_sys_io_uring_register+0x10/0x10 [ 674.763575] ? __pfx_ksys_write+0x10/0x10 [ 674.764117] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 674.764847] do_syscall_64+0x3f/0x90 [ 674.765341] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 674.766042] RIP: 0033:0x7fe674943b19 [ 674.766518] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 674.768787] RSP: 002b:00007fe671eb9188 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 674.769716] RAX: ffffffffffffffda RBX: 00007fe674a56f60 RCX: 00007fe674943b19 [ 674.770654] RDX: 00000000200001c0 RSI: 0000000000000000 RDI: 0000000000000004 [ 674.771585] RBP: 00007fe671eb91d0 R08: 0000000000000000 R09: 0000000000000000 23:21:10 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) fork() (fail_nth: 7) [ 674.772517] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000002 [ 674.773567] R13: 00007ffc8e25421f R14: 00007fe671eb9300 R15: 0000000000022000 [ 674.774534] 23:21:10 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x2, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:21:10 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) (fail_nth: 4) 23:21:10 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x3, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:21:10 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{0x0}], 0x1) fork() 23:21:10 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x4, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:21:22 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x5, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:21:22 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{0x0}], 0x1) fork() 23:21:22 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) (fail_nth: 14) 23:21:22 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x3, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:21:22 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) (fail_nth: 8) 23:21:22 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) fork() (fail_nth: 8) 23:21:22 executing program 4: signalfd(0xffffffffffffffff, 0x0, 0x0) dup(0xffffffffffffffff) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = epoll_create1(0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, &(0x7f0000000000)) 23:21:22 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) (fail_nth: 5) [ 686.466260] FAULT_INJECTION: forcing a failure. [ 686.466260] name failslab, interval 1, probability 0, space 0, times 0 [ 686.466997] CPU: 1 PID: 6482 Comm: syz-executor.7 Not tainted 6.4.0-next-20230630 #1 [ 686.467491] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 686.467999] Call Trace: [ 686.468168] [ 686.468328] dump_stack_lvl+0xc1/0xf0 [ 686.468604] should_fail_ex+0x4b4/0x5b0 [ 686.468880] ? dup_fd+0x8d/0xcf0 [ 686.469117] should_failslab+0x9/0x20 [ 686.469370] kmem_cache_alloc+0x62/0x370 [ 686.469648] dup_fd+0x8d/0xcf0 [ 686.469891] ? __pfx_audit_alloc+0x10/0x10 [ 686.470184] ? security_task_alloc+0xea/0x260 [ 686.470497] copy_process+0x1f7e/0x7320 [ 686.470773] ? __pfx_perf_tp_event+0x10/0x10 [ 686.471080] ? __pfx_copy_process+0x10/0x10 [ 686.471370] ? find_held_lock+0x2c/0x110 [ 686.471647] ? ksys_write+0x122/0x250 [ 686.471906] ? ksys_write+0x20f/0x250 [ 686.472160] ? lock_release+0x1e3/0x680 [ 686.472430] kernel_clone+0xeb/0x7d0 [ 686.472688] ? __pfx_kernel_clone+0x10/0x10 [ 686.472990] ? perf_trace_run_bpf_submit+0xf3/0x190 [ 686.473324] ? perf_trace_run_bpf_submit+0xf3/0x190 [ 686.473663] __do_sys_fork+0x80/0xc0 [ 686.473931] ? __pfx___do_sys_fork+0x10/0x10 [ 686.474241] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 686.474629] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 686.474972] ? syscall_enter_from_user_mode+0x21/0x50 [ 686.475319] ? syscall_enter_from_user_mode+0x21/0x50 [ 686.475658] do_syscall_64+0x3f/0x90 [ 686.475917] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 686.476261] RIP: 0033:0x7f2ec8a71b19 [ 686.476510] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 686.477620] RSP: 002b:00007f2ec5fe7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 686.478127] RAX: ffffffffffffffda RBX: 00007f2ec8b84f60 RCX: 00007f2ec8a71b19 [ 686.478578] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 686.479026] RBP: 00007f2ec5fe71d0 R08: 0000000000000000 R09: 0000000000000000 [ 686.479477] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 686.479921] R13: 00007ffff806eeff R14: 00007f2ec5fe7300 R15: 0000000000022000 [ 686.480379] [ 686.498685] FAULT_INJECTION: forcing a failure. [ 686.498685] name failslab, interval 1, probability 0, space 0, times 0 [ 686.499417] CPU: 1 PID: 6486 Comm: syz-executor.3 Not tainted 6.4.0-next-20230630 #1 [ 686.499896] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 686.500405] Call Trace: [ 686.500574] [ 686.500728] dump_stack_lvl+0xc1/0xf0 [ 686.501001] should_fail_ex+0x4b4/0x5b0 [ 686.501270] ? io_rsrc_data_alloc+0xe5/0x4a0 [ 686.501563] should_failslab+0x9/0x20 [ 686.501830] __kmem_cache_alloc_node+0x66/0x320 [ 686.502142] ? io_rsrc_data_alloc+0xe5/0x4a0 [ 686.502437] ? io_rsrc_data_alloc+0xe5/0x4a0 [ 686.502730] __kmalloc+0x4a/0x160 [ 686.502966] io_rsrc_data_alloc+0xe5/0x4a0 [ 686.503249] io_sqe_buffers_register+0x102/0x870 [ 686.503565] ? __do_sys_io_uring_register+0x199/0x2210 [ 686.503916] ? __pfx_io_sqe_buffers_register+0x10/0x10 [ 686.504265] ? __fget_files+0x267/0x480 [ 686.504549] __do_sys_io_uring_register+0xfc3/0x2210 [ 686.504879] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 686.505264] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 686.505654] ? fput+0x2f/0x1a0 [ 686.505898] ? __pfx___do_sys_io_uring_register+0x10/0x10 [ 686.506252] ? ksys_write+0x19e/0x250 [ 686.506513] ? __pfx_ksys_write+0x10/0x10 [ 686.506786] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 686.507132] do_syscall_64+0x3f/0x90 [ 686.507390] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 686.507736] RIP: 0033:0x7f9443ec5b19 [ 686.507979] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 686.509074] RSP: 002b:00007f944143b188 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 686.509561] RAX: ffffffffffffffda RBX: 00007f9443fd8f60 RCX: 00007f9443ec5b19 [ 686.510029] RDX: 00000000200001c0 RSI: 0000000000000000 RDI: 0000000000000004 [ 686.510477] RBP: 00007f944143b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 686.510921] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001 [ 686.511365] R13: 00007ffcfa8d7dff R14: 00007f944143b300 R15: 0000000000022000 [ 686.511833] 23:21:22 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) (fail_nth: 9) 23:21:22 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) fork() (fail_nth: 9) [ 686.609871] FAULT_INJECTION: forcing a failure. [ 686.609871] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 686.610736] CPU: 1 PID: 6502 Comm: syz-executor.1 Not tainted 6.4.0-next-20230630 #1 [ 686.611249] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 686.611766] Call Trace: [ 686.611935] [ 686.612088] dump_stack_lvl+0xc1/0xf0 [ 686.612360] should_fail_ex+0x4b4/0x5b0 [ 686.612632] _copy_from_user+0x30/0xf0 [ 686.612899] io_copy_iov+0xbf/0x1c0 [ 686.613150] ? __pfx_io_copy_iov+0x10/0x10 [ 686.613432] ? kasan_set_track+0x25/0x30 [ 686.613716] ? __kasan_kmalloc+0x7f/0x90 [ 686.613997] io_sqe_buffers_register+0x202/0x870 [ 686.614310] ? __do_sys_io_uring_register+0x199/0x2210 [ 686.614657] ? __pfx_io_sqe_buffers_register+0x10/0x10 [ 686.615015] __do_sys_io_uring_register+0xfc3/0x2210 [ 686.615349] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 686.615738] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 686.616122] ? fput+0x2f/0x1a0 [ 686.616347] ? __pfx___do_sys_io_uring_register+0x10/0x10 [ 686.616703] ? ksys_write+0x19e/0x250 [ 686.616953] ? __pfx_ksys_write+0x10/0x10 [ 686.617239] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 686.617589] do_syscall_64+0x3f/0x90 [ 686.617859] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 686.618211] RIP: 0033:0x7fd3f7162b19 [ 686.618461] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 686.619582] RSP: 002b:00007fd3f46d8188 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 686.620074] RAX: ffffffffffffffda RBX: 00007fd3f7275f60 RCX: 00007fd3f7162b19 [ 686.620524] RDX: 00000000200001c0 RSI: 0000000000000000 RDI: 0000000000000004 [ 686.620977] RBP: 00007fd3f46d81d0 R08: 0000000000000000 R09: 0000000000000000 [ 686.621423] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001 [ 686.621883] R13: 00007ffee432bf2f R14: 00007fd3f46d8300 R15: 0000000000022000 [ 686.622340] 23:21:34 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x6, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:21:34 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) (fail_nth: 15) 23:21:34 executing program 4: signalfd(0xffffffffffffffff, 0x0, 0x0) dup(0xffffffffffffffff) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = epoll_create1(0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, &(0x7f0000000000)) 23:21:34 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) (fail_nth: 10) 23:21:34 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x4, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:21:34 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) fork() (fail_nth: 10) 23:21:34 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) (fail_nth: 6) 23:21:34 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x4, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) [ 698.703436] FAULT_INJECTION: forcing a failure. [ 698.703436] name failslab, interval 1, probability 0, space 0, times 0 [ 698.704192] CPU: 1 PID: 6512 Comm: syz-executor.7 Not tainted 6.4.0-next-20230630 #1 [ 698.704665] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 698.705151] Call Trace: [ 698.705318] [ 698.705467] dump_stack_lvl+0xc1/0xf0 [ 698.705726] should_fail_ex+0x4b4/0x5b0 [ 698.705999] should_failslab+0x9/0x20 [ 698.706248] __kmem_cache_alloc_node+0x66/0x320 [ 698.706547] ? alloc_fdtable+0x84/0x280 [ 698.706805] ? do_raw_spin_lock+0x125/0x270 [ 698.707089] kmalloc_trace+0x26/0xc0 [ 698.707330] alloc_fdtable+0x84/0x280 [ 698.707578] dup_fd+0x751/0xcf0 [ 698.707803] ? security_task_alloc+0xea/0x260 [ 698.708103] copy_process+0x1f7e/0x7320 [ 698.708370] ? __pfx_perf_tp_event+0x10/0x10 [ 698.708659] ? __pfx_copy_process+0x10/0x10 [ 698.708938] ? find_held_lock+0x2c/0x110 [ 698.709209] ? ksys_write+0x122/0x250 [ 698.709459] ? ksys_write+0x20f/0x250 [ 698.709704] ? lock_release+0x1e3/0x680 [ 698.709973] kernel_clone+0xeb/0x7d0 [ 698.710225] ? __pfx_kernel_clone+0x10/0x10 [ 698.710509] ? perf_trace_run_bpf_submit+0xf3/0x190 [ 698.710822] ? perf_trace_run_bpf_submit+0xf3/0x190 [ 698.711146] __do_sys_fork+0x80/0xc0 [ 698.711396] ? __pfx___do_sys_fork+0x10/0x10 [ 698.711684] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 698.712069] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 698.712400] ? syscall_enter_from_user_mode+0x21/0x50 [ 698.712730] ? syscall_enter_from_user_mode+0x21/0x50 [ 698.713061] do_syscall_64+0x3f/0x90 [ 698.713314] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 698.713653] RIP: 0033:0x7f2ec8a71b19 [ 698.713898] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 698.714753] FAULT_INJECTION: forcing a failure. [ 698.714753] name failslab, interval 1, probability 0, space 0, times 0 [ 698.714974] RSP: 002b:00007f2ec5fe7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 698.716691] RAX: ffffffffffffffda RBX: 00007f2ec8b84f60 RCX: 00007f2ec8a71b19 [ 698.717121] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 698.717557] RBP: 00007f2ec5fe71d0 R08: 0000000000000000 R09: 0000000000000000 [ 698.717998] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 698.718435] R13: 00007ffff806eeff R14: 00007f2ec5fe7300 R15: 0000000000022000 [ 698.718878] [ 698.719031] CPU: 0 PID: 6513 Comm: syz-executor.1 Not tainted 6.4.0-next-20230630 #1 [ 698.719923] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 698.720838] Call Trace: [ 698.721144] [ 698.721411] dump_stack_lvl+0xc1/0xf0 [ 698.721895] should_fail_ex+0x4b4/0x5b0 [ 698.722370] ? kvmalloc_node+0xaa/0x200 [ 698.722857] should_failslab+0x9/0x20 [ 698.723308] __kmem_cache_alloc_node+0x66/0x320 [ 698.723863] ? do_syscall_64+0x3f/0x90 [ 698.724332] ? kvmalloc_node+0xaa/0x200 [ 698.724819] ? kvmalloc_node+0xaa/0x200 [ 698.725299] __kmalloc_node+0x4d/0x160 [ 698.725758] kvmalloc_node+0xaa/0x200 [ 698.726232] io_pin_pages+0x70/0x290 [ 698.726685] io_sqe_buffer_register+0x151/0x16b0 [ 698.727260] ? _copy_from_user+0x5c/0xf0 [ 698.727740] ? io_copy_iov+0xdf/0x1c0 [ 698.728196] ? __pfx_io_sqe_buffer_register+0x10/0x10 [ 698.728802] ? kasan_set_track+0x25/0x30 [ 698.729286] ? __kasan_kmalloc+0x7f/0x90 [ 698.729784] io_sqe_buffers_register+0x2b2/0x870 [ 698.730371] ? __pfx_io_sqe_buffers_register+0x10/0x10 [ 698.731001] __do_sys_io_uring_register+0xfc3/0x2210 [ 698.731590] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 698.732275] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 698.732948] ? fput+0x2f/0x1a0 [ 698.733347] ? __pfx___do_sys_io_uring_register+0x10/0x10 [ 698.733987] ? __pfx_ksys_write+0x10/0x10 [ 698.734472] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 698.735087] do_syscall_64+0x3f/0x90 [ 698.735539] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 698.736154] RIP: 0033:0x7fd3f7162b19 [ 698.736592] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 698.738635] RSP: 002b:00007fd3f46d8188 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 698.739511] RAX: ffffffffffffffda RBX: 00007fd3f7275f60 RCX: 00007fd3f7162b19 [ 698.740344] RDX: 00000000200001c0 RSI: 0000000000000000 RDI: 0000000000000004 [ 698.741188] RBP: 00007fd3f46d81d0 R08: 0000000000000000 R09: 0000000000000000 [ 698.742045] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000002 [ 698.742878] R13: 00007ffee432bf2f R14: 00007fd3f46d8300 R15: 0000000000022000 [ 698.743732] [ 698.765713] FAULT_INJECTION: forcing a failure. [ 698.765713] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 698.766582] CPU: 1 PID: 6524 Comm: syz-executor.2 Not tainted 6.4.0-next-20230630 #1 [ 698.767056] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 698.767552] Call Trace: [ 698.767723] [ 698.767870] dump_stack_lvl+0xc1/0xf0 [ 698.768130] should_fail_ex+0x4b4/0x5b0 [ 698.768391] _copy_to_user+0x30/0xc0 [ 698.768636] simple_read_from_buffer+0xd0/0x170 [ 698.768936] proc_fail_nth_read+0x1a2/0x240 [ 698.769218] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 698.769528] ? security_file_permission+0xb5/0xe0 [ 698.769863] vfs_read+0x1de/0x8f0 [ 698.770091] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 698.770398] ? __pfx_vfs_read+0x10/0x10 [ 698.770653] ? __fget_files+0x267/0x480 [ 698.770925] ksys_read+0x122/0x250 [ 698.771160] ? __pfx_ksys_read+0x10/0x10 [ 698.771425] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 698.771766] do_syscall_64+0x3f/0x90 [ 698.772016] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 698.772354] RIP: 0033:0x7fe6748f669c [ 698.772592] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 698.773675] RSP: 002b:00007fe671eb9170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 698.774150] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fe6748f669c [ 698.774585] RDX: 000000000000000f RSI: 00007fe671eb91e0 RDI: 0000000000000005 [ 698.775022] RBP: 00007fe671eb91d0 R08: 0000000000000000 R09: 0000000000000000 [ 698.775455] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000002 [ 698.775892] R13: 00007ffc8e25421f R14: 00007fe671eb9300 R15: 0000000000022000 [ 698.776342] 23:21:46 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) fork() (fail_nth: 1) 23:21:46 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) (fail_nth: 7) 23:21:46 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) (fail_nth: 11) 23:21:46 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:21:46 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) fork() (fail_nth: 11) 23:21:46 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x7, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:21:46 executing program 4: signalfd(0xffffffffffffffff, &(0x7f00000011c0), 0x8) dup(0xffffffffffffffff) clone3(0x0, 0x0) r0 = epoll_create1(0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, &(0x7f0000000000)) 23:21:46 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x5, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) [ 710.820808] FAULT_INJECTION: forcing a failure. [ 710.820808] name failslab, interval 1, probability 0, space 0, times 0 [ 710.821682] CPU: 0 PID: 6541 Comm: syz-executor.0 Not tainted 6.4.0-next-20230630 #1 [ 710.822219] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 710.822784] Call Trace: [ 710.822964] [ 710.823124] dump_stack_lvl+0xc1/0xf0 [ 710.823425] should_fail_ex+0x4b4/0x5b0 [ 710.823714] ? copy_process+0x3c2/0x7320 [ 710.824003] should_failslab+0x9/0x20 [ 710.824274] kmem_cache_alloc_node+0x65/0x3b0 [ 710.824598] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 710.824973] copy_process+0x3c2/0x7320 [ 710.825266] ? __pfx_perf_tp_event+0x10/0x10 [ 710.825585] ? lock_release+0x1e3/0x680 [ 710.825873] ? __pfx_copy_process+0x10/0x10 [ 710.826168] ? find_held_lock+0x2c/0x110 [ 710.826473] ? ksys_write+0x122/0x250 [ 710.826753] ? ksys_write+0x20f/0x250 [ 710.827028] ? lock_release+0x1e3/0x680 [ 710.827319] kernel_clone+0xeb/0x7d0 [ 710.827592] ? __pfx_kernel_clone+0x10/0x10 [ 710.827892] ? perf_trace_run_bpf_submit+0xf3/0x190 [ 710.828253] ? perf_trace_run_bpf_submit+0xf3/0x190 [ 710.828611] __do_sys_fork+0x80/0xc0 [ 710.828884] ? __pfx___do_sys_fork+0x10/0x10 [ 710.829185] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 710.829618] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 710.829993] ? syscall_enter_from_user_mode+0x21/0x50 [ 710.830356] ? syscall_enter_from_user_mode+0x21/0x50 [ 710.830736] do_syscall_64+0x3f/0x90 [ 710.831032] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 710.831430] RIP: 0033:0x7f1199da5b19 [ 710.831707] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 710.833027] RSP: 002b:00007f119731b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 710.833575] RAX: ffffffffffffffda RBX: 00007f1199eb8f60 RCX: 00007f1199da5b19 [ 710.834098] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 710.834619] RBP: 00007f119731b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 710.835122] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 710.835645] R13: 00007ffca84fd02f R14: 00007f119731b300 R15: 0000000000022000 [ 710.836172] [ 710.854581] FAULT_INJECTION: forcing a failure. [ 710.854581] name failslab, interval 1, probability 0, space 0, times 0 [ 710.855575] CPU: 0 PID: 6548 Comm: syz-executor.3 Not tainted 6.4.0-next-20230630 #1 [ 710.856106] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 710.856674] Call Trace: [ 710.856859] [ 710.857029] dump_stack_lvl+0xc1/0xf0 [ 710.857314] should_fail_ex+0x4b4/0x5b0 [ 710.857606] ? io_sqe_buffers_register+0x185/0x870 [ 710.857980] should_failslab+0x9/0x20 [ 710.858242] __kmem_cache_alloc_node+0x66/0x320 [ 710.858597] ? io_sqe_buffers_register+0x185/0x870 [ 710.858962] ? io_rsrc_data_alloc+0x307/0x4a0 [ 710.859300] ? io_sqe_buffers_register+0x185/0x870 [ 710.859665] __kmalloc+0x4a/0x160 [ 710.859937] io_sqe_buffers_register+0x185/0x870 [ 710.860290] ? __do_sys_io_uring_register+0x199/0x2210 [ 710.860685] ? __pfx_io_sqe_buffers_register+0x10/0x10 [ 710.861088] __do_sys_io_uring_register+0xfc3/0x2210 [ 710.861464] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 710.861851] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 710.862289] ? fput+0x2f/0x1a0 [ 710.862540] ? __pfx___do_sys_io_uring_register+0x10/0x10 [ 710.862946] ? __pfx_ksys_write+0x10/0x10 [ 710.863255] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 710.863650] do_syscall_64+0x3f/0x90 [ 710.863938] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 710.864336] RIP: 0033:0x7f9443ec5b19 [ 710.864613] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 710.865907] RSP: 002b:00007f944143b188 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 710.866453] RAX: ffffffffffffffda RBX: 00007f9443fd8f60 RCX: 00007f9443ec5b19 [ 710.866963] RDX: 00000000200001c0 RSI: 0000000000000000 RDI: 0000000000000004 [ 710.867484] RBP: 00007f944143b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 710.867992] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001 [ 710.868512] R13: 00007ffcfa8d7dff R14: 00007f944143b300 R15: 0000000000022000 [ 710.869042] 23:21:46 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) (fail_nth: 12) 23:21:46 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x8, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:21:46 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) fork() (fail_nth: 2) 23:21:46 executing program 4: signalfd(0xffffffffffffffff, &(0x7f00000011c0), 0x8) dup(0xffffffffffffffff) clone3(0x0, 0x0) r0 = epoll_create1(0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, &(0x7f0000000000)) 23:21:46 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x9, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:21:46 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x2, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:21:46 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) (fail_nth: 8) 23:21:47 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x6, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:21:47 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0xa, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:21:47 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x3, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) [ 711.038295] FAULT_INJECTION: forcing a failure. [ 711.038295] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 711.038338] CPU: 1 PID: 6558 Comm: syz-executor.1 Not tainted 6.4.0-next-20230630 #1 [ 711.038374] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 711.038389] Call Trace: [ 711.038397] [ 711.038408] dump_stack_lvl+0xc1/0xf0 [ 711.038458] should_fail_ex+0x4b4/0x5b0 [ 711.038496] __should_fail_alloc_page+0xe0/0x110 23:21:47 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) (fail_nth: 13) 23:21:47 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) fork() (fail_nth: 12) [ 711.038539] prepare_alloc_pages+0x178/0x500 [ 711.038581] ? __pfx___lock_acquire+0x10/0x10 [ 711.038623] __alloc_pages+0x149/0x480 [ 711.038665] ? __pfx___alloc_pages+0x10/0x10 [ 711.038719] ? __pfx_lock_acquire+0x10/0x10 [ 711.038752] ? mt_find+0x2a7/0x8b0 [ 711.038779] ? lock_release+0x1e3/0x680 [ 711.038822] vma_alloc_folio+0xe2/0x480 23:21:47 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) (fail_nth: 9) [ 711.038862] __handle_mm_fault+0xd6c/0x2980 [ 711.038899] ? __pfx___handle_mm_fault+0x10/0x10 [ 711.038948] ? _raw_spin_unlock+0x1e/0x40 [ 711.038980] ? follow_page_mask+0x230/0x1970 [ 711.039028] handle_mm_fault+0x1af/0xba0 [ 711.039068] __get_user_pages+0xb8f/0x11e0 [ 711.039125] ? __pfx___get_user_pages+0x10/0x10 [ 711.039173] ? io_sqe_buffers_register+0x2b2/0x870 [ 711.039209] ? __do_sys_io_uring_register+0xfc3/0x2210 [ 711.039244] ? do_syscall_64+0x3f/0x90 [ 711.039286] ? lock_is_held_type+0x9f/0x120 [ 711.039330] __gup_longterm_locked+0x3d9/0x2760 [ 711.039381] ? lock_acquire+0x19a/0x4c0 [ 711.039414] ? io_pin_pages+0xc9/0x290 [ 711.039451] ? __pfx___gup_longterm_locked+0x10/0x10 [ 711.039491] ? __pfx_lock_acquire+0x10/0x10 [ 711.039525] ? mark_held_locks+0x9e/0xe0 [ 711.039564] ? lock_is_held_type+0x9f/0x120 [ 711.039612] pin_user_pages+0x141/0x160 [ 711.039650] ? __pfx_pin_user_pages+0x10/0x10 [ 711.039686] ? __kasan_kmalloc+0x7f/0x90 [ 711.039747] io_pin_pages+0xe6/0x290 [ 711.039787] io_sqe_buffer_register+0x151/0x16b0 [ 711.039840] ? _copy_from_user+0x5c/0xf0 [ 711.039875] ? io_copy_iov+0xdf/0x1c0 [ 711.039907] ? __pfx_io_sqe_buffer_register+0x10/0x10 [ 711.039945] ? kasan_set_track+0x25/0x30 [ 711.039983] ? __kasan_kmalloc+0x7f/0x90 [ 711.040032] io_sqe_buffers_register+0x2b2/0x870 [ 711.040082] ? __pfx_io_sqe_buffers_register+0x10/0x10 [ 711.040146] __do_sys_io_uring_register+0xfc3/0x2210 [ 711.040187] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 23:21:47 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x4, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) [ 711.040230] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 711.040273] ? fput+0x2f/0x1a0 [ 711.040308] ? __pfx___do_sys_io_uring_register+0x10/0x10 [ 711.040342] ? ksys_write+0x19e/0x250 [ 711.040372] ? __pfx_ksys_write+0x10/0x10 [ 711.040407] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 711.040451] do_syscall_64+0x3f/0x90 [ 711.040494] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 711.040542] RIP: 0033:0x7fd3f7162b19 [ 711.040563] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 711.040591] RSP: 002b:00007fd3f46d8188 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 711.040620] RAX: ffffffffffffffda RBX: 00007fd3f7275f60 RCX: 00007fd3f7162b19 [ 711.040640] RDX: 00000000200001c0 RSI: 0000000000000000 RDI: 0000000000000004 [ 711.040658] RBP: 00007fd3f46d81d0 R08: 0000000000000000 R09: 0000000000000000 [ 711.040676] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000002 [ 711.040694] R13: 00007ffee432bf2f R14: 00007fd3f46d8300 R15: 0000000000022000 [ 711.040738] [ 711.223553] FAULT_INJECTION: forcing a failure. [ 711.223553] name failslab, interval 1, probability 0, space 0, times 0 [ 711.223595] CPU: 0 PID: 6585 Comm: syz-executor.7 Not tainted 6.4.0-next-20230630 #1 [ 711.223613] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 711.223622] Call Trace: [ 711.223627] [ 711.223633] dump_stack_lvl+0xc1/0xf0 [ 711.223663] should_fail_ex+0x4b4/0x5b0 [ 711.223683] ? kvmalloc_node+0xaa/0x200 [ 711.223708] should_failslab+0x9/0x20 [ 711.223725] __kmem_cache_alloc_node+0x66/0x320 [ 711.223746] ? kvmalloc_node+0xaa/0x200 [ 711.223773] ? kvmalloc_node+0xaa/0x200 [ 711.223796] __kmalloc_node+0x4d/0x160 [ 711.223814] kvmalloc_node+0xaa/0x200 [ 711.223839] alloc_fdtable+0xd3/0x280 [ 711.223862] dup_fd+0x751/0xcf0 [ 711.223887] ? security_task_alloc+0xea/0x260 [ 711.223915] copy_process+0x1f7e/0x7320 [ 711.223942] ? __pfx_perf_tp_event+0x10/0x10 [ 711.223969] ? __pfx_copy_process+0x10/0x10 [ 711.223993] ? find_held_lock+0x2c/0x110 [ 711.224020] ? ksys_write+0x122/0x250 [ 711.224039] ? ksys_write+0x20f/0x250 [ 711.224055] ? lock_release+0x1e3/0x680 [ 711.224077] kernel_clone+0xeb/0x7d0 [ 711.224103] ? __pfx_kernel_clone+0x10/0x10 [ 711.224132] ? perf_trace_run_bpf_submit+0xf3/0x190 [ 711.224150] ? perf_trace_run_bpf_submit+0xf3/0x190 [ 711.224178] __do_sys_fork+0x80/0xc0 [ 711.224202] ? __pfx___do_sys_fork+0x10/0x10 [ 711.224226] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 711.224259] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 711.224279] ? syscall_enter_from_user_mode+0x21/0x50 [ 711.224302] ? syscall_enter_from_user_mode+0x21/0x50 [ 711.224324] do_syscall_64+0x3f/0x90 [ 711.224347] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 711.224375] RIP: 0033:0x7f2ec8a71b19 [ 711.224387] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 711.224402] RSP: 002b:00007f2ec5fe7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 711.224418] RAX: ffffffffffffffda RBX: 00007f2ec8b84f60 RCX: 00007f2ec8a71b19 [ 711.224429] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 711.224439] RBP: 00007f2ec5fe71d0 R08: 0000000000000000 R09: 0000000000000000 [ 711.224448] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 711.224458] R13: 00007ffff806eeff R14: 00007f2ec5fe7300 R15: 0000000000022000 [ 711.224480] [ 711.276328] FAULT_INJECTION: forcing a failure. [ 711.276328] name failslab, interval 1, probability 0, space 0, times 0 [ 711.276370] CPU: 1 PID: 6591 Comm: syz-executor.1 Not tainted 6.4.0-next-20230630 #1 [ 711.276401] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 711.276417] Call Trace: [ 711.276424] [ 711.276435] dump_stack_lvl+0xc1/0xf0 [ 711.276489] should_fail_ex+0x4b4/0x5b0 [ 711.276517] FAULT_INJECTION: forcing a failure. [ 711.276517] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 711.276525] ? kvmalloc_node+0xaa/0x200 [ 711.276570] should_failslab+0x9/0x20 [ 711.276600] __kmem_cache_alloc_node+0x66/0x320 [ 711.276637] ? __pfx_pin_user_pages+0x10/0x10 [ 711.276673] ? kvmalloc_node+0xaa/0x200 [ 711.276716] ? __pfx___up_read+0x10/0x10 [ 711.276760] ? kvmalloc_node+0xaa/0x200 [ 711.276803] __kmalloc_node+0x4d/0x160 [ 711.276837] kvmalloc_node+0xaa/0x200 [ 711.276884] io_sqe_buffer_register+0x20d/0x16b0 [ 711.276939] ? _copy_from_user+0x5c/0xf0 [ 711.276976] ? __pfx_io_sqe_buffer_register+0x10/0x10 [ 711.277015] ? kasan_set_track+0x25/0x30 [ 711.277054] ? __kasan_kmalloc+0x7f/0x90 [ 711.277102] io_sqe_buffers_register+0x2b2/0x870 [ 711.277151] ? __pfx_io_sqe_buffers_register+0x10/0x10 [ 711.277220] __do_sys_io_uring_register+0xfc3/0x2210 [ 711.277261] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 711.277305] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 711.277348] ? fput+0x2f/0x1a0 [ 711.277385] ? __pfx___do_sys_io_uring_register+0x10/0x10 [ 711.277419] ? ksys_write+0x19e/0x250 [ 711.277448] ? __pfx_ksys_write+0x10/0x10 [ 711.277483] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 711.277527] do_syscall_64+0x3f/0x90 [ 711.277571] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 711.277620] RIP: 0033:0x7fd3f7162b19 [ 711.277641] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 711.277668] RSP: 002b:00007fd3f46d8188 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 711.277697] RAX: ffffffffffffffda RBX: 00007fd3f7275f60 RCX: 00007fd3f7162b19 [ 711.277717] RDX: 00000000200001c0 RSI: 0000000000000000 RDI: 0000000000000004 [ 711.277735] RBP: 00007fd3f46d81d0 R08: 0000000000000000 R09: 0000000000000000 [ 711.277753] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000002 [ 711.277771] R13: 00007ffee432bf2f R14: 00007fd3f46d8300 R15: 0000000000022000 [ 711.277814] [ 711.277823] CPU: 0 PID: 6592 Comm: syz-executor.3 Not tainted 6.4.0-next-20230630 #1 [ 711.277843] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 711.277853] Call Trace: [ 711.277858] [ 711.277864] dump_stack_lvl+0xc1/0xf0 [ 711.277897] should_fail_ex+0x4b4/0x5b0 [ 711.277921] _copy_from_user+0x30/0xf0 [ 711.277942] io_copy_iov+0xbf/0x1c0 [ 711.277962] ? __pfx_io_copy_iov+0x10/0x10 [ 711.277986] ? kasan_set_track+0x25/0x30 [ 711.278011] ? __kasan_kmalloc+0x7f/0x90 [ 711.278038] io_sqe_buffers_register+0x202/0x870 [ 711.278061] ? __do_sys_io_uring_register+0x199/0x2210 [ 711.278089] ? __pfx_io_sqe_buffers_register+0x10/0x10 [ 711.278124] __do_sys_io_uring_register+0xfc3/0x2210 [ 711.278147] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 711.278176] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 711.278200] ? fput+0x2f/0x1a0 [ 711.278223] ? __pfx___do_sys_io_uring_register+0x10/0x10 [ 711.278244] ? __pfx_ksys_write+0x10/0x10 [ 711.278265] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 711.278292] do_syscall_64+0x3f/0x90 [ 711.278319] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 711.278348] RIP: 0033:0x7f9443ec5b19 [ 711.278361] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 711.278378] RSP: 002b:00007f944143b188 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 711.278394] RAX: ffffffffffffffda RBX: 00007f9443fd8f60 RCX: 00007f9443ec5b19 [ 711.278406] RDX: 00000000200001c0 RSI: 0000000000000000 RDI: 0000000000000004 [ 711.278417] RBP: 00007f944143b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 711.278428] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001 [ 711.278438] R13: 00007ffcfa8d7dff R14: 00007f944143b300 R15: 0000000000022000 [ 711.278463] 23:21:58 executing program 4: signalfd(0xffffffffffffffff, &(0x7f00000011c0), 0x8) dup(0xffffffffffffffff) clone3(0x0, 0x0) epoll_create1(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000000)) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000000000)) 23:21:58 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x7, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:21:58 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) (fail_nth: 10) 23:21:58 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0xb, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:21:58 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) fork() (fail_nth: 13) 23:21:58 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) fork() (fail_nth: 3) 23:21:58 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x5, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:21:58 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) (fail_nth: 14) [ 722.439056] FAULT_INJECTION: forcing a failure. [ 722.439056] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 722.440349] CPU: 0 PID: 6606 Comm: syz-executor.0 Not tainted 6.4.0-next-20230630 #1 [ 722.441009] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 722.441735] Call Trace: [ 722.441966] [ 722.442173] dump_stack_lvl+0xc1/0xf0 [ 722.442540] should_fail_ex+0x4b4/0x5b0 [ 722.442918] __should_fail_alloc_page+0xe0/0x110 [ 722.443365] prepare_alloc_pages+0x178/0x500 [ 722.443778] __alloc_pages+0x149/0x480 [ 722.444139] ? __pfx_lock_release+0x10/0x10 [ 722.444527] ? __pfx___alloc_pages+0x10/0x10 [ 722.444953] ? kmem_cache_alloc_node+0x347/0x3b0 [ 722.445394] copy_process+0x456/0x7320 [ 722.445763] ? __pfx_perf_tp_event+0x10/0x10 [ 722.446184] ? lock_release+0x1e3/0x680 [ 722.446556] ? __pfx_copy_process+0x10/0x10 [ 722.446950] ? find_held_lock+0x2c/0x110 [ 722.447331] ? ksys_write+0x122/0x250 [ 722.447679] ? ksys_write+0x20f/0x250 [ 722.447940] ? lock_release+0x1e3/0x680 [ 722.448208] kernel_clone+0xeb/0x7d0 [ 722.448462] ? __pfx_kernel_clone+0x10/0x10 [ 722.448756] ? perf_trace_run_bpf_submit+0xf3/0x190 [ 722.449077] ? perf_trace_run_bpf_submit+0xf3/0x190 [ 722.449407] __do_sys_fork+0x80/0xc0 [ 722.449689] ? __pfx___do_sys_fork+0x10/0x10 [ 722.449990] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 722.450441] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 722.450788] ? syscall_enter_from_user_mode+0x21/0x50 [ 722.451169] ? syscall_enter_from_user_mode+0x21/0x50 [ 722.451508] do_syscall_64+0x3f/0x90 [ 722.451794] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 722.452140] RIP: 0033:0x7f1199da5b19 [ 722.452408] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 722.453653] RSP: 002b:00007f119731b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 722.454196] RAX: ffffffffffffffda RBX: 00007f1199eb8f60 RCX: 00007f1199da5b19 [ 722.454686] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 722.455170] RBP: 00007f119731b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 722.455667] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 722.456160] R13: 00007ffca84fd02f R14: 00007f119731b300 R15: 0000000000022000 [ 722.456671] 23:21:58 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x6, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) [ 722.485399] FAULT_INJECTION: forcing a failure. [ 722.485399] name failslab, interval 1, probability 0, space 0, times 0 [ 722.486976] CPU: 1 PID: 6612 Comm: syz-executor.3 Not tainted 6.4.0-next-20230630 #1 [ 722.487980] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 722.489012] Call Trace: [ 722.489357] [ 722.489665] dump_stack_lvl+0xc1/0xf0 [ 722.490232] should_fail_ex+0x4b4/0x5b0 [ 722.490776] ? kvmalloc_node+0xaa/0x200 [ 722.491323] should_failslab+0x9/0x20 [ 722.491836] __kmem_cache_alloc_node+0x66/0x320 [ 722.492460] ? do_syscall_64+0x3f/0x90 [ 722.492993] ? kvmalloc_node+0xaa/0x200 [ 722.493550] ? kvmalloc_node+0xaa/0x200 [ 722.494092] __kmalloc_node+0x4d/0x160 [ 722.494652] kvmalloc_node+0xaa/0x200 [ 722.495207] io_pin_pages+0x70/0x290 [ 722.495748] io_sqe_buffer_register+0x151/0x16b0 [ 722.496442] ? _copy_from_user+0x5c/0xf0 [ 722.497019] ? io_copy_iov+0xdf/0x1c0 [ 722.497562] ? __pfx_io_sqe_buffer_register+0x10/0x10 [ 722.498324] ? kasan_set_track+0x25/0x30 [ 722.498906] ? __kasan_kmalloc+0x7f/0x90 [ 722.499494] io_sqe_buffers_register+0x2b2/0x870 [ 722.500181] ? __pfx_io_sqe_buffers_register+0x10/0x10 [ 722.500940] __do_sys_io_uring_register+0xfc3/0x2210 [ 722.501654] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 722.502503] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 722.503316] ? fput+0x2f/0x1a0 [ 722.503787] ? __pfx___do_sys_io_uring_register+0x10/0x10 [ 722.504542] ? ksys_write+0x19e/0x250 [ 722.505082] ? __pfx_ksys_write+0x10/0x10 [ 722.505670] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 722.506434] do_syscall_64+0x3f/0x90 [ 722.506977] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 722.507709] RIP: 0033:0x7f9443ec5b19 [ 722.508232] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 722.510685] RSP: 002b:00007f944143b188 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 722.511720] RAX: ffffffffffffffda RBX: 00007f9443fd8f60 RCX: 00007f9443ec5b19 [ 722.512670] RDX: 00000000200001c0 RSI: 0000000000000000 RDI: 0000000000000004 [ 722.513645] RBP: 00007f944143b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 722.514636] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000002 [ 722.515597] R13: 00007ffcfa8d7dff R14: 00007f944143b300 R15: 0000000000022000 [ 722.516588] 23:21:58 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x7, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:21:58 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0xc, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:21:58 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) fork() (fail_nth: 4) 23:21:58 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) (fail_nth: 15) 23:21:58 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x8, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:21:58 executing program 4: signalfd(0xffffffffffffffff, &(0x7f00000011c0), 0x8) dup(0xffffffffffffffff) clone3(0x0, 0x0) epoll_create1(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000000)) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000000000)) 23:21:58 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0xd, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) [ 722.669729] FAULT_INJECTION: forcing a failure. [ 722.669729] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 722.669754] CPU: 0 PID: 6631 Comm: syz-executor.1 Not tainted 6.4.0-next-20230630 #1 [ 722.669771] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 722.669779] Call Trace: [ 722.669784] [ 722.669790] dump_stack_lvl+0xc1/0xf0 [ 722.669819] should_fail_ex+0x4b4/0x5b0 [ 722.669840] _copy_to_user+0x30/0xc0 [ 722.669859] simple_read_from_buffer+0xd0/0x170 [ 722.669880] proc_fail_nth_read+0x1a2/0x240 [ 722.669902] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 722.669922] ? security_file_permission+0xb5/0xe0 [ 722.669956] vfs_read+0x1de/0x8f0 [ 722.669971] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 722.669992] ? __pfx_vfs_read+0x10/0x10 [ 722.670011] ? __fget_files+0x267/0x480 [ 722.670045] ksys_read+0x122/0x250 [ 722.670061] ? __pfx_ksys_read+0x10/0x10 [ 722.670079] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 722.670104] do_syscall_64+0x3f/0x90 [ 722.670136] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 722.670163] RIP: 0033:0x7fd3f711569c [ 722.670175] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 722.670189] RSP: 002b:00007fd3f46d8170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 722.670205] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fd3f711569c [ 722.670216] RDX: 000000000000000f RSI: 00007fd3f46d81e0 RDI: 0000000000000005 [ 722.670226] RBP: 00007fd3f46d81d0 R08: 0000000000000000 R09: 0000000000000000 [ 722.670236] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000002 [ 722.670245] R13: 00007ffee432bf2f R14: 00007fd3f46d8300 R15: 0000000000022000 [ 722.670268] [ 722.680087] FAULT_INJECTION: forcing a failure. [ 722.680087] name failslab, interval 1, probability 0, space 0, times 0 [ 722.680128] CPU: 1 PID: 6629 Comm: syz-executor.0 Not tainted 6.4.0-next-20230630 #1 [ 722.680162] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 722.680185] Call Trace: [ 722.680193] [ 722.680203] dump_stack_lvl+0xc1/0xf0 [ 722.680251] should_fail_ex+0x4b4/0x5b0 [ 722.680288] ? prepare_creds+0x2f/0x6f0 [ 722.680325] should_failslab+0x9/0x20 [ 722.680357] kmem_cache_alloc+0x62/0x370 [ 722.680395] ? get_random_u64+0x394/0x660 [ 722.680437] prepare_creds+0x2f/0x6f0 [ 722.680479] copy_creds+0x7a/0xbd0 [ 722.680526] copy_process+0xe2a/0x7320 [ 722.680578] ? __pfx_perf_tp_event+0x10/0x10 [ 722.680618] ? lock_release+0x1e3/0x680 [ 722.680665] ? __pfx_copy_process+0x10/0x10 [ 722.680713] ? find_held_lock+0x2c/0x110 [ 722.680762] ? ksys_write+0x122/0x250 [ 722.680799] ? ksys_write+0x20f/0x250 [ 722.680829] ? lock_release+0x1e3/0x680 [ 722.680875] kernel_clone+0xeb/0x7d0 [ 722.680926] ? __pfx_kernel_clone+0x10/0x10 [ 722.680982] ? perf_trace_run_bpf_submit+0xf3/0x190 [ 722.681019] ? perf_trace_run_bpf_submit+0xf3/0x190 [ 722.681069] __do_sys_fork+0x80/0xc0 [ 722.681118] ? __pfx___do_sys_fork+0x10/0x10 [ 722.681165] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 722.681229] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 722.681268] ? syscall_enter_from_user_mode+0x21/0x50 [ 722.681313] ? syscall_enter_from_user_mode+0x21/0x50 [ 722.681356] do_syscall_64+0x3f/0x90 [ 722.681401] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 722.681452] RIP: 0033:0x7f1199da5b19 [ 722.681474] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 722.681503] RSP: 002b:00007f119731b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 722.681533] RAX: ffffffffffffffda RBX: 00007f1199eb8f60 RCX: 00007f1199da5b19 [ 722.681554] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 722.681573] RBP: 00007f119731b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 722.681593] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 722.681612] R13: 00007ffca84fd02f R14: 00007f119731b300 R15: 0000000000022000 [ 722.681655] 23:22:13 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x9, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:22:13 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x8, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:22:13 executing program 4: signalfd(0xffffffffffffffff, &(0x7f00000011c0), 0x8) dup(0xffffffffffffffff) clone3(0x0, 0x0) epoll_create1(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000000)) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000000000)) 23:22:13 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) fork() (fail_nth: 14) 23:22:13 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:22:13 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0xe, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:22:13 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) (fail_nth: 11) 23:22:13 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) fork() (fail_nth: 5) [ 737.728027] FAULT_INJECTION: forcing a failure. [ 737.728027] name failslab, interval 1, probability 0, space 0, times 0 [ 737.728910] CPU: 1 PID: 6647 Comm: syz-executor.7 Not tainted 6.4.0-next-20230630 #1 [ 737.729455] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 737.730019] Call Trace: [ 737.730201] [ 737.730375] dump_stack_lvl+0xc1/0xf0 [ 737.730663] should_fail_ex+0x4b4/0x5b0 [ 737.730951] ? kvmalloc_node+0xaa/0x200 [ 737.731244] should_failslab+0x9/0x20 [ 737.731519] __kmem_cache_alloc_node+0x66/0x320 [ 737.731856] ? kvmalloc_node+0xaa/0x200 [ 737.732150] ? kasan_set_track+0x25/0x30 [ 737.732451] ? kvmalloc_node+0xaa/0x200 [ 737.732742] __kmalloc_node+0x4d/0x160 [ 737.733023] kvmalloc_node+0xaa/0x200 [ 737.733307] alloc_fdtable+0x13f/0x280 [ 737.733597] dup_fd+0x751/0xcf0 [ 737.733852] ? security_task_alloc+0xea/0x260 [ 737.734187] copy_process+0x1f7e/0x7320 [ 737.734489] ? __pfx_perf_tp_event+0x10/0x10 [ 737.734815] ? __pfx_copy_process+0x10/0x10 [ 737.735129] ? find_held_lock+0x2c/0x110 [ 737.735431] ? ksys_write+0x122/0x250 [ 737.735714] ? ksys_write+0x20f/0x250 [ 737.735993] ? lock_release+0x1e3/0x680 [ 737.736297] kernel_clone+0xeb/0x7d0 [ 737.736576] ? __pfx_kernel_clone+0x10/0x10 [ 737.736896] ? perf_trace_run_bpf_submit+0xf3/0x190 [ 737.737254] ? perf_trace_run_bpf_submit+0xf3/0x190 [ 737.737613] __do_sys_fork+0x80/0xc0 [ 737.737892] ? __pfx___do_sys_fork+0x10/0x10 [ 737.738225] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 737.738672] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 737.739048] ? syscall_enter_from_user_mode+0x21/0x50 [ 737.739431] ? syscall_enter_from_user_mode+0x21/0x50 [ 737.739801] do_syscall_64+0x3f/0x90 [ 737.740076] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 737.740446] RIP: 0033:0x7f2ec8a71b19 [ 737.740716] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 737.741960] RSP: 002b:00007f2ec5fe7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 737.742498] RAX: ffffffffffffffda RBX: 00007f2ec8b84f60 RCX: 00007f2ec8a71b19 [ 737.742996] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 737.743488] RBP: 00007f2ec5fe71d0 R08: 0000000000000000 R09: 0000000000000000 [ 737.743985] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 737.744482] R13: 00007ffff806eeff R14: 00007f2ec5fe7300 R15: 0000000000022000 [ 737.744988] 23:22:13 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x9, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:22:13 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) (fail_nth: 12) 23:22:13 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x2, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:22:13 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0xa, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:22:13 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0xf, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:22:13 executing program 4: signalfd(0xffffffffffffffff, &(0x7f00000011c0), 0x8) dup(0xffffffffffffffff) clone3(0x0, 0x0) r0 = epoll_create1(0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000000)) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, &(0x7f0000000000)) 23:22:13 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) fork() (fail_nth: 15) 23:22:13 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) fork() (fail_nth: 6) 23:22:13 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x3, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:22:13 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0xb, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) [ 737.868602] FAULT_INJECTION: forcing a failure. [ 737.868602] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 737.868628] CPU: 1 PID: 6671 Comm: syz-executor.3 Not tainted 6.4.0-next-20230630 #1 [ 737.868645] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 737.868653] Call Trace: [ 737.868658] [ 737.868664] dump_stack_lvl+0xc1/0xf0 [ 737.868693] should_fail_ex+0x4b4/0x5b0 [ 737.868715] __should_fail_alloc_page+0xe0/0x110 [ 737.868740] prepare_alloc_pages+0x178/0x500 [ 737.868764] ? __pfx___lock_acquire+0x10/0x10 [ 737.868787] __alloc_pages+0x149/0x480 [ 737.868810] ? __pfx___alloc_pages+0x10/0x10 [ 737.868839] ? __pfx_lock_acquire+0x10/0x10 [ 737.868856] ? mt_find+0x2a7/0x8b0 [ 737.868871] ? lock_release+0x1e3/0x680 [ 737.868894] vma_alloc_folio+0xe2/0x480 [ 737.868916] __handle_mm_fault+0xd6c/0x2980 [ 737.868940] ? __pfx___handle_mm_fault+0x10/0x10 [ 737.868967] ? _raw_spin_unlock+0x1e/0x40 [ 737.868985] ? follow_page_mask+0x230/0x1970 [ 737.869011] handle_mm_fault+0x1af/0xba0 [ 737.869033] __get_user_pages+0xb8f/0x11e0 [ 737.869060] ? __pfx___get_user_pages+0x10/0x10 [ 737.869086] ? io_sqe_buffers_register+0x2b2/0x870 [ 737.869106] ? __do_sys_io_uring_register+0xfc3/0x2210 [ 737.869126] ? do_syscall_64+0x3f/0x90 [ 737.869149] ? lock_is_held_type+0x9f/0x120 [ 737.869174] __gup_longterm_locked+0x3d9/0x2760 [ 737.869205] ? lock_acquire+0x19a/0x4c0 [ 737.869222] ? io_pin_pages+0xc9/0x290 [ 737.869243] ? __pfx___gup_longterm_locked+0x10/0x10 [ 737.869264] ? __pfx_lock_acquire+0x10/0x10 [ 737.869282] ? mark_held_locks+0x9e/0xe0 [ 737.869303] ? lock_is_held_type+0x9f/0x120 [ 737.869329] pin_user_pages+0x141/0x160 [ 737.869350] ? __pfx_pin_user_pages+0x10/0x10 [ 737.869369] ? __kasan_kmalloc+0x7f/0x90 [ 737.869401] io_pin_pages+0xe6/0x290 [ 737.869422] io_sqe_buffer_register+0x151/0x16b0 [ 737.869451] ? _copy_from_user+0x5c/0xf0 [ 737.869470] ? io_copy_iov+0xdf/0x1c0 [ 737.869487] ? __pfx_io_sqe_buffer_register+0x10/0x10 [ 737.869508] ? kasan_set_track+0x25/0x30 [ 737.869529] ? __kasan_kmalloc+0x7f/0x90 [ 737.869555] io_sqe_buffers_register+0x2b2/0x870 [ 737.869582] ? __pfx_io_sqe_buffers_register+0x10/0x10 [ 737.869616] __do_sys_io_uring_register+0xfc3/0x2210 [ 737.869638] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 737.869662] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 737.869685] ? fput+0x2f/0x1a0 [ 737.869705] ? __pfx___do_sys_io_uring_register+0x10/0x10 [ 737.869723] ? ksys_write+0x19e/0x250 [ 737.869739] ? __pfx_ksys_write+0x10/0x10 [ 737.869758] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 737.869782] do_syscall_64+0x3f/0x90 [ 737.869805] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 737.869832] RIP: 0033:0x7f9443ec5b19 [ 737.869844] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 737.869858] RSP: 002b:00007f944143b188 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 737.869874] RAX: ffffffffffffffda RBX: 00007f9443fd8f60 RCX: 00007f9443ec5b19 [ 737.869885] RDX: 00000000200001c0 RSI: 0000000000000000 RDI: 0000000000000004 [ 737.869895] RBP: 00007f944143b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 737.869905] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000002 [ 737.869914] R13: 00007ffcfa8d7dff R14: 00007f944143b300 R15: 0000000000022000 [ 737.869938] [ 737.955143] FAULT_INJECTION: forcing a failure. [ 737.955143] name failslab, interval 1, probability 0, space 0, times 0 [ 737.978568] CPU: 0 PID: 6685 Comm: syz-executor.0 Not tainted 6.4.0-next-20230630 #1 [ 737.978588] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 737.978597] Call Trace: [ 737.978603] [ 737.978609] dump_stack_lvl+0xc1/0xf0 [ 737.980441] should_fail_ex+0x4b4/0x5b0 [ 737.980464] ? security_prepare_creds+0x116/0x190 [ 737.980493] should_failslab+0x9/0x20 [ 737.980512] __kmem_cache_alloc_node+0x66/0x320 [ 737.980538] ? security_prepare_creds+0x116/0x190 [ 737.982360] ? security_prepare_creds+0x116/0x190 [ 737.982759] __kmalloc+0x4a/0x160 [ 737.983036] security_prepare_creds+0x116/0x190 [ 737.983435] prepare_creds+0x509/0x6f0 [ 737.983761] copy_creds+0x7a/0xbd0 [ 737.984053] copy_process+0xe2a/0x7320 [ 737.984385] ? __pfx_perf_tp_event+0x10/0x10 [ 737.984741] ? lock_release+0x1e3/0x680 [ 737.985066] ? __pfx_copy_process+0x10/0x10 [ 737.985418] ? find_held_lock+0x2c/0x110 [ 737.985745] ? ksys_write+0x122/0x250 [ 737.986056] ? ksys_write+0x20f/0x250 [ 737.986365] ? lock_release+0x1e3/0x680 [ 737.986693] kernel_clone+0xeb/0x7d0 [ 737.986999] ? __pfx_kernel_clone+0x10/0x10 [ 737.987354] ? perf_trace_run_bpf_submit+0xf3/0x190 [ 737.987746] ? perf_trace_run_bpf_submit+0xf3/0x190 [ 737.988149] __do_sys_fork+0x80/0xc0 [ 737.988452] ? __pfx___do_sys_fork+0x10/0x10 [ 737.988815] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 737.989283] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 737.989701] ? syscall_enter_from_user_mode+0x21/0x50 [ 737.990116] ? syscall_enter_from_user_mode+0x21/0x50 [ 737.990530] do_syscall_64+0x3f/0x90 [ 737.990836] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 737.991254] RIP: 0033:0x7f1199da5b19 [ 737.991548] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 737.992921] RSP: 002b:00007f119731b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 737.993501] RAX: ffffffffffffffda RBX: 00007f1199eb8f60 RCX: 00007f1199da5b19 [ 737.994041] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 737.994592] RBP: 00007f119731b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 737.995122] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 737.995656] R13: 00007ffca84fd02f R14: 00007f119731b300 R15: 0000000000022000 [ 737.996205] 23:22:26 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) (fail_nth: 13) 23:22:26 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0xa, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:22:26 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) fork() (fail_nth: 7) 23:22:26 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) fork() (fail_nth: 16) 23:22:26 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x4, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:22:26 executing program 4: signalfd(0xffffffffffffffff, &(0x7f00000011c0), 0x8) dup(0xffffffffffffffff) clone3(0x0, 0x0) r0 = epoll_create1(0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000000)) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, &(0x7f0000000000)) 23:22:26 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0xc, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:22:26 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x10, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) [ 750.563314] FAULT_INJECTION: forcing a failure. [ 750.563314] name failslab, interval 1, probability 0, space 0, times 0 [ 750.564168] CPU: 1 PID: 6707 Comm: syz-executor.3 Not tainted 6.4.0-next-20230630 #1 [ 750.564692] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 750.565223] Call Trace: [ 750.565404] [ 750.565562] dump_stack_lvl+0xc1/0xf0 [ 750.565840] should_fail_ex+0x4b4/0x5b0 [ 750.566115] ? kvmalloc_node+0xaa/0x200 [ 750.566410] should_failslab+0x9/0x20 [ 750.566690] __kmem_cache_alloc_node+0x66/0x320 [ 750.567018] ? __pfx_pin_user_pages+0x10/0x10 [ 750.567342] ? kvmalloc_node+0xaa/0x200 [ 750.567628] ? __pfx___up_read+0x10/0x10 [ 750.567910] ? kvmalloc_node+0xaa/0x200 [ 750.568189] __kmalloc_node+0x4d/0x160 [ 750.568456] kvmalloc_node+0xaa/0x200 [ 750.568732] io_sqe_buffer_register+0x20d/0x16b0 [ 750.569066] ? _copy_from_user+0x5c/0xf0 [ 750.569356] ? __pfx_io_sqe_buffer_register+0x10/0x10 [ 750.569730] ? kasan_set_track+0x25/0x30 [ 750.570011] ? __kasan_kmalloc+0x7f/0x90 [ 750.570314] io_sqe_buffers_register+0x2b2/0x870 [ 750.570660] ? __pfx_io_sqe_buffers_register+0x10/0x10 [ 750.571025] __do_sys_io_uring_register+0xfc3/0x2210 [ 750.571375] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 750.571789] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 750.572196] ? fput+0x2f/0x1a0 [ 750.572447] ? __pfx___do_sys_io_uring_register+0x10/0x10 [ 750.572846] ? ksys_write+0x19e/0x250 [ 750.573131] ? __pfx_ksys_write+0x10/0x10 [ 750.573438] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 750.573835] do_syscall_64+0x3f/0x90 [ 750.574107] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 750.574507] RIP: 0033:0x7f9443ec5b19 [ 750.574759] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 750.576044] RSP: 002b:00007f944143b188 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 750.576579] RAX: ffffffffffffffda RBX: 00007f9443fd8f60 RCX: 00007f9443ec5b19 [ 750.577089] RDX: 00000000200001c0 RSI: 0000000000000000 RDI: 0000000000000004 [ 750.577597] RBP: 00007f944143b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 750.578103] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000002 [ 750.578617] R13: 00007ffcfa8d7dff R14: 00007f944143b300 R15: 0000000000022000 [ 750.579145] 23:22:26 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0xd, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:22:26 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0xb, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) [ 750.618428] FAULT_INJECTION: forcing a failure. [ 750.618428] name failslab, interval 1, probability 0, space 0, times 0 [ 750.620041] CPU: 0 PID: 6713 Comm: syz-executor.7 Not tainted 6.4.0-next-20230630 #1 [ 750.621106] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 750.622167] Call Trace: [ 750.622542] [ 750.622858] dump_stack_lvl+0xc1/0xf0 [ 750.623419] should_fail_ex+0x4b4/0x5b0 [ 750.623970] ? copy_fs_struct+0x49/0x350 [ 750.624554] should_failslab+0x9/0x20 [ 750.625078] kmem_cache_alloc+0x62/0x370 [ 750.625670] copy_fs_struct+0x49/0x350 [ 750.626219] copy_process+0x36a6/0x7320 [ 750.626808] ? __pfx_perf_tp_event+0x10/0x10 [ 750.627429] ? __pfx_copy_process+0x10/0x10 [ 750.628034] ? find_held_lock+0x2c/0x110 [ 750.628633] ? ksys_write+0x122/0x250 [ 750.629180] ? ksys_write+0x20f/0x250 [ 750.629719] ? lock_release+0x1e3/0x680 [ 750.630290] kernel_clone+0xeb/0x7d0 [ 750.630864] ? __pfx_kernel_clone+0x10/0x10 [ 750.631495] ? perf_trace_run_bpf_submit+0xf3/0x190 [ 750.632196] ? perf_trace_run_bpf_submit+0xf3/0x190 [ 750.632898] __do_sys_fork+0x80/0xc0 [ 750.633442] ? __pfx___do_sys_fork+0x10/0x10 [ 750.634082] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 750.634926] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 750.635656] ? syscall_enter_from_user_mode+0x21/0x50 [ 750.636383] ? syscall_enter_from_user_mode+0x21/0x50 [ 750.637106] do_syscall_64+0x3f/0x90 [ 750.637652] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 750.638399] RIP: 0033:0x7f2ec8a71b19 [ 750.638422] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 750.638525] RSP: 002b:00007f2ec5fe7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 750.638556] RAX: ffffffffffffffda RBX: 00007f2ec8b84f60 RCX: 00007f2ec8a71b19 [ 750.638577] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 23:22:26 executing program 4: signalfd(0xffffffffffffffff, &(0x7f00000011c0), 0x8) dup(0xffffffffffffffff) clone3(0x0, 0x0) r0 = epoll_create1(0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000000)) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, &(0x7f0000000000)) [ 750.638596] RBP: 00007f2ec5fe71d0 R08: 0000000000000000 R09: 0000000000000000 [ 750.638616] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 750.638635] R13: 00007ffff806eeff R14: 00007f2ec5fe7300 R15: 0000000000022000 [ 750.638679] 23:22:26 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x5, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:22:39 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x6, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:22:39 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) fork() (fail_nth: 8) 23:22:39 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x11, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:22:39 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0xc, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:22:39 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) (fail_nth: 14) 23:22:39 executing program 4: signalfd(0xffffffffffffffff, &(0x7f00000011c0), 0x8) dup(0xffffffffffffffff) clone3(0x0, 0x0) r0 = epoll_create1(0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, 0x0) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, &(0x7f0000000000)) 23:22:39 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) fork() (fail_nth: 17) 23:22:39 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0xe, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) [ 763.886129] FAULT_INJECTION: forcing a failure. [ 763.886129] name failslab, interval 1, probability 0, space 0, times 0 [ 763.888502] CPU: 1 PID: 6744 Comm: syz-executor.0 Not tainted 6.4.0-next-20230630 #1 [ 763.889205] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 763.889912] Call Trace: [ 763.890146] [ 763.890353] dump_stack_lvl+0xc1/0xf0 [ 763.890734] should_fail_ex+0x4b4/0x5b0 [ 763.891098] ? dup_fd+0x8d/0xcf0 [ 763.891424] should_failslab+0x9/0x20 [ 763.891767] kmem_cache_alloc+0x62/0x370 [ 763.892137] dup_fd+0x8d/0xcf0 [ 763.892449] ? __pfx_audit_alloc+0x10/0x10 [ 763.892842] ? security_task_alloc+0xea/0x260 [ 763.893272] copy_process+0x1f7e/0x7320 [ 763.893649] ? __pfx_perf_tp_event+0x10/0x10 [ 763.894056] ? __pfx_copy_process+0x10/0x10 [ 763.894443] ? find_held_lock+0x2c/0x110 [ 763.894834] ? ksys_write+0x122/0x250 [ 763.895186] ? ksys_write+0x20f/0x250 [ 763.895528] ? lock_release+0x1e3/0x680 [ 763.895905] kernel_clone+0xeb/0x7d0 [ 763.896257] ? __pfx_kernel_clone+0x10/0x10 [ 763.896669] ? perf_trace_run_bpf_submit+0xf3/0x190 [ 763.897130] ? perf_trace_run_bpf_submit+0xf3/0x190 [ 763.897599] __do_sys_fork+0x80/0xc0 [ 763.897950] ? __pfx___do_sys_fork+0x10/0x10 [ 763.898361] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 763.898910] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 763.899378] ? syscall_enter_from_user_mode+0x21/0x50 [ 763.899840] ? syscall_enter_from_user_mode+0x21/0x50 [ 763.900309] do_syscall_64+0x3f/0x90 [ 763.900660] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 763.901136] RIP: 0033:0x7f1199da5b19 [ 763.901472] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 763.903062] RSP: 002b:00007f119731b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 763.903730] RAX: ffffffffffffffda RBX: 00007f1199eb8f60 RCX: 00007f1199da5b19 [ 763.904354] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 763.904976] RBP: 00007f119731b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 763.905604] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 763.906241] R13: 00007ffca84fd02f R14: 00007f119731b300 R15: 0000000000022000 [ 763.906889] 23:22:39 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x12, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:22:39 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) (fail_nth: 15) 23:22:39 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x7, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:22:39 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0xd, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:22:40 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0xf, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:22:40 executing program 4: signalfd(0xffffffffffffffff, &(0x7f00000011c0), 0x8) dup(0xffffffffffffffff) clone3(0x0, 0x0) r0 = epoll_create1(0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, 0x0) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, &(0x7f0000000000)) 23:22:40 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) fork() (fail_nth: 9) 23:22:40 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) [ 764.075330] FAULT_INJECTION: forcing a failure. [ 764.075330] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 764.075357] CPU: 1 PID: 6761 Comm: syz-executor.3 Not tainted 6.4.0-next-20230630 #1 [ 764.075376] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 764.075387] Call Trace: [ 764.075392] [ 764.075399] dump_stack_lvl+0xc1/0xf0 [ 764.075432] should_fail_ex+0x4b4/0x5b0 [ 764.075457] _copy_to_user+0x30/0xc0 [ 764.075478] simple_read_from_buffer+0xd0/0x170 [ 764.075502] proc_fail_nth_read+0x1a2/0x240 [ 764.075528] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 764.075552] ? security_file_permission+0xb5/0xe0 [ 764.075586] vfs_read+0x1de/0x8f0 [ 764.075605] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 764.075628] ? __pfx_vfs_read+0x10/0x10 [ 764.075650] ? __fget_files+0x267/0x480 [ 764.075689] ksys_read+0x122/0x250 [ 764.075707] ? __pfx_ksys_read+0x10/0x10 [ 764.075727] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 764.075757] do_syscall_64+0x3f/0x90 [ 764.075784] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 764.075815] RIP: 0033:0x7f9443e7869c [ 764.075828] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 764.075846] RSP: 002b:00007f944143b170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 764.075864] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f9443e7869c [ 764.075877] RDX: 000000000000000f RSI: 00007f944143b1e0 RDI: 0000000000000005 [ 764.075888] RBP: 00007f944143b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 764.075900] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000002 [ 764.075911] R13: 00007ffcfa8d7dff R14: 00007f944143b300 R15: 0000000000022000 [ 764.075938] 23:22:55 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x13, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:22:55 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0xe, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:22:55 executing program 4: signalfd(0xffffffffffffffff, &(0x7f00000011c0), 0x8) dup(0xffffffffffffffff) clone3(0x0, 0x0) r0 = epoll_create1(0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, 0x0) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, &(0x7f0000000000)) 23:22:55 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) fork() (fail_nth: 10) 23:22:55 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x10, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:22:55 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x8, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:22:55 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x2, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:22:55 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) fork() (fail_nth: 18) [ 779.523360] FAULT_INJECTION: forcing a failure. [ 779.523360] name failslab, interval 1, probability 0, space 0, times 0 [ 779.524546] CPU: 1 PID: 6792 Comm: syz-executor.0 Not tainted 6.4.0-next-20230630 #1 [ 779.525302] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 779.526085] Call Trace: [ 779.526344] [ 779.526574] dump_stack_lvl+0xc1/0xf0 [ 779.526996] should_fail_ex+0x4b4/0x5b0 [ 779.527394] should_failslab+0x9/0x20 [ 779.527773] __kmem_cache_alloc_node+0x66/0x320 [ 779.528239] ? alloc_fdtable+0x84/0x280 [ 779.528643] ? do_raw_spin_lock+0x125/0x270 [ 779.529089] kmalloc_trace+0x26/0xc0 [ 779.529459] alloc_fdtable+0x84/0x280 [ 779.529848] dup_fd+0x751/0xcf0 [ 779.530192] ? security_task_alloc+0xea/0x260 [ 779.530653] copy_process+0x1f7e/0x7320 [ 779.531066] ? __pfx_perf_tp_event+0x10/0x10 [ 779.531520] ? __pfx_copy_process+0x10/0x10 [ 779.531956] ? find_held_lock+0x2c/0x110 [ 779.532375] ? ksys_write+0x122/0x250 [ 779.532757] ? ksys_write+0x20f/0x250 [ 779.533139] ? lock_release+0x1e3/0x680 [ 779.533539] kernel_clone+0xeb/0x7d0 [ 779.533921] ? __pfx_kernel_clone+0x10/0x10 [ 779.534358] ? perf_trace_run_bpf_submit+0xf3/0x190 [ 779.534862] ? perf_trace_run_bpf_submit+0xf3/0x190 [ 779.535360] __do_sys_fork+0x80/0xc0 [ 779.535766] ? __pfx___do_sys_fork+0x10/0x10 [ 779.536206] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 779.536793] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 779.537303] ? syscall_enter_from_user_mode+0x21/0x50 [ 779.537817] ? syscall_enter_from_user_mode+0x21/0x50 [ 779.538336] do_syscall_64+0x3f/0x90 [ 779.538720] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 779.539242] RIP: 0033:0x7f1199da5b19 [ 779.539612] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 779.541292] RSP: 002b:00007f119731b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 779.542013] RAX: ffffffffffffffda RBX: 00007f1199eb8f60 RCX: 00007f1199da5b19 [ 779.542692] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 779.543381] RBP: 00007f119731b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 779.544048] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 779.544709] R13: 00007ffca84fd02f R14: 00007f119731b300 R15: 0000000000022000 [ 779.545392] [ 779.561790] FAULT_INJECTION: forcing a failure. [ 779.561790] name failslab, interval 1, probability 0, space 0, times 0 [ 779.563428] CPU: 0 PID: 6800 Comm: syz-executor.7 Not tainted 6.4.0-next-20230630 #1 [ 779.564487] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 779.565596] Call Trace: [ 779.565958] [ 779.566282] dump_stack_lvl+0xc1/0xf0 [ 779.566843] should_fail_ex+0x4b4/0x5b0 [ 779.567417] ? copy_process+0x20e8/0x7320 [ 779.568007] should_failslab+0x9/0x20 [ 779.568554] kmem_cache_alloc+0x62/0x370 [ 779.569136] copy_process+0x20e8/0x7320 [ 779.569715] ? __pfx_perf_tp_event+0x10/0x10 [ 779.570354] ? __pfx_copy_process+0x10/0x10 [ 779.570991] ? find_held_lock+0x2c/0x110 [ 779.571578] ? ksys_write+0x122/0x250 [ 779.572119] ? ksys_write+0x20f/0x250 [ 779.572660] ? lock_release+0x1e3/0x680 [ 779.573227] kernel_clone+0xeb/0x7d0 [ 779.573775] ? __pfx_kernel_clone+0x10/0x10 [ 779.574395] ? perf_trace_run_bpf_submit+0xf3/0x190 [ 779.575099] ? perf_trace_run_bpf_submit+0xf3/0x190 [ 779.575803] __do_sys_fork+0x80/0xc0 [ 779.576346] ? __pfx___do_sys_fork+0x10/0x10 [ 779.576978] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 779.577802] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 779.578533] ? syscall_enter_from_user_mode+0x21/0x50 [ 779.579279] ? syscall_enter_from_user_mode+0x21/0x50 [ 779.580003] do_syscall_64+0x3f/0x90 [ 779.580542] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 779.581269] RIP: 0033:0x7f2ec8a71b19 [ 779.581791] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 779.584203] RSP: 002b:00007f2ec5fe7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 779.585207] RAX: ffffffffffffffda RBX: 00007f2ec8b84f60 RCX: 00007f2ec8a71b19 [ 779.586169] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 779.587102] RBP: 00007f2ec5fe71d0 R08: 0000000000000000 R09: 0000000000000000 [ 779.588060] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 779.588986] R13: 00007ffff806eeff R14: 00007f2ec5fe7300 R15: 0000000000022000 [ 779.589963] 23:22:55 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x14, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:22:55 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x3, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:22:55 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) fork() (fail_nth: 11) 23:22:55 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x11, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:22:55 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x9, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:22:55 executing program 4: signalfd(0xffffffffffffffff, &(0x7f00000011c0), 0x8) dup(0xffffffffffffffff) clone3(0x0, 0x0) r0 = epoll_create1(0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, &(0x7f0000000000)) 23:22:55 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0xf, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:22:55 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x4, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:22:55 executing program 4: signalfd(0xffffffffffffffff, &(0x7f00000011c0), 0x8) dup(0xffffffffffffffff) clone3(0x0, 0x0) r0 = epoll_create1(0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, &(0x7f0000000000)) 23:23:11 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x12, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:23:11 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) fork() (fail_nth: 12) 23:23:11 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x5, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:23:11 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0xa, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:23:11 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x15, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:23:11 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) fork() (fail_nth: 19) 23:23:11 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x10, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:23:11 executing program 4: signalfd(0xffffffffffffffff, &(0x7f00000011c0), 0x8) dup(0xffffffffffffffff) clone3(0x0, 0x0) r0 = epoll_create1(0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, &(0x7f0000000000)) [ 795.173399] FAULT_INJECTION: forcing a failure. [ 795.173399] name failslab, interval 1, probability 0, space 0, times 0 [ 795.175138] CPU: 0 PID: 6841 Comm: syz-executor.0 Not tainted 6.4.0-next-20230630 #1 [ 795.176111] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 795.177121] Call Trace: [ 795.177455] [ 795.177752] dump_stack_lvl+0xc1/0xf0 [ 795.178262] should_fail_ex+0x4b4/0x5b0 [ 795.178782] ? kvmalloc_node+0xaa/0x200 [ 795.179342] should_failslab+0x9/0x20 [ 795.179843] __kmem_cache_alloc_node+0x66/0x320 [ 795.180460] ? kvmalloc_node+0xaa/0x200 [ 795.180991] ? kvmalloc_node+0xaa/0x200 [ 795.181521] __kmalloc_node+0x4d/0x160 [ 795.182032] kvmalloc_node+0xaa/0x200 [ 795.182538] alloc_fdtable+0xd3/0x280 [ 795.183069] dup_fd+0x751/0xcf0 [ 795.183530] ? security_task_alloc+0xea/0x260 [ 795.184131] copy_process+0x1f7e/0x7320 [ 795.184663] ? __pfx_perf_tp_event+0x10/0x10 [ 795.185243] ? __pfx_copy_process+0x10/0x10 [ 795.185803] ? find_held_lock+0x2c/0x110 [ 795.186342] ? ksys_write+0x122/0x250 [ 795.186836] ? ksys_write+0x20f/0x250 [ 795.187341] ? lock_release+0x1e3/0x680 [ 795.187863] kernel_clone+0xeb/0x7d0 [ 795.188364] ? __pfx_kernel_clone+0x10/0x10 [ 795.188934] ? perf_trace_run_bpf_submit+0xf3/0x190 [ 795.189576] ? perf_trace_run_bpf_submit+0xf3/0x190 [ 795.190222] __do_sys_fork+0x80/0xc0 [ 795.190726] ? __pfx___do_sys_fork+0x10/0x10 [ 795.191325] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 795.192092] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 795.192764] ? syscall_enter_from_user_mode+0x21/0x50 [ 795.193424] ? syscall_enter_from_user_mode+0x21/0x50 [ 795.194088] do_syscall_64+0x3f/0x90 [ 795.194592] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 795.195276] RIP: 0033:0x7f1199da5b19 [ 795.195766] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 795.197997] RSP: 002b:00007f119731b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 795.198949] RAX: ffffffffffffffda RBX: 00007f1199eb8f60 RCX: 00007f1199da5b19 [ 795.199851] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 795.200733] RBP: 00007f119731b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 795.201635] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 795.202536] R13: 00007ffca84fd02f R14: 00007f119731b300 R15: 0000000000022000 [ 795.203449] 23:23:11 executing program 4: signalfd(0xffffffffffffffff, &(0x7f00000011c0), 0x8) dup(0xffffffffffffffff) clone3(0x0, 0x0) r0 = epoll_create1(0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, &(0x7f0000000000)) 23:23:11 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x16, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:23:11 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x11, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:23:11 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x6, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:23:11 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0xb, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:23:11 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x13, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:23:11 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) fork() (fail_nth: 20) 23:23:11 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) fork() (fail_nth: 13) 23:23:11 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x7, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) [ 795.608032] FAULT_INJECTION: forcing a failure. [ 795.608032] name failslab, interval 1, probability 0, space 0, times 0 [ 795.608073] CPU: 1 PID: 6881 Comm: syz-executor.7 Not tainted 6.4.0-next-20230630 #1 [ 795.608105] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 795.608121] Call Trace: [ 795.608128] [ 795.608139] dump_stack_lvl+0xc1/0xf0 [ 795.608193] should_fail_ex+0x4b4/0x5b0 [ 795.608230] ? copy_process+0x2267/0x7320 [ 795.608275] should_failslab+0x9/0x20 [ 795.608304] kmem_cache_alloc+0x62/0x370 [ 795.608341] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 795.608384] copy_process+0x2267/0x7320 [ 795.608431] ? __pfx_perf_tp_event+0x10/0x10 [ 795.608482] ? __pfx_copy_process+0x10/0x10 [ 795.608527] ? find_held_lock+0x2c/0x110 [ 795.608573] ? ksys_write+0x122/0x250 [ 795.608609] ? ksys_write+0x20f/0x250 [ 795.608638] ? lock_release+0x1e3/0x680 [ 795.608680] kernel_clone+0xeb/0x7d0 [ 795.608728] ? __pfx_kernel_clone+0x10/0x10 [ 795.608780] ? perf_trace_run_bpf_submit+0xf3/0x190 [ 795.608814] ? perf_trace_run_bpf_submit+0xf3/0x190 [ 795.608861] __do_sys_fork+0x80/0xc0 [ 795.608907] ? __pfx___do_sys_fork+0x10/0x10 [ 795.608951] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 795.609012] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 795.609048] ? syscall_enter_from_user_mode+0x21/0x50 [ 795.609091] ? syscall_enter_from_user_mode+0x21/0x50 [ 795.609132] do_syscall_64+0x3f/0x90 [ 795.609176] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 795.609225] RIP: 0033:0x7f2ec8a71b19 [ 795.609246] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 795.609275] RSP: 002b:00007f2ec5fe7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 795.609304] RAX: ffffffffffffffda RBX: 00007f2ec8b84f60 RCX: 00007f2ec8a71b19 [ 795.609324] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 795.609343] RBP: 00007f2ec5fe71d0 R08: 0000000000000000 R09: 0000000000000000 [ 795.609362] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 795.609380] R13: 00007ffff806eeff R14: 00007f2ec5fe7300 R15: 0000000000022000 [ 795.609422] 23:23:25 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) fork() (fail_nth: 14) 23:23:25 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x12, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:23:25 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) fork() (fail_nth: 21) 23:23:25 executing program 4: signalfd(0xffffffffffffffff, &(0x7f00000011c0), 0x8) dup(0xffffffffffffffff) clone3(0x0, 0x0) r0 = epoll_create1(0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, &(0x7f0000000000)) 23:23:25 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0xc, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:23:25 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x14, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:23:25 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x17, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:23:25 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x8, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:23:25 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x15, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) [ 809.294019] FAULT_INJECTION: forcing a failure. [ 809.294019] name failslab, interval 1, probability 0, space 0, times 0 [ 809.295734] CPU: 0 PID: 6903 Comm: syz-executor.0 Not tainted 6.4.0-next-20230630 #1 [ 809.296763] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 809.297825] Call Trace: [ 809.298174] [ 809.298482] dump_stack_lvl+0xc1/0xf0 [ 809.299026] should_fail_ex+0x4b4/0x5b0 [ 809.299585] ? kvmalloc_node+0xaa/0x200 [ 809.300147] should_failslab+0x9/0x20 [ 809.300662] __kmem_cache_alloc_node+0x66/0x320 [ 809.301292] ? kvmalloc_node+0xaa/0x200 [ 809.301849] ? kasan_set_track+0x25/0x30 [ 809.302421] ? kvmalloc_node+0xaa/0x200 [ 809.302981] __kmalloc_node+0x4d/0x160 [ 809.303556] kvmalloc_node+0xaa/0x200 [ 809.304109] alloc_fdtable+0x13f/0x280 [ 809.304665] dup_fd+0x751/0xcf0 [ 809.305147] ? security_task_alloc+0xea/0x260 [ 809.305788] copy_process+0x1f7e/0x7320 [ 809.306361] ? __pfx_perf_tp_event+0x10/0x10 [ 809.306989] ? __pfx_copy_process+0x10/0x10 [ 809.307601] ? find_held_lock+0x2c/0x110 [ 809.308173] ? ksys_write+0x122/0x250 [ 809.308686] ? ksys_write+0x20f/0x250 [ 809.309197] ? lock_release+0x1e3/0x680 [ 809.309737] kernel_clone+0xeb/0x7d0 [ 809.310255] ? __pfx_kernel_clone+0x10/0x10 [ 809.310845] ? perf_trace_run_bpf_submit+0xf3/0x190 [ 809.311510] ? perf_trace_run_bpf_submit+0xf3/0x190 [ 809.312179] __do_sys_fork+0x80/0xc0 [ 809.312694] ? __pfx___do_sys_fork+0x10/0x10 [ 809.313294] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 809.314083] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 809.314780] ? syscall_enter_from_user_mode+0x21/0x50 [ 809.315486] ? syscall_enter_from_user_mode+0x21/0x50 [ 809.316175] do_syscall_64+0x3f/0x90 [ 809.316693] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 809.317383] RIP: 0033:0x7f1199da5b19 [ 809.317886] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 809.320115] RSP: 002b:00007f119731b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 809.321121] RAX: ffffffffffffffda RBX: 00007f1199eb8f60 RCX: 00007f1199da5b19 [ 809.322119] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 809.323104] RBP: 00007f119731b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 809.324102] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 809.325028] R13: 00007ffca84fd02f R14: 00007f119731b300 R15: 0000000000022000 [ 809.326035] 23:23:25 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0xd, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:23:25 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x13, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:23:25 executing program 4: signalfd(0xffffffffffffffff, &(0x7f00000011c0), 0x8) dup(0xffffffffffffffff) clone3(0x0, 0x0) r0 = epoll_create1(0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, &(0x7f0000000000)) 23:23:25 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x18, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:23:25 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x9, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:23:25 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) fork() (fail_nth: 22) 23:23:25 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x16, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:23:25 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) fork() (fail_nth: 15) 23:23:25 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x14, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) [ 809.664371] FAULT_INJECTION: forcing a failure. [ 809.664371] name failslab, interval 1, probability 0, space 0, times 0 [ 809.664417] CPU: 0 PID: 6932 Comm: syz-executor.7 Not tainted 6.4.0-next-20230630 #1 [ 809.664450] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 809.664466] Call Trace: [ 809.664474] [ 809.664484] dump_stack_lvl+0xc1/0xf0 [ 809.664534] should_fail_ex+0x4b4/0x5b0 [ 809.664570] ? copy_process+0x3dfb/0x7320 [ 809.664621] should_failslab+0x9/0x20 [ 809.664652] kmem_cache_alloc+0x62/0x370 [ 809.664696] copy_process+0x3dfb/0x7320 [ 809.664763] ? __pfx_copy_process+0x10/0x10 [ 809.664808] ? find_held_lock+0x2c/0x110 [ 809.664855] ? ksys_write+0x122/0x250 [ 809.664891] ? ksys_write+0x20f/0x250 [ 809.664920] ? lock_release+0x1e3/0x680 [ 809.664962] kernel_clone+0xeb/0x7d0 [ 809.665010] ? __pfx_kernel_clone+0x10/0x10 [ 809.665062] ? perf_trace_run_bpf_submit+0xf3/0x190 [ 809.665098] ? perf_trace_run_bpf_submit+0xf3/0x190 [ 809.665145] __do_sys_fork+0x80/0xc0 [ 809.665191] ? __pfx___do_sys_fork+0x10/0x10 [ 809.665235] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 809.665296] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 809.665332] ? syscall_enter_from_user_mode+0x21/0x50 [ 809.665374] ? syscall_enter_from_user_mode+0x21/0x50 [ 809.665415] do_syscall_64+0x3f/0x90 [ 809.665459] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 809.665509] RIP: 0033:0x7f2ec8a71b19 [ 809.665530] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 809.665559] RSP: 002b:00007f2ec5fe7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 809.665588] RAX: ffffffffffffffda RBX: 00007f2ec8b84f60 RCX: 00007f2ec8a71b19 [ 809.665608] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 809.665627] RBP: 00007f2ec5fe71d0 R08: 0000000000000000 R09: 0000000000000000 [ 809.665646] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 809.665664] R13: 00007ffff806eeff R14: 00007f2ec5fe7300 R15: 0000000000022000 [ 809.665705] 23:23:38 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0xe, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:23:38 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0xa, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:23:38 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) fork() (fail_nth: 16) 23:23:38 executing program 4: signalfd(0xffffffffffffffff, &(0x7f00000011c0), 0x8) dup(0xffffffffffffffff) clone3(0x0, 0x0) r0 = epoll_create1(0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000000)) 23:23:38 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x17, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:23:38 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) fork() (fail_nth: 23) 23:23:38 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x15, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:23:38 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x19, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:23:38 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x16, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) [ 822.764634] FAULT_INJECTION: forcing a failure. [ 822.764634] name failslab, interval 1, probability 0, space 0, times 0 [ 822.766104] CPU: 0 PID: 6963 Comm: syz-executor.0 Not tainted 6.4.0-next-20230630 #1 [ 822.767068] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 822.768071] Call Trace: [ 822.768400] [ 822.768693] dump_stack_lvl+0xc1/0xf0 [ 822.769205] should_fail_ex+0x4b4/0x5b0 [ 822.769716] ? copy_fs_struct+0x49/0x350 [ 822.770242] should_failslab+0x9/0x20 [ 822.770725] kmem_cache_alloc+0x62/0x370 [ 822.771252] copy_fs_struct+0x49/0x350 [ 822.771770] copy_process+0x36a6/0x7320 [ 822.772295] ? __pfx_perf_tp_event+0x10/0x10 [ 822.772879] ? __pfx_copy_process+0x10/0x10 [ 822.773436] ? find_held_lock+0x2c/0x110 [ 822.773977] ? ksys_write+0x122/0x250 [ 822.774471] ? ksys_write+0x20f/0x250 [ 822.774953] ? lock_release+0x1e3/0x680 [ 822.775511] kernel_clone+0xeb/0x7d0 23:23:38 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0xf, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) [ 822.776013] ? __pfx_kernel_clone+0x10/0x10 [ 822.776703] ? perf_trace_run_bpf_submit+0xf3/0x190 [ 822.777350] ? perf_trace_run_bpf_submit+0xf3/0x190 [ 822.778014] __do_sys_fork+0x80/0xc0 [ 822.778527] ? __pfx___do_sys_fork+0x10/0x10 [ 822.779126] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 822.779924] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 822.780619] ? syscall_enter_from_user_mode+0x21/0x50 [ 822.781298] ? syscall_enter_from_user_mode+0x21/0x50 [ 822.781987] do_syscall_64+0x3f/0x90 [ 822.782503] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 822.783202] RIP: 0033:0x7f1199da5b19 [ 822.783710] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 822.785965] RSP: 002b:00007f119731b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 822.786926] RAX: ffffffffffffffda RBX: 00007f1199eb8f60 RCX: 00007f1199da5b19 [ 822.787830] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 822.788733] RBP: 00007f119731b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 822.789635] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 822.790542] R13: 00007ffca84fd02f R14: 00007f119731b300 R15: 0000000000022000 [ 822.791483] 23:23:38 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0xb, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:23:38 executing program 4: signalfd(0xffffffffffffffff, &(0x7f00000011c0), 0x8) dup(0xffffffffffffffff) clone3(0x0, 0x0) r0 = epoll_create1(0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) 23:23:38 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x18, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:23:38 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) fork() (fail_nth: 24) [ 822.910522] FAULT_INJECTION: forcing a failure. [ 822.910522] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 822.910568] CPU: 1 PID: 6977 Comm: syz-executor.7 Not tainted 6.4.0-next-20230630 #1 [ 822.910586] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 822.910595] Call Trace: [ 822.910601] [ 822.910607] dump_stack_lvl+0xc1/0xf0 [ 822.910638] should_fail_ex+0x4b4/0x5b0 [ 822.910661] __should_fail_alloc_page+0xe0/0x110 [ 822.910686] prepare_alloc_pages+0x178/0x500 [ 822.910711] ? __pfx___lock_acquire+0x10/0x10 [ 822.910734] __alloc_pages+0x149/0x480 [ 822.910757] ? __pfx___alloc_pages+0x10/0x10 [ 822.910781] ? lock_acquire+0x19a/0x4c0 [ 822.910804] ? percpu_ref_put_many.constprop.0+0x4c/0x110 [ 822.910824] ? lock_release+0x1e3/0x680 [ 822.910846] alloc_pages+0x1a0/0x260 [ 822.910867] __get_free_pages+0x10/0xb0 [ 822.910883] pgd_alloc+0x2c/0x3b0 [ 822.910908] mm_init+0x63f/0xe70 [ 822.910935] copy_process+0x3e4f/0x7320 [ 822.910971] ? __pfx_copy_process+0x10/0x10 [ 822.910995] ? find_held_lock+0x2c/0x110 [ 822.911021] ? ksys_write+0x122/0x250 [ 822.911041] ? ksys_write+0x20f/0x250 [ 822.911056] ? lock_release+0x1e3/0x680 [ 822.911079] kernel_clone+0xeb/0x7d0 [ 822.911106] ? __pfx_kernel_clone+0x10/0x10 [ 822.911134] ? perf_trace_run_bpf_submit+0xf3/0x190 [ 822.911156] ? perf_trace_run_bpf_submit+0xf3/0x190 [ 822.911185] __do_sys_fork+0x80/0xc0 [ 822.911210] ? __pfx___do_sys_fork+0x10/0x10 [ 822.911234] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 822.911267] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 822.911287] ? syscall_enter_from_user_mode+0x21/0x50 [ 822.911311] ? syscall_enter_from_user_mode+0x21/0x50 [ 822.911340] do_syscall_64+0x3f/0x90 [ 822.911364] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 822.911392] RIP: 0033:0x7f2ec8a71b19 [ 822.911404] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 822.911421] RSP: 002b:00007f2ec5fe7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 822.911438] RAX: ffffffffffffffda RBX: 00007f2ec8b84f60 RCX: 00007f2ec8a71b19 [ 822.911450] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 822.911461] RBP: 00007f2ec5fe71d0 R08: 0000000000000000 R09: 0000000000000000 [ 822.911471] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 822.911481] R13: 00007ffff806eeff R14: 00007f2ec5fe7300 R15: 0000000000022000 [ 822.911504] 23:23:53 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x10, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:23:53 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0xc, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:23:53 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) fork() (fail_nth: 25) 23:23:53 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) fork() (fail_nth: 17) 23:23:53 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x19, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:23:53 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x300, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:23:53 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x17, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:23:53 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x7, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:23:53 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0xd, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:23:53 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x18, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:23:53 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0xba, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:23:53 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x11, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:23:53 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x500, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:23:53 executing program 4: signalfd(0xffffffffffffffff, &(0x7f00000011c0), 0x8) dup(0xffffffffffffffff) clone3(0x0, 0x0) r0 = epoll_create1(0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) (fail_nth: 1) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) 23:23:53 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) fork() (fail_nth: 26) 23:23:53 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x12, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:23:53 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x600, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) [ 837.479832] FAULT_INJECTION: forcing a failure. [ 837.479832] name failslab, interval 1, probability 0, space 0, times 0 [ 837.480841] CPU: 1 PID: 7029 Comm: syz-executor.4 Not tainted 6.4.0-next-20230630 #1 [ 837.481501] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 837.482213] Call Trace: [ 837.482390] [ 837.482593] dump_stack_lvl+0xc1/0xf0 [ 837.482948] should_fail_ex+0x4b4/0x5b0 [ 837.483306] ? getname_flags.part.0+0x50/0x4f0 [ 837.483736] should_failslab+0x9/0x20 [ 837.484070] kmem_cache_alloc+0x62/0x370 [ 837.484430] getname_flags.part.0+0x50/0x4f0 [ 837.484731] getname+0x92/0xe0 [ 837.485021] do_sys_openat2+0xec/0x1d0 [ 837.485366] ? __pfx_do_sys_openat2+0x10/0x10 [ 837.485675] __x64_sys_openat+0x143/0x200 [ 837.486037] ? __pfx___x64_sys_openat+0x10/0x10 [ 837.486455] ? ksys_write+0x19e/0x250 [ 837.486713] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 837.487176] do_syscall_64+0x3f/0x90 [ 837.487434] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 837.487894] RIP: 0033:0x7fead56e4a04 [ 837.488144] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 837.489645] RSP: 002b:00007fead2ca6cc0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 837.490120] RAX: ffffffffffffffda RBX: 00007fead5844f60 RCX: 00007fead56e4a04 [ 837.490720] RDX: 0000000000000002 RSI: 00007fead2ca6d60 RDI: 00000000ffffff9c [ 837.491325] RBP: 00007fead2ca6d60 R08: 0000000000000000 R09: 000000000000000d [ 837.491924] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 837.492514] R13: 00007ffc5f66854f R14: 00007fead2ca7300 R15: 0000000000022000 [ 837.493113] 23:23:53 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0xe, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:24:06 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) fork() (fail_nth: 27) 23:24:06 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x700, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:24:06 executing program 4: signalfd(0xffffffffffffffff, &(0x7f00000011c0), 0x8) dup(0xffffffffffffffff) clone3(0x0, 0x0) r0 = epoll_create1(0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) (fail_nth: 2) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) 23:24:06 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x19, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:24:06 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x13, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:24:06 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x300, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:24:06 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) fork() (fail_nth: 18) 23:24:06 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0xf, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) [ 850.699770] FAULT_INJECTION: forcing a failure. [ 850.699770] name failslab, interval 1, probability 0, space 0, times 0 [ 850.700733] CPU: 0 PID: 7051 Comm: syz-executor.0 Not tainted 6.4.0-next-20230630 #1 [ 850.701289] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 850.701871] Call Trace: [ 850.702096] [ 850.702277] dump_stack_lvl+0xc1/0xf0 [ 850.702630] should_fail_ex+0x4b4/0x5b0 [ 850.702936] ? copy_process+0x20e8/0x7320 23:24:06 executing program 4: signalfd(0xffffffffffffffff, &(0x7f00000011c0), 0x8) dup(0xffffffffffffffff) clone3(0x0, 0x0) r0 = epoll_create1(0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) (fail_nth: 3) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) 23:24:06 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x300, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) [ 850.703322] should_failslab+0x9/0x20 [ 850.703836] kmem_cache_alloc+0x62/0x370 [ 850.704211] copy_process+0x20e8/0x7320 [ 850.704589] ? __pfx_perf_tp_event+0x10/0x10 [ 850.705011] ? __pfx_copy_process+0x10/0x10 [ 850.705421] ? find_held_lock+0x2c/0x110 [ 850.705809] ? ksys_write+0x122/0x250 [ 850.706176] ? ksys_write+0x20f/0x250 [ 850.706525] ? lock_release+0x1e3/0x680 [ 850.706902] kernel_clone+0xeb/0x7d0 [ 850.707253] ? __pfx_kernel_clone+0x10/0x10 [ 850.707686] ? perf_trace_run_bpf_submit+0xf3/0x190 [ 850.708136] ? perf_trace_run_bpf_submit+0xf3/0x190 [ 850.708593] __do_sys_fork+0x80/0xc0 [ 850.708941] ? __pfx___do_sys_fork+0x10/0x10 [ 850.709358] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 850.709905] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 850.710374] ? syscall_enter_from_user_mode+0x21/0x50 [ 850.710828] ? syscall_enter_from_user_mode+0x21/0x50 [ 850.711292] do_syscall_64+0x3f/0x90 [ 850.711638] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 850.712102] RIP: 0033:0x7f1199da5b19 [ 850.712437] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 850.713996] RSP: 002b:00007f119731b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 850.714664] RAX: ffffffffffffffda RBX: 00007f1199eb8f60 RCX: 00007f1199da5b19 [ 850.715287] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 850.715913] RBP: 00007f119731b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 850.716536] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 850.717166] R13: 00007ffca84fd02f R14: 00007f119731b300 R15: 0000000000022000 [ 850.717804] [ 850.770523] FAULT_INJECTION: forcing a failure. [ 850.770523] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 850.771485] CPU: 0 PID: 7068 Comm: syz-executor.4 Not tainted 6.4.0-next-20230630 #1 [ 850.772194] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 850.772940] Call Trace: [ 850.773175] [ 850.773385] dump_stack_lvl+0xc1/0xf0 [ 850.773747] should_fail_ex+0x4b4/0x5b0 [ 850.774124] strncpy_from_user+0x38/0x340 [ 850.774512] getname_flags.part.0+0x95/0x4f0 [ 850.774921] getname+0x92/0xe0 [ 850.775233] do_sys_openat2+0xec/0x1d0 [ 850.775599] ? __pfx_do_sys_openat2+0x10/0x10 [ 850.776038] __x64_sys_openat+0x143/0x200 [ 850.776419] ? __pfx___x64_sys_openat+0x10/0x10 [ 850.776829] ? ksys_write+0x19e/0x250 [ 850.777175] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 850.777652] do_syscall_64+0x3f/0x90 [ 850.777935] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 850.778387] RIP: 0033:0x7fead56e4a04 [ 850.778715] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 850.780288] RSP: 002b:00007fead2ca6cc0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 850.780946] RAX: ffffffffffffffda RBX: 00007fead5844f60 RCX: 00007fead56e4a04 [ 850.781558] RDX: 0000000000000002 RSI: 00007fead2ca6d60 RDI: 00000000ffffff9c [ 850.782183] RBP: 00007fead2ca6d60 R08: 0000000000000000 R09: 000000000000000d [ 850.782807] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 850.783427] R13: 00007ffc5f66854f R14: 00007fead2ca7300 R15: 0000000000022000 [ 850.784072] 23:24:06 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x500, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:24:06 executing program 4: signalfd(0xffffffffffffffff, &(0x7f00000011c0), 0x8) dup(0xffffffffffffffff) clone3(0x0, 0x0) r0 = epoll_create1(0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) (fail_nth: 4) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) 23:24:06 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) fork() (fail_nth: 19) [ 850.954093] FAULT_INJECTION: forcing a failure. [ 850.954093] name failslab, interval 1, probability 0, space 0, times 0 [ 850.954137] CPU: 1 PID: 7079 Comm: syz-executor.4 Not tainted 6.4.0-next-20230630 #1 [ 850.954169] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 850.954192] Call Trace: [ 850.954200] [ 850.954210] dump_stack_lvl+0xc1/0xf0 [ 850.954262] should_fail_ex+0x4b4/0x5b0 [ 850.954299] ? alloc_empty_file+0x76/0x1d0 [ 850.954338] should_failslab+0x9/0x20 [ 850.954370] kmem_cache_alloc+0x62/0x370 [ 850.954406] ? __lock_acquire+0x19b1/0x6340 [ 850.954449] alloc_empty_file+0x76/0x1d0 [ 850.954492] path_openat+0xd8/0x2710 [ 850.954552] ? __pfx_path_openat+0x10/0x10 [ 850.954612] do_filp_open+0x1ba/0x410 [ 850.954639] ? __pfx_do_filp_open+0x10/0x10 [ 850.954666] ? expand_files+0x446/0x8e0 [ 850.954704] ? find_held_lock+0x2c/0x110 [ 850.954751] ? alloc_fd+0x2eb/0x760 [ 850.954797] ? lock_release+0x1e3/0x680 [ 850.954855] ? do_raw_spin_lock+0x125/0x270 [ 850.954907] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 850.954960] ? _raw_spin_unlock+0x1e/0x40 [ 850.954992] ? alloc_fd+0x2eb/0x760 [ 850.955043] do_sys_openat2+0x164/0x1d0 [ 850.955084] ? __pfx_do_sys_openat2+0x10/0x10 [ 850.955144] __x64_sys_openat+0x143/0x200 [ 850.955186] ? __pfx___x64_sys_openat+0x10/0x10 [ 850.955227] ? ksys_write+0x19e/0x250 [ 850.955263] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 850.955307] do_syscall_64+0x3f/0x90 [ 850.955352] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 850.955401] RIP: 0033:0x7fead56e4a04 [ 850.955422] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 850.955451] RSP: 002b:00007fead2c85cc0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 850.955480] RAX: ffffffffffffffda RBX: 00007fead5845020 RCX: 00007fead56e4a04 [ 850.955500] RDX: 0000000000000002 RSI: 00007fead2c85d60 RDI: 00000000ffffff9c [ 850.955520] RBP: 00007fead2c85d60 R08: 0000000000000000 R09: 000000000000000d [ 850.955539] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 850.955557] R13: 00007ffc5f66854f R14: 00007fead2c86300 R15: 0000000000022000 [ 850.955599] 23:24:18 executing program 4: signalfd(0xffffffffffffffff, &(0x7f00000011c0), 0x8) dup(0xffffffffffffffff) clone3(0x0, 0x0) r0 = epoll_create1(0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) (fail_nth: 5) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) 23:24:18 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x10, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:24:18 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) fork() (fail_nth: 20) 23:24:18 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x500, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:24:18 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x14, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:24:18 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x900, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:24:18 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) fork() (fail_nth: 28) 23:24:18 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x600, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:24:18 executing program 4: signalfd(0xffffffffffffffff, &(0x7f00000011c0), 0x8) dup(0xffffffffffffffff) clone3(0x0, 0x0) r0 = epoll_create1(0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) (fail_nth: 6) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) [ 862.930018] FAULT_INJECTION: forcing a failure. [ 862.930018] name failslab, interval 1, probability 0, space 0, times 0 [ 862.931671] CPU: 1 PID: 7096 Comm: syz-executor.0 Not tainted 6.4.0-next-20230630 #1 [ 862.932627] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 862.933597] Call Trace: [ 862.933916] [ 862.934203] dump_stack_lvl+0xc1/0xf0 [ 862.934704] should_fail_ex+0x4b4/0x5b0 [ 862.935217] ? copy_process+0x2267/0x7320 [ 862.935746] should_failslab+0x9/0x20 [ 862.936246] kmem_cache_alloc+0x62/0x370 [ 862.936754] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 862.937415] copy_process+0x2267/0x7320 [ 862.937942] ? __pfx_perf_tp_event+0x10/0x10 [ 862.938510] ? __pfx_copy_process+0x10/0x10 [ 862.939057] ? find_held_lock+0x2c/0x110 [ 862.939594] ? ksys_write+0x122/0x250 [ 862.940088] ? ksys_write+0x20f/0x250 [ 862.940561] ? lock_release+0x1e3/0x680 [ 862.941065] kernel_clone+0xeb/0x7d0 [ 862.941563] ? __pfx_kernel_clone+0x10/0x10 [ 862.942198] ? perf_trace_run_bpf_submit+0xf3/0x190 [ 862.942840] ? perf_trace_run_bpf_submit+0xf3/0x190 [ 862.943472] __do_sys_fork+0x80/0xc0 [ 862.943983] ? __pfx___do_sys_fork+0x10/0x10 [ 862.944544] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 862.945293] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 862.945935] ? syscall_enter_from_user_mode+0x21/0x50 [ 862.946584] ? syscall_enter_from_user_mode+0x21/0x50 [ 862.947223] do_syscall_64+0x3f/0x90 [ 862.947703] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 862.948362] RIP: 0033:0x7f1199da5b19 [ 862.948821] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 862.950922] RSP: 002b:00007f119731b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 862.951850] RAX: ffffffffffffffda RBX: 00007f1199eb8f60 RCX: 00007f1199da5b19 [ 862.952702] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 862.953552] RBP: 00007f119731b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 862.954382] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 862.955226] R13: 00007ffca84fd02f R14: 00007f119731b300 R15: 0000000000022000 [ 862.956136] 23:24:19 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0xa00, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:24:19 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x700, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:24:19 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x512, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:24:19 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x11, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:24:19 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x15, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:24:19 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) fork() (fail_nth: 21) 23:24:19 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) fork() (fail_nth: 29) [ 863.162105] FAULT_INJECTION: forcing a failure. [ 863.162105] name failslab, interval 1, probability 0, space 0, times 0 [ 863.162148] CPU: 1 PID: 7117 Comm: syz-executor.4 Not tainted 6.4.0-next-20230630 #1 23:24:19 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x12, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) [ 863.162186] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 863.162203] Call Trace: [ 863.162211] [ 863.162221] dump_stack_lvl+0xc1/0xf0 [ 863.162270] should_fail_ex+0x4b4/0x5b0 [ 863.162306] ? security_file_alloc+0x38/0x170 [ 863.162348] should_failslab+0x9/0x20 [ 863.162378] kmem_cache_alloc+0x62/0x370 [ 863.162423] security_file_alloc+0x38/0x170 [ 863.162468] init_file+0x98/0x1f0 [ 863.162509] alloc_empty_file+0x94/0x1d0 [ 863.162550] path_openat+0xd8/0x2710 [ 863.162610] ? __pfx_path_openat+0x10/0x10 [ 863.162668] do_filp_open+0x1ba/0x410 [ 863.162695] ? __pfx_do_filp_open+0x10/0x10 [ 863.162721] ? expand_files+0x446/0x8e0 [ 863.162759] ? find_held_lock+0x2c/0x110 [ 863.162806] ? alloc_fd+0x2eb/0x760 [ 863.162844] ? lock_release+0x1e3/0x680 [ 863.162883] ? do_raw_spin_lock+0x125/0x270 [ 863.162924] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 863.162976] ? _raw_spin_unlock+0x1e/0x40 23:24:19 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x600, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) [ 863.163008] ? alloc_fd+0x2eb/0x760 [ 863.163058] do_sys_openat2+0x164/0x1d0 [ 863.163098] ? __pfx_do_sys_openat2+0x10/0x10 [ 863.163157] __x64_sys_openat+0x143/0x200 [ 863.163198] ? __pfx___x64_sys_openat+0x10/0x10 [ 863.163238] ? ksys_write+0x19e/0x250 [ 863.163274] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 863.163317] do_syscall_64+0x3f/0x90 [ 863.163360] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 863.163409] RIP: 0033:0x7fead56e4a04 [ 863.163430] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 863.163457] RSP: 002b:00007fead2c85cc0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 863.163486] RAX: ffffffffffffffda RBX: 00007fead5845020 RCX: 00007fead56e4a04 [ 863.163506] RDX: 0000000000000002 RSI: 00007fead2c85d60 RDI: 00000000ffffff9c [ 863.163524] RBP: 00007fead2c85d60 R08: 0000000000000000 R09: 000000000000000d [ 863.163542] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 863.163559] R13: 00007ffc5f66854f R14: 00007fead2c86300 R15: 0000000000022000 [ 863.163600] 23:24:32 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) fork() (fail_nth: 22) 23:24:32 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x900, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:24:32 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) fork() (fail_nth: 30) 23:24:32 executing program 4: signalfd(0xffffffffffffffff, &(0x7f00000011c0), 0x8) dup(0xffffffffffffffff) clone3(0x0, 0x0) r0 = epoll_create1(0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) (fail_nth: 7) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) 23:24:32 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0xb00, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:24:32 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x16, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:24:32 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x13, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:24:32 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x700, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:24:32 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0xc00, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) [ 876.480057] FAULT_INJECTION: forcing a failure. [ 876.480057] name failslab, interval 1, probability 0, space 0, times 0 [ 876.481066] CPU: 0 PID: 7158 Comm: syz-executor.0 Not tainted 6.4.0-next-20230630 #1 [ 876.481706] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 876.482363] Call Trace: [ 876.482577] [ 876.482770] dump_stack_lvl+0xc1/0xf0 [ 876.483102] should_fail_ex+0x4b4/0x5b0 [ 876.483451] ? copy_process+0x3dfb/0x7320 [ 876.483814] should_failslab+0x9/0x20 [ 876.484137] kmem_cache_alloc+0x62/0x370 [ 876.484477] copy_process+0x3dfb/0x7320 [ 876.484832] ? __pfx_copy_process+0x10/0x10 [ 876.485201] ? perf_trace_preemptirq_template+0x252/0x420 [ 876.485661] ? __pfx___perf_event_task_sched_in+0x10/0x10 [ 876.486118] ? lock_release+0x1e3/0x680 [ 876.486448] ? xfd_validate_state+0x51/0x170 [ 876.486830] kernel_clone+0xeb/0x7d0 [ 876.487144] ? finish_task_switch.isra.0+0x203/0x830 [ 876.487568] ? __pfx_kernel_clone+0x10/0x10 [ 876.487937] ? perf_trace_run_bpf_submit+0xf3/0x190 [ 876.488360] ? perf_trace_run_bpf_submit+0xf3/0x190 [ 876.488778] __do_sys_fork+0x80/0xc0 [ 876.489096] ? __pfx___do_sys_fork+0x10/0x10 [ 876.489474] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 876.489970] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 876.490391] ? syscall_enter_from_user_mode+0x21/0x50 [ 876.490814] ? syscall_enter_from_user_mode+0x21/0x50 [ 876.491231] do_syscall_64+0x3f/0x90 [ 876.491548] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 876.491980] RIP: 0033:0x7f1199da5b19 [ 876.492287] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 876.493721] RSP: 002b:00007f119731b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 876.494322] RAX: ffffffffffffffda RBX: 00007f1199eb8f60 RCX: 00007f1199da5b19 [ 876.494891] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 876.495456] RBP: 00007f119731b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 876.496025] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 876.496606] R13: 00007ffca84fd02f R14: 00007f119731b300 R15: 0000000000022000 [ 876.497175] 23:24:32 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x14, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:24:32 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x900, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:24:32 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x17, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:24:32 executing program 4: signalfd(0xffffffffffffffff, &(0x7f00000011c0), 0x8) dup(0xffffffffffffffff) clone3(0x0, 0x0) r0 = epoll_create1(0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) (fail_nth: 8) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) 23:24:32 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0xa00, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:24:32 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x15, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) [ 876.619869] FAULT_INJECTION: forcing a failure. [ 876.619869] name failslab, interval 1, probability 0, space 0, times 0 [ 876.620769] CPU: 1 PID: 7170 Comm: syz-executor.4 Not tainted 6.4.0-next-20230630 #1 [ 876.621294] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 876.621844] Call Trace: [ 876.622031] [ 876.622196] dump_stack_lvl+0xc1/0xf0 [ 876.622483] should_fail_ex+0x4b4/0x5b0 [ 876.622766] should_failslab+0x9/0x20 [ 876.623029] __kmem_cache_alloc_node+0x66/0x320 [ 876.623368] ? tty_open+0x145/0x13c0 [ 876.623638] kmalloc_trace+0x26/0xc0 [ 876.623896] tty_open+0x145/0x13c0 [ 876.624167] ? kobject_get_unless_zero+0x15e/0x1f0 [ 876.624510] ? __pfx_tty_open+0x10/0x10 [ 876.624781] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 876.625122] ? __pfx_tty_open+0x10/0x10 [ 876.625409] chrdev_open+0x275/0x6e0 [ 876.625674] ? __pfx_chrdev_open+0x10/0x10 [ 876.625966] ? fsnotify_perm.part.0+0x248/0x680 [ 876.626293] do_dentry_open+0x69b/0x15c0 [ 876.626587] ? __pfx_chrdev_open+0x10/0x10 [ 876.626876] ? may_open+0x1f3/0x420 [ 876.627142] path_openat+0x1859/0x2710 [ 876.627444] ? __pfx_path_openat+0x10/0x10 [ 876.627758] do_filp_open+0x1ba/0x410 [ 876.628030] ? __pfx_do_filp_open+0x10/0x10 [ 876.628331] ? expand_files+0x446/0x8e0 [ 876.628622] ? find_held_lock+0x2c/0x110 [ 876.628934] ? _raw_spin_unlock+0x1e/0x40 [ 876.629223] ? alloc_fd+0x2eb/0x760 [ 876.629498] do_sys_openat2+0x164/0x1d0 [ 876.629783] ? __pfx_do_sys_openat2+0x10/0x10 [ 876.630104] __x64_sys_openat+0x143/0x200 [ 876.630404] ? __pfx___x64_sys_openat+0x10/0x10 [ 876.630730] ? ksys_write+0x19e/0x250 [ 876.630997] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 876.631378] do_syscall_64+0x3f/0x90 [ 876.631647] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 876.632034] RIP: 0033:0x7fead56e4a04 [ 876.632291] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 876.633502] RSP: 002b:00007fead2ca6cc0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 876.634008] RAX: ffffffffffffffda RBX: 00007fead5844f60 RCX: 00007fead56e4a04 [ 876.634494] RDX: 0000000000000002 RSI: 00007fead2ca6d60 RDI: 00000000ffffff9c [ 876.634964] RBP: 00007fead2ca6d60 R08: 0000000000000000 R09: 000000000000000d [ 876.635448] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 876.635917] R13: 00007ffc5f66854f R14: 00007fead2ca7300 R15: 0000000000022000 [ 876.636433] 23:24:32 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) fork() (fail_nth: 23) 23:24:32 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) fork() (fail_nth: 31) 23:24:44 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) fork() (fail_nth: 24) 23:24:44 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) fork() (fail_nth: 32) 23:24:44 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0xd00, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:24:44 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0xb00, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:24:44 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0xa00, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:24:44 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x18, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:24:44 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x16, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:24:44 executing program 4: signalfd(0xffffffffffffffff, &(0x7f00000011c0), 0x8) dup(0xffffffffffffffff) clone3(0x0, 0x0) r0 = epoll_create1(0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) (fail_nth: 9) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) 23:24:44 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x17, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:24:44 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x19, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) [ 888.434518] FAULT_INJECTION: forcing a failure. [ 888.434518] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 888.436259] CPU: 0 PID: 7214 Comm: syz-executor.0 Not tainted 6.4.0-next-20230630 #1 [ 888.437573] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 888.438670] Call Trace: [ 888.439128] [ 888.439539] dump_stack_lvl+0xc1/0xf0 [ 888.440250] should_fail_ex+0x4b4/0x5b0 [ 888.440970] __should_fail_alloc_page+0xe0/0x110 [ 888.441653] prepare_alloc_pages+0x178/0x500 [ 888.442476] ? __pfx___lock_acquire+0x10/0x10 [ 888.443120] __alloc_pages+0x149/0x480 [ 888.443839] ? __pfx___alloc_pages+0x10/0x10 [ 888.444511] ? lock_acquire+0x19a/0x4c0 [ 888.445096] ? percpu_ref_put_many.constprop.0+0x4c/0x110 [ 888.445859] ? lock_release+0x1e3/0x680 [ 888.446601] alloc_pages+0x1a0/0x260 [ 888.447136] __get_free_pages+0x10/0xb0 [ 888.447857] pgd_alloc+0x2c/0x3b0 [ 888.448402] mm_init+0x63f/0xe70 [ 888.448915] copy_process+0x3e4f/0x7320 [ 888.449511] ? __pfx_copy_process+0x10/0x10 [ 888.450122] ? find_held_lock+0x2c/0x110 [ 888.450705] ? ksys_write+0x122/0x250 [ 888.451247] ? ksys_write+0x20f/0x250 [ 888.451779] ? lock_release+0x1e3/0x680 [ 888.452367] kernel_clone+0xeb/0x7d0 [ 888.452911] ? __pfx_kernel_clone+0x10/0x10 [ 888.453545] ? perf_trace_run_bpf_submit+0xf3/0x190 [ 888.454261] ? perf_trace_run_bpf_submit+0xf3/0x190 [ 888.454976] __do_sys_fork+0x80/0xc0 [ 888.455535] ? __pfx___do_sys_fork+0x10/0x10 [ 888.456210] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 888.457066] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 888.457801] ? syscall_enter_from_user_mode+0x21/0x50 [ 888.458548] ? syscall_enter_from_user_mode+0x21/0x50 [ 888.459291] do_syscall_64+0x3f/0x90 [ 888.459845] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 888.460654] RIP: 0033:0x7f1199da5b19 [ 888.461183] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 888.463626] RSP: 002b:00007f119731b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 888.464699] RAX: ffffffffffffffda RBX: 00007f1199eb8f60 RCX: 00007f1199da5b19 [ 888.465744] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 888.466854] RBP: 00007f119731b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 888.466877] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 888.466897] R13: 00007ffca84fd02f R14: 00007f119731b300 R15: 0000000000022000 [ 888.466943] 23:24:57 executing program 4: signalfd(0xffffffffffffffff, &(0x7f00000011c0), 0x8) dup(0xffffffffffffffff) clone3(0x0, 0x0) r0 = epoll_create1(0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) (fail_nth: 10) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) 23:24:57 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) fork() (fail_nth: 25) 23:24:57 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x300, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:24:57 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0xde2, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:24:57 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0xb00, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:24:57 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x18, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:24:57 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0xc00, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:24:57 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) fork() (fail_nth: 33) 23:24:57 executing program 4: signalfd(0xffffffffffffffff, &(0x7f00000011c0), 0x8) dup(0xffffffffffffffff) clone3(0x0, 0x0) r0 = epoll_create1(0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) (fail_nth: 11) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) 23:24:57 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0xe00, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:24:57 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0xc00, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:24:57 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0xd00, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:24:57 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) fork() (fail_nth: 34) 23:24:57 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x19, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:24:57 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x500, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:24:57 executing program 4: signalfd(0xffffffffffffffff, &(0x7f00000011c0), 0x8) dup(0xffffffffffffffff) clone3(0x0, 0x0) r0 = epoll_create1(0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) (fail_nth: 12) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) 23:25:12 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x300, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:25:12 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) fork() (fail_nth: 35) 23:25:12 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0xf00, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:25:12 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x600, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:25:12 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0xe00, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:25:12 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0xd00, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:25:12 executing program 4: signalfd(0xffffffffffffffff, &(0x7f00000011c0), 0x8) dup(0xffffffffffffffff) clone3(0x0, 0x0) r0 = epoll_create1(0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) (fail_nth: 13) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) 23:25:12 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) fork() (fail_nth: 26) [ 916.134872] FAULT_INJECTION: forcing a failure. [ 916.134872] name failslab, interval 1, probability 0, space 0, times 0 [ 916.135961] CPU: 1 PID: 7283 Comm: syz-executor.4 Not tainted 6.4.0-next-20230630 #1 [ 916.136492] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 916.137029] Call Trace: [ 916.137220] [ 916.137387] dump_stack_lvl+0xc1/0xf0 [ 916.137672] should_fail_ex+0x4b4/0x5b0 [ 916.137953] ? alloc_vmap_area+0x161/0x1cc0 [ 916.138255] should_failslab+0x9/0x20 [ 916.138520] kmem_cache_alloc_node+0x65/0x3b0 [ 916.138844] alloc_vmap_area+0x161/0x1cc0 [ 916.139138] ? mark_held_locks+0x9e/0xe0 [ 916.139430] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 916.139795] ? __pfx_alloc_vmap_area+0x10/0x10 [ 916.140131] __get_vm_area_node+0x13e/0x360 [ 916.140436] ? n_tty_open+0x1a/0x170 [ 916.140710] __vmalloc_node_range+0x245/0x14a0 [ 916.141037] ? n_tty_open+0x1a/0x170 [ 916.141298] ? __pfx___lock_acquire+0x10/0x10 [ 916.141614] ? do_filp_open+0x1ba/0x410 [ 916.141892] ? do_sys_openat2+0x164/0x1d0 [ 916.142187] ? do_syscall_64+0x3f/0x90 [ 916.142466] ? __pfx_set_track_prepare+0x10/0x10 [ 916.142803] ? n_tty_open+0x1a/0x170 [ 916.143071] ? lock_acquire+0x19a/0x4c0 [ 916.143348] ? tty_ldisc_reinit+0x166/0x380 [ 916.143661] ? __pfx___vmalloc_node_range+0x10/0x10 [ 916.144014] ? tty_ldisc_reinit+0x19b/0x380 [ 916.144324] ? __pfx_lock_release+0x10/0x10 [ 916.144635] ? n_tty_open+0x1a/0x170 [ 916.144908] __vmalloc_node+0xac/0xf0 [ 916.145198] ? n_tty_open+0x1a/0x170 [ 916.145482] n_tty_open+0x1a/0x170 [ 916.145745] ? __pfx_n_tty_open+0x10/0x10 [ 916.146024] tty_ldisc_open+0xa2/0x120 [ 916.146320] tty_ldisc_reinit+0x22d/0x380 [ 916.146610] tty_reopen+0x255/0x2c0 [ 916.146894] tty_open+0xbbd/0x13c0 [ 916.147143] ? kobject_get_unless_zero+0x15e/0x1f0 [ 916.147502] ? __pfx_tty_open+0x10/0x10 [ 916.147771] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 916.148097] ? __pfx_tty_open+0x10/0x10 [ 916.148393] chrdev_open+0x275/0x6e0 [ 916.148663] ? __pfx_chrdev_open+0x10/0x10 [ 916.148952] ? fsnotify_perm.part.0+0x248/0x680 [ 916.149275] do_dentry_open+0x69b/0x15c0 [ 916.149575] ? __pfx_chrdev_open+0x10/0x10 [ 916.149864] ? may_open+0x1f3/0x420 [ 916.150142] path_openat+0x1859/0x2710 [ 916.150426] ? __pfx_path_openat+0x10/0x10 [ 916.150749] do_filp_open+0x1ba/0x410 [ 916.151016] ? __pfx_do_filp_open+0x10/0x10 [ 916.151337] ? expand_files+0x446/0x8e0 [ 916.151616] ? find_held_lock+0x2c/0x110 [ 916.151943] ? _raw_spin_unlock+0x1e/0x40 [ 916.152233] ? alloc_fd+0x2eb/0x760 [ 916.152502] do_sys_openat2+0x164/0x1d0 [ 916.152801] ? __pfx_do_sys_openat2+0x10/0x10 [ 916.153141] __x64_sys_openat+0x143/0x200 [ 916.153454] ? __pfx___x64_sys_openat+0x10/0x10 [ 916.153791] ? ksys_write+0x19e/0x250 [ 916.154075] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 916.154460] do_syscall_64+0x3f/0x90 [ 916.154741] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 916.155120] RIP: 0033:0x7fead56e4a04 [ 916.155393] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 916.156693] RSP: 002b:00007fead2ca6cc0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 916.157240] RAX: ffffffffffffffda RBX: 00007fead5844f60 RCX: 00007fead56e4a04 [ 916.157743] RDX: 0000000000000002 RSI: 00007fead2ca6d60 RDI: 00000000ffffff9c [ 916.158238] RBP: 00007fead2ca6d60 R08: 0000000000000000 R09: 000000000000000d [ 916.158746] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 916.159252] R13: 00007ffc5f66854f R14: 00007fead2ca7300 R15: 0000000000022000 [ 916.159778] [ 916.160865] syz-executor.4: vmalloc error: size 9128, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz4,mems_allowed=0 [ 916.162129] CPU: 1 PID: 7283 Comm: syz-executor.4 Not tainted 6.4.0-next-20230630 #1 [ 916.162666] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 916.163255] Call Trace: [ 916.163439] [ 916.163599] dump_stack_lvl+0xc1/0xf0 [ 916.163881] warn_alloc+0x214/0x370 [ 916.164152] ? __pfx_warn_alloc+0x10/0x10 [ 916.164482] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 916.164850] ? __get_vm_area_node+0x2e5/0x360 [ 916.165185] ? __kmem_cache_free+0xe1/0x330 [ 916.165494] ? __get_vm_area_node+0x27a/0x360 [ 916.165835] __vmalloc_node_range+0xbee/0x14a0 [ 916.166158] ? do_filp_open+0x1ba/0x410 [ 916.166443] ? do_sys_openat2+0x164/0x1d0 [ 916.166741] ? do_syscall_64+0x3f/0x90 [ 916.167033] ? __pfx_set_track_prepare+0x10/0x10 [ 916.167369] ? n_tty_open+0x1a/0x170 [ 916.167645] ? lock_acquire+0x19a/0x4c0 [ 916.167921] ? tty_ldisc_reinit+0x166/0x380 [ 916.168239] ? __pfx___vmalloc_node_range+0x10/0x10 [ 916.168597] ? tty_ldisc_reinit+0x19b/0x380 [ 916.168913] ? __pfx_lock_release+0x10/0x10 [ 916.169215] ? n_tty_open+0x1a/0x170 [ 916.169490] __vmalloc_node+0xac/0xf0 [ 916.169768] ? n_tty_open+0x1a/0x170 [ 916.170044] n_tty_open+0x1a/0x170 [ 916.170305] ? __pfx_n_tty_open+0x10/0x10 [ 916.170610] tty_ldisc_open+0xa2/0x120 [ 916.170904] tty_ldisc_reinit+0x22d/0x380 [ 916.171211] tty_reopen+0x255/0x2c0 [ 916.171488] tty_open+0xbbd/0x13c0 [ 916.171751] ? kobject_get_unless_zero+0x15e/0x1f0 [ 916.172102] ? __pfx_tty_open+0x10/0x10 [ 916.172386] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 916.172736] ? __pfx_tty_open+0x10/0x10 [ 916.173031] chrdev_open+0x275/0x6e0 [ 916.173308] ? __pfx_chrdev_open+0x10/0x10 [ 916.173610] ? fsnotify_perm.part.0+0x248/0x680 [ 916.173959] do_dentry_open+0x69b/0x15c0 [ 916.174254] ? __pfx_chrdev_open+0x10/0x10 [ 916.174560] ? may_open+0x1f3/0x420 [ 916.174830] path_openat+0x1859/0x2710 [ 916.175136] ? __pfx_path_openat+0x10/0x10 [ 916.175461] do_filp_open+0x1ba/0x410 [ 916.175739] ? __pfx_do_filp_open+0x10/0x10 [ 916.176039] ? expand_files+0x446/0x8e0 [ 916.176335] ? find_held_lock+0x2c/0x110 [ 916.176659] ? _raw_spin_unlock+0x1e/0x40 [ 916.176960] ? alloc_fd+0x2eb/0x760 [ 916.177239] do_sys_openat2+0x164/0x1d0 [ 916.177538] ? __pfx_do_sys_openat2+0x10/0x10 [ 916.177888] __x64_sys_openat+0x143/0x200 [ 916.178195] ? __pfx___x64_sys_openat+0x10/0x10 [ 916.178535] ? ksys_write+0x19e/0x250 [ 916.178819] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 916.179202] do_syscall_64+0x3f/0x90 [ 916.179490] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 916.179867] RIP: 0033:0x7fead56e4a04 [ 916.180145] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 916.181416] RSP: 002b:00007fead2ca6cc0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 916.181961] RAX: ffffffffffffffda RBX: 00007fead5844f60 RCX: 00007fead56e4a04 [ 916.182470] RDX: 0000000000000002 RSI: 00007fead2ca6d60 RDI: 00000000ffffff9c [ 916.182961] RBP: 00007fead2ca6d60 R08: 0000000000000000 R09: 000000000000000d [ 916.183464] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 916.183974] R13: 00007ffc5f66854f R14: 00007fead2ca7300 R15: 0000000000022000 [ 916.184499] [ 916.184711] Mem-Info: [ 916.184896] active_anon:62 inactive_anon:42695 isolated_anon:0 [ 916.184896] active_file:8274 inactive_file:56128 isolated_file:0 [ 916.184896] unevictable:0 dirty:75 writeback:0 [ 916.184896] slab_reclaimable:9526 slab_unreclaimable:56986 [ 916.184896] mapped:81278 shmem:115 pagetables:3235 [ 916.184896] sec_pagetables:0 bounce:0 [ 916.184896] kernel_misc_reclaimable:0 [ 916.184896] free:101088 free_pcp:1025 free_cma:0 [ 916.187561] Node 0 active_anon:248kB inactive_anon:170780kB active_file:33096kB inactive_file:224512kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:325112kB dirty:300kB writeback:0kB shmem:460kB writeback_tmp:0kB kernel_stack:6560kB pagetables:12940kB sec_pagetables:0kB all_unreclaimable? no [ 916.189453] Node 0 DMA free:15360kB boost:0kB min:44kB low:56kB high:68kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 916.191253] lowmem_reserve[]: 0 1606 1606 1606 [ 916.191607] Node 0 DMA32 free:376704kB boost:0kB min:5104kB low:6748kB high:8392kB reserved_highatomic:0KB active_anon:248kB inactive_anon:170780kB active_file:33096kB inactive_file:224512kB unevictable:0kB writepending:300kB present:2080640kB managed:1655368kB mlocked:0kB bounce:0kB free_pcp:3852kB local_pcp:2560kB free_cma:0kB [ 916.193596] lowmem_reserve[]: 0 0 0 0 [ 916.193914] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 916.194877] Node 0 DMA32: 138*4kB (UME) 51*8kB (ME) 38*16kB (UME) 32*32kB (UME) 56*64kB (UME) 19*128kB (UME) 13*256kB (UME) 8*512kB (UME) 6*1024kB (UME) 1*2048kB (U) 85*4096kB (UM) = 372384kB [ 916.196211] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 916.196828] 21479 total pagecache pages [ 916.197110] 0 pages in swap cache [ 916.197383] Free swap = 0kB [ 916.197601] Total swap = 0kB [ 916.197822] 524158 pages RAM [ 916.198046] 0 pages HighMem/MovableOnly [ 916.198347] 106476 pages reserved 23:25:12 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0xe00, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:25:12 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x700, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:25:12 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0xf00, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:25:12 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) fork() (fail_nth: 36) 23:25:12 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x1100, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:25:12 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x500, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:25:12 executing program 4: signalfd(0xffffffffffffffff, &(0x7f00000011c0), 0x8) dup(0xffffffffffffffff) clone3(0x0, 0x0) r0 = epoll_create1(0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) (fail_nth: 14) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) 23:25:12 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) fork() (fail_nth: 27) 23:25:12 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x11d4, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:25:12 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x900, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:25:12 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0xf00, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:25:24 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x600, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:25:24 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) fork() (fail_nth: 37) 23:25:24 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x1100, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:25:24 executing program 4: signalfd(0xffffffffffffffff, &(0x7f00000011c0), 0x8) dup(0xffffffffffffffff) clone3(0x0, 0x0) r0 = epoll_create1(0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) (fail_nth: 15) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) 23:25:24 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0xa00, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:25:24 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x1200, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:25:24 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) fork() (fail_nth: 28) 23:25:24 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x1100, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) [ 928.781493] kmemleak: Cannot allocate a scan area, scanning the full object 23:25:24 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0xb00, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:25:24 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) fork() (fail_nth: 29) 23:25:24 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x1200, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:25:24 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x700, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:25:24 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x1200, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:25:24 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) fork() (fail_nth: 38) 23:25:24 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x1300, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:25:24 executing program 4: signalfd(0xffffffffffffffff, &(0x7f00000011c0), 0x8) dup(0xffffffffffffffff) clone3(0x0, 0x0) r0 = epoll_create1(0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) (fail_nth: 16) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) 23:25:25 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0xc00, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:25:25 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x900, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:25:25 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x1400, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:25:25 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) fork() (fail_nth: 39) [ 929.117672] FAULT_INJECTION: forcing a failure. [ 929.117672] name failslab, interval 1, probability 0, space 0, times 0 [ 929.119166] CPU: 1 PID: 7385 Comm: syz-executor.4 Not tainted 6.4.0-next-20230630 #1 [ 929.120140] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 929.121174] Call Trace: [ 929.121517] [ 929.121819] dump_stack_lvl+0xc1/0xf0 [ 929.122340] should_fail_ex+0x4b4/0x5b0 [ 929.122861] ? __vmalloc_node_range+0x568/0x14a0 [ 929.123500] should_failslab+0x9/0x20 [ 929.124003] __kmem_cache_alloc_node+0x66/0x320 [ 929.124629] ? __vmalloc_node_range+0x568/0x14a0 [ 929.125267] ? __vmalloc_node_range+0x568/0x14a0 [ 929.125893] __kmalloc_node+0x4d/0x160 [ 929.126419] __vmalloc_node_range+0x568/0x14a0 [ 929.127019] ? do_sys_openat2+0x164/0x1d0 [ 929.127580] ? do_syscall_64+0x3f/0x90 [ 929.128109] ? n_tty_open+0x1a/0x170 [ 929.128579] ? lock_acquire+0x19a/0x4c0 [ 929.129143] ? __pfx___vmalloc_node_range+0x10/0x10 [ 929.129805] ? tty_ldisc_reinit+0x19b/0x380 [ 929.130387] ? __pfx_lock_release+0x10/0x10 [ 929.130956] ? n_tty_open+0x1a/0x170 [ 929.131452] __vmalloc_node+0xac/0xf0 [ 929.131973] ? n_tty_open+0x1a/0x170 [ 929.132480] n_tty_open+0x1a/0x170 [ 929.132963] ? __pfx_n_tty_open+0x10/0x10 [ 929.133511] tty_ldisc_open+0xa2/0x120 [ 929.134037] tty_ldisc_reinit+0x22d/0x380 [ 929.134596] tty_reopen+0x255/0x2c0 [ 929.135088] tty_open+0xbbd/0x13c0 [ 929.135567] ? kobject_get_unless_zero+0x15e/0x1f0 [ 929.136206] ? __pfx_tty_open+0x10/0x10 [ 929.136735] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 929.137353] ? __pfx_tty_open+0x10/0x10 [ 929.137872] chrdev_open+0x275/0x6e0 [ 929.138368] ? __pfx_chrdev_open+0x10/0x10 [ 929.138919] ? fsnotify_perm.part.0+0x248/0x680 [ 929.139532] do_dentry_open+0x69b/0x15c0 [ 929.140067] ? __pfx_chrdev_open+0x10/0x10 [ 929.140642] ? may_open+0x1f3/0x420 [ 929.141144] path_openat+0x1859/0x2710 [ 929.141687] ? __pfx_path_openat+0x10/0x10 [ 929.142262] do_filp_open+0x1ba/0x410 [ 929.142764] ? __pfx_do_filp_open+0x10/0x10 [ 929.143322] ? expand_files+0x446/0x8e0 [ 929.143852] ? find_held_lock+0x2c/0x110 [ 929.144436] ? _raw_spin_unlock+0x1e/0x40 [ 929.144984] ? alloc_fd+0x2eb/0x760 [ 929.145486] do_sys_openat2+0x164/0x1d0 [ 929.146016] ? __pfx_do_sys_openat2+0x10/0x10 [ 929.146641] __x64_sys_openat+0x143/0x200 [ 929.147197] ? __pfx___x64_sys_openat+0x10/0x10 [ 929.147807] ? ksys_write+0x19e/0x250 [ 929.148327] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 929.149034] do_syscall_64+0x3f/0x90 [ 929.149542] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 929.150228] RIP: 0033:0x7fead56e4a04 [ 929.150713] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 929.152983] RSP: 002b:00007fead2c85cc0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 929.153910] RAX: ffffffffffffffda RBX: 00007fead5845020 RCX: 00007fead56e4a04 [ 929.154764] RDX: 0000000000000002 RSI: 00007fead2c85d60 RDI: 00000000ffffff9c [ 929.155620] RBP: 00007fead2c85d60 R08: 0000000000000000 R09: 000000000000000d [ 929.156471] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 929.157332] R13: 00007ffc5f66854f R14: 00007fead2c86300 R15: 0000000000022000 [ 929.158227] [ 929.158595] syz-executor.4: vmalloc error: size 12288, failed to allocated page array size 24, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz4,mems_allowed=0 [ 929.161925] CPU: 1 PID: 7385 Comm: syz-executor.4 Not tainted 6.4.0-next-20230630 #1 [ 929.162869] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 929.163852] Call Trace: [ 929.164188] [ 929.164482] dump_stack_lvl+0xc1/0xf0 [ 929.164966] warn_alloc+0x214/0x370 [ 929.165461] ? __pfx_warn_alloc+0x10/0x10 [ 929.166011] ? should_failslab+0x9/0x20 [ 929.166516] ? __kmem_cache_alloc_node+0x66/0x320 [ 929.167125] ? __vmalloc_node_range+0x568/0x14a0 [ 929.167729] ? __kasan_kmalloc+0x6f/0x90 [ 929.168261] __vmalloc_node_range+0xff8/0x14a0 [ 929.168829] ? do_sys_openat2+0x164/0x1d0 [ 929.169364] ? do_syscall_64+0x3f/0x90 [ 929.169869] ? n_tty_open+0x1a/0x170 [ 929.170337] ? lock_acquire+0x19a/0x4c0 [ 929.170852] ? __pfx___vmalloc_node_range+0x10/0x10 [ 929.171456] ? tty_ldisc_reinit+0x19b/0x380 [ 929.172020] ? __pfx_lock_release+0x10/0x10 [ 929.172569] ? n_tty_open+0x1a/0x170 [ 929.173065] __vmalloc_node+0xac/0xf0 [ 929.173563] ? n_tty_open+0x1a/0x170 [ 929.174050] n_tty_open+0x1a/0x170 [ 929.174516] ? __pfx_n_tty_open+0x10/0x10 [ 929.175035] tty_ldisc_open+0xa2/0x120 [ 929.175543] tty_ldisc_reinit+0x22d/0x380 [ 929.176057] tty_reopen+0x255/0x2c0 [ 929.176531] tty_open+0xbbd/0x13c0 [ 929.176998] ? kobject_get_unless_zero+0x15e/0x1f0 [ 929.177610] ? __pfx_tty_open+0x10/0x10 [ 929.178106] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 929.178708] ? __pfx_tty_open+0x10/0x10 [ 929.179206] chrdev_open+0x275/0x6e0 [ 929.179686] ? __pfx_chrdev_open+0x10/0x10 [ 929.180221] ? fsnotify_perm.part.0+0x248/0x680 [ 929.180806] do_dentry_open+0x69b/0x15c0 [ 929.181329] ? __pfx_chrdev_open+0x10/0x10 [ 929.181860] ? may_open+0x1f3/0x420 [ 929.182339] path_openat+0x1859/0x2710 [ 929.182859] ? __pfx_path_openat+0x10/0x10 [ 929.183424] do_filp_open+0x1ba/0x410 [ 929.183906] ? __pfx_do_filp_open+0x10/0x10 [ 929.184441] ? expand_files+0x446/0x8e0 [ 929.184941] ? find_held_lock+0x2c/0x110 [ 929.185511] ? _raw_spin_unlock+0x1e/0x40 [ 929.186010] ? alloc_fd+0x2eb/0x760 [ 929.186504] do_sys_openat2+0x164/0x1d0 [ 929.187020] ? __pfx_do_sys_openat2+0x10/0x10 [ 929.187617] __x64_sys_openat+0x143/0x200 [ 929.188157] ? __pfx___x64_sys_openat+0x10/0x10 [ 929.188765] ? ksys_write+0x19e/0x250 [ 929.189259] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 929.189919] do_syscall_64+0x3f/0x90 [ 929.190416] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 929.191043] RIP: 0033:0x7fead56e4a04 [ 929.191516] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 929.193657] RSP: 002b:00007fead2c85cc0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 929.194579] RAX: ffffffffffffffda RBX: 00007fead5845020 RCX: 00007fead56e4a04 [ 929.195443] RDX: 0000000000000002 RSI: 00007fead2c85d60 RDI: 00000000ffffff9c [ 929.196305] RBP: 00007fead2c85d60 R08: 0000000000000000 R09: 000000000000000d [ 929.197179] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 929.198030] R13: 00007ffc5f66854f R14: 00007fead2c86300 R15: 0000000000022000 [ 929.198921] [ 929.199469] Mem-Info: [ 929.199800] active_anon:62 inactive_anon:42675 isolated_anon:0 [ 929.199800] active_file:8280 inactive_file:56138 isolated_file:0 [ 929.199800] unevictable:0 dirty:387 writeback:0 [ 929.199800] slab_reclaimable:9565 slab_unreclaimable:57066 [ 929.199800] mapped:81361 shmem:115 pagetables:3047 [ 929.199800] sec_pagetables:0 bounce:0 [ 929.199800] kernel_misc_reclaimable:0 [ 929.199800] free:100905 free_pcp:1156 free_cma:0 [ 929.204296] Node 0 active_anon:248kB inactive_anon:170700kB active_file:33120kB inactive_file:224552kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:325444kB dirty:1548kB writeback:0kB shmem:460kB writeback_tmp:0kB kernel_stack:6176kB pagetables:12188kB sec_pagetables:0kB all_unreclaimable? no [ 929.207435] Node 0 DMA free:15360kB boost:0kB min:44kB low:56kB high:68kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 929.210445] lowmem_reserve[]: 0 1606 1606 1606 [ 929.211064] Node 0 DMA32 free:387812kB boost:0kB min:5104kB low:6748kB high:8392kB reserved_highatomic:0KB active_anon:248kB inactive_anon:170700kB active_file:33120kB inactive_file:224552kB unevictable:0kB writepending:1548kB present:2080640kB managed:1655368kB mlocked:0kB bounce:0kB free_pcp:4728kB local_pcp:2348kB free_cma:0kB [ 929.214477] lowmem_reserve[]: 0 0 0 0 [ 929.215000] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 929.216670] Node 0 DMA32: 9*4kB (UM) 56*8kB (UME) 128*16kB (UME) 18*32kB (ME) 39*64kB (UM) 20*128kB (UME) 11*256kB (UM) 8*512kB (UM) 6*1024kB (UME) 5*2048kB (U) 87*4096kB (UM) = 387812kB [ 929.218901] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 929.219952] 21495 total pagecache pages [ 929.220478] 0 pages in swap cache [ 929.220929] Free swap = 0kB [ 929.221351] Total swap = 0kB [ 929.221740] 524158 pages RAM [ 929.222116] 0 pages HighMem/MovableOnly [ 929.222634] 106476 pages reserved 23:25:36 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x1300, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:25:36 executing program 4: signalfd(0xffffffffffffffff, &(0x7f00000011c0), 0x8) dup(0xffffffffffffffff) clone3(0x0, 0x0) r0 = epoll_create1(0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) (fail_nth: 17) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) 23:25:36 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) fork() (fail_nth: 40) 23:25:36 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x1500, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:25:36 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x1205, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:25:36 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) fork() (fail_nth: 30) 23:25:36 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0xa00, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:25:36 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0xd00, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:25:36 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0xde6, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:25:36 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x1400, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:25:36 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x1300, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:25:36 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x1600, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:25:36 executing program 4: signalfd(0xffffffffffffffff, &(0x7f00000011c0), 0x8) dup(0xffffffffffffffff) clone3(0x0, 0x0) r0 = epoll_create1(0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) (fail_nth: 18) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) 23:25:50 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0xb00, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:25:50 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) fork() (fail_nth: 31) 23:25:50 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x1500, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:25:50 executing program 4: signalfd(0xffffffffffffffff, &(0x7f00000011c0), 0x8) dup(0xffffffffffffffff) clone3(0x0, 0x0) r0 = epoll_create1(0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) (fail_nth: 19) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) 23:25:50 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x1400, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:25:50 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) fork() (fail_nth: 41) 23:25:50 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0xe00, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:25:50 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x1700, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:25:50 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x1500, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:25:50 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x1600, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:25:50 executing program 4: signalfd(0xffffffffffffffff, &(0x7f00000011c0), 0x8) dup(0xffffffffffffffff) clone3(0x0, 0x0) r0 = epoll_create1(0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) (fail_nth: 20) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) 23:25:50 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x1600, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) [ 954.434624] FAULT_INJECTION: forcing a failure. [ 954.434624] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 954.435529] CPU: 1 PID: 7477 Comm: syz-executor.4 Not tainted 6.4.0-next-20230630 #1 [ 954.436122] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 954.436655] Call Trace: [ 954.436842] [ 954.437035] dump_stack_lvl+0xc1/0xf0 [ 954.437321] should_fail_ex+0x4b4/0x5b0 [ 954.437608] _copy_to_user+0x30/0xc0 [ 954.437880] simple_read_from_buffer+0xd0/0x170 [ 954.438210] proc_fail_nth_read+0x1a2/0x240 [ 954.438519] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 954.438858] ? security_file_permission+0xb5/0xe0 [ 954.439214] vfs_read+0x1de/0x8f0 [ 954.439463] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 954.439813] ? __pfx_vfs_read+0x10/0x10 [ 954.440091] ? __fget_files+0x267/0x480 [ 954.440395] ksys_read+0x122/0x250 [ 954.440645] ? __pfx_ksys_read+0x10/0x10 [ 954.440951] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 954.441326] do_syscall_64+0x3f/0x90 [ 954.441588] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 954.441955] RIP: 0033:0x7fead56e469c [ 954.442217] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 954.443378] RSP: 002b:00007fead2ca7170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 954.443900] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 00007fead56e469c [ 954.444387] RDX: 000000000000000f RSI: 00007fead2ca71e0 RDI: 0000000000000006 [ 954.444870] RBP: 00007fead2ca71d0 R08: 0000000000000000 R09: 000000000000000d [ 954.445360] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 954.445839] R13: 00007ffc5f66854f R14: 00007fead2ca7300 R15: 0000000000022000 [ 954.446340] 23:25:50 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0xf00, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:25:50 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) fork() (fail_nth: 42) 23:25:50 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0xc00, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:26:02 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0xd00, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:26:02 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x1100, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:26:02 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) fork() (fail_nth: 32) 23:26:02 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x1700, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:26:02 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x1800, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:26:02 executing program 4: signalfd(0xffffffffffffffff, &(0x7f00000011c0), 0x8) dup(0xffffffffffffffff) clone3(0x0, 0x0) r0 = epoll_create1(0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) 23:26:02 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) fork() (fail_nth: 43) 23:26:02 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x1700, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:26:02 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x1800, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:26:02 executing program 4: signalfd(0xffffffffffffffff, &(0x7f00000011c0), 0x8) dup(0xffffffffffffffff) clone3(0x0, 0x0) r0 = epoll_create1(0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) 23:26:02 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x1800, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:26:02 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x1900, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:26:02 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x1200, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:26:02 executing program 4: signalfd(0xffffffffffffffff, &(0x7f00000011c0), 0x8) dup(0xffffffffffffffff) clone3(0x0, 0x0) r0 = epoll_create1(0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) 23:26:02 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x1900, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:26:02 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) fork() (fail_nth: 33) 23:26:02 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0xe00, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:26:02 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x2000, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:26:03 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x129d, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:26:03 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x2000, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:26:17 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x3fff, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:26:17 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x1900, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:26:17 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) fork() (fail_nth: 34) 23:26:17 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x1300, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:26:17 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) fork() (fail_nth: 44) 23:26:17 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x3fff, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:26:17 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0xe1e, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:26:17 executing program 4: signalfd(0xffffffffffffffff, &(0x7f00000011c0), 0x8) dup(0xffffffffffffffff) clone3(0x0, 0x0) r0 = epoll_create1(0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) 23:26:17 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x4000, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:26:17 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x1400, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:26:17 executing program 4: signalfd(0xffffffffffffffff, &(0x7f00000011c0), 0x8) dup(0xffffffffffffffff) clone3(0x0, 0x0) r0 = epoll_create1(0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) 23:26:17 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x2000, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:26:28 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) fork() (fail_nth: 45) 23:26:28 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x1500, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:26:28 executing program 4: signalfd(0xffffffffffffffff, &(0x7f00000011c0), 0x8) dup(0xffffffffffffffff) clone3(0x0, 0x0) r0 = epoll_create1(0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x3) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) 23:26:28 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) fork() (fail_nth: 35) 23:26:28 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0xba00, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:26:28 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x3fff, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:26:28 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x4000, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:26:28 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0xf00, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:26:28 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) fork() (fail_nth: 36) 23:26:28 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0xff3f, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:26:28 executing program 4: signalfd(0xffffffffffffffff, &(0x7f00000011c0), 0x8) dup(0xffffffffffffffff) clone3(0x0, 0x0) r0 = epoll_create1(0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) 23:26:28 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0xd411, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:26:28 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x1100, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:26:28 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x4000, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:26:28 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x1600, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:26:28 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x1163, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:26:43 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x1700, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:26:43 executing program 4: signalfd(0xffffffffffffffff, &(0x7f00000011c0), 0x8) dup(0xffffffffffffffff) clone3(0x0, 0x0) r0 = epoll_create1(0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) 23:26:43 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) fork() (fail_nth: 37) 23:26:43 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) fork() (fail_nth: 46) 23:26:43 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0xe20d, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:26:43 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0xff3f, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:26:43 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x1200, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:26:43 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x80000, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:26:43 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x1800, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:26:43 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0xff3f, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:26:43 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x200000, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:26:43 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x1300, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:26:43 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) fork() (fail_nth: 38) 23:26:43 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x80000, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:26:43 executing program 4: signalfd(0xffffffffffffffff, &(0x7f00000011c0), 0x8) dup(0xffffffffffffffff) clone3(0x0, 0x0) r0 = epoll_create1(0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) 23:26:43 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x1900, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:26:43 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) fork() (fail_nth: 47) [ 1007.787293] FAULT_INJECTION: forcing a failure. [ 1007.787293] name failslab, interval 1, probability 0, space 0, times 0 [ 1007.789617] CPU: 1 PID: 7700 Comm: syz-executor.7 Not tainted 6.4.0-next-20230630 #1 [ 1007.790571] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1007.791554] Call Trace: [ 1007.791873] [ 1007.792162] dump_stack_lvl+0xc1/0xf0 [ 1007.792665] should_fail_ex+0x4b4/0x5b0 [ 1007.793173] ? vm_area_dup+0x20/0x160 [ 1007.793679] should_failslab+0x9/0x20 [ 1007.794159] kmem_cache_alloc+0x62/0x370 [ 1007.794687] vm_area_dup+0x20/0x160 [ 1007.795165] dup_mmap+0x94e/0x1770 [ 1007.795641] ? perf_trace_preemptirq_template+0x252/0x420 [ 1007.796339] ? __pfx_dup_mmap+0x10/0x10 [ 1007.796876] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 1007.797524] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1007.798199] ? mm_init+0xb4a/0xe70 [ 1007.798690] copy_process+0x3e68/0x7320 [ 1007.799252] ? __pfx_copy_process+0x10/0x10 [ 1007.799818] ? find_held_lock+0x2c/0x110 [ 1007.800354] ? ksys_write+0x122/0x250 [ 1007.800855] ? ksys_write+0x20f/0x250 [ 1007.801348] ? lock_release+0x1e3/0x680 [ 1007.801886] kernel_clone+0xeb/0x7d0 [ 1007.802386] ? __pfx_kernel_clone+0x10/0x10 [ 1007.802967] ? perf_trace_run_bpf_submit+0xf3/0x190 [ 1007.803602] ? perf_trace_run_bpf_submit+0xf3/0x190 [ 1007.804255] __do_sys_fork+0x80/0xc0 [ 1007.804754] ? __pfx___do_sys_fork+0x10/0x10 [ 1007.805342] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 1007.806128] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 1007.806791] ? syscall_enter_from_user_mode+0x21/0x50 [ 1007.807450] ? syscall_enter_from_user_mode+0x21/0x50 [ 1007.808113] do_syscall_64+0x3f/0x90 [ 1007.808611] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 1007.809277] RIP: 0033:0x7f2ec8a71b19 [ 1007.809755] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1007.811970] RSP: 002b:00007f2ec5fe7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1007.812911] RAX: ffffffffffffffda RBX: 00007f2ec8b84f60 RCX: 00007f2ec8a71b19 [ 1007.813798] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1007.814672] RBP: 00007f2ec5fe71d0 R08: 0000000000000000 R09: 0000000000000000 [ 1007.815559] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1007.816440] R13: 00007ffff806eeff R14: 00007f2ec5fe7300 R15: 0000000000022000 [ 1007.817349] 23:26:55 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) fork() (fail_nth: 48) 23:26:55 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x1000000, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:26:55 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x2000, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:26:55 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x200000, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:26:55 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x80000, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:26:55 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x1400, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:26:55 executing program 4: signalfd(0xffffffffffffffff, &(0x7f00000011c0), 0x8) dup(0xffffffffffffffff) clone3(0x0, 0x0) r0 = epoll_create1(0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) 23:26:55 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) fork() (fail_nth: 39) 23:26:55 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x1500, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:26:55 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x200000, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:26:55 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x1000000, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:26:55 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x2000000, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:26:55 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) fork() (fail_nth: 40) 23:27:07 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x3000000, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:27:07 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x1000000, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:27:07 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x2000000, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:27:07 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) fork() (fail_nth: 49) 23:27:07 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x1600, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:27:07 executing program 4: r0 = signalfd(0xffffffffffffffff, &(0x7f00000011c0), 0x8) dup(0xffffffffffffffff) clone3(0x0, 0x0) r1 = epoll_create1(0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000000)) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) r3 = syz_open_pts(r0, 0x840) fsetxattr$security_selinux(r3, &(0x7f0000000040), &(0x7f0000000080)='system_u:object_r:netcontrol_device_t:s0\x00', 0x29, 0x0) 23:27:07 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x3fff, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:27:07 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) fork() (fail_nth: 41) [ 1031.494938] FAULT_INJECTION: forcing a failure. [ 1031.494938] name failslab, interval 1, probability 0, space 0, times 0 [ 1031.496548] CPU: 0 PID: 7756 Comm: syz-executor.7 Not tainted 6.4.0-next-20230630 #1 [ 1031.497570] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1031.498645] Call Trace: [ 1031.498999] [ 1031.499315] dump_stack_lvl+0xc1/0xf0 [ 1031.499868] should_fail_ex+0x4b4/0x5b0 [ 1031.500423] ? vm_area_dup+0x52/0x160 [ 1031.500963] should_failslab+0x9/0x20 [ 1031.501493] kmem_cache_alloc+0x62/0x370 [ 1031.502071] vm_area_dup+0x52/0x160 [ 1031.502587] dup_mmap+0x94e/0x1770 [ 1031.503103] ? perf_trace_preemptirq_template+0x252/0x420 [ 1031.503863] ? __pfx_dup_mmap+0x10/0x10 [ 1031.504445] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 1031.505160] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1031.505911] ? mm_init+0xb4a/0xe70 [ 1031.506438] copy_process+0x3e68/0x7320 [ 1031.507048] ? __pfx_copy_process+0x10/0x10 [ 1031.507668] ? find_held_lock+0x2c/0x110 [ 1031.508263] ? ksys_write+0x122/0x250 [ 1031.508816] ? ksys_write+0x20f/0x250 [ 1031.509358] ? lock_release+0x1e3/0x680 [ 1031.509939] kernel_clone+0xeb/0x7d0 [ 1031.510495] ? __pfx_kernel_clone+0x10/0x10 23:27:07 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x3000000, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) [ 1031.511135] ? perf_trace_run_bpf_submit+0xf3/0x190 [ 1031.511970] ? perf_trace_run_bpf_submit+0xf3/0x190 [ 1031.512694] __do_sys_fork+0x80/0xc0 [ 1031.513244] ? __pfx___do_sys_fork+0x10/0x10 [ 1031.513904] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 1031.514751] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 1031.515483] ? syscall_enter_from_user_mode+0x21/0x50 [ 1031.516209] ? syscall_enter_from_user_mode+0x21/0x50 [ 1031.516940] do_syscall_64+0x3f/0x90 [ 1031.517493] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 1031.518248] RIP: 0033:0x7f2ec8a71b19 [ 1031.518772] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1031.521210] RSP: 002b:00007f2ec5fe7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1031.522233] RAX: ffffffffffffffda RBX: 00007f2ec8b84f60 RCX: 00007f2ec8a71b19 [ 1031.523168] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1031.524600] RBP: 00007f2ec5fe71d0 R08: 0000000000000000 R09: 0000000000000000 23:27:07 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x2000000, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) [ 1031.524656] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1031.524676] R13: 00007ffff806eeff R14: 00007f2ec5fe7300 R15: 0000000000022000 [ 1031.524726] 23:27:07 executing program 4: signalfd(0xffffffffffffffff, &(0x7f00000011c0), 0x8) dup(0xffffffffffffffff) clone3(0x0, 0x0) r0 = epoll_create1(0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) creat(&(0x7f0000000040)='./file0\x00', 0x82) process_vm_writev(0x0, &(0x7f0000000300)=[{&(0x7f0000000080)=""/1, 0x1}, {&(0x7f00000000c0)=""/58, 0x3a}, {&(0x7f0000000100)=""/231, 0xe7}, {&(0x7f0000000200)=""/58, 0x3a}, {&(0x7f0000000240)=""/177, 0xb1}], 0x5, &(0x7f0000000440)=[{&(0x7f0000000380)=""/187, 0xbb}], 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) 23:27:07 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x4000, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:27:07 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) fork() (fail_nth: 50) 23:27:07 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x1700, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:27:07 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x3000000, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:27:07 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x4000000, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:27:07 executing program 4: signalfd(0xffffffffffffffff, &(0x7f00000011c0), 0x8) dup(0xffffffffffffffff) clone3(0x0, 0x0) r0 = epoll_create1(0x80000) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) 23:27:07 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x9d12, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:27:07 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x4000000, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:27:07 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) fork() (fail_nth: 42) 23:27:07 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x1800, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:27:07 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x4000000, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:27:07 executing program 4: r0 = signalfd(0xffffffffffffffff, &(0x7f00000011c0), 0x8) r1 = dup(0xffffffffffffffff) clone3(0x0, 0x0) r2 = epoll_create1(0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000000)) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {r3}}, './file0\x00'}) r5 = epoll_create1(0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000000)) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r5, 0xc038943b, &(0x7f0000000100)={0x1, 0x30, '\x00', 0x1, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$FIONREAD(r4, 0x541b, &(0x7f0000000080)) syz_open_dev$tty1(0xc, 0x4, 0x1) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) 23:27:07 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0xe60d, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:27:07 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x5000000, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:27:07 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x1900, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:27:07 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x5000000, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:27:07 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x5000000, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:27:19 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) fork() (fail_nth: 51) 23:27:19 executing program 4: signalfd(0xffffffffffffffff, &(0x7f0000000040)={[0x3]}, 0x44) dup(0xffffffffffffffff) clone3(0x0, 0x0) r0 = epoll_create1(0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) 23:27:19 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) fork() (fail_nth: 43) 23:27:19 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x6000000, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:27:19 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x6000000, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:27:19 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x1e0e, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:27:19 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x5120000, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:27:19 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0xff3f, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:27:19 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x7000000, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:27:19 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) fork() (fail_nth: 44) [ 1043.650166] FAULT_INJECTION: forcing a failure. [ 1043.650166] name failslab, interval 1, probability 0, space 0, times 0 [ 1043.651743] CPU: 1 PID: 7860 Comm: syz-executor.7 Not tainted 6.4.0-next-20230630 #1 23:27:19 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x6000000, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) [ 1043.652774] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1043.653490] Call Trace: [ 1043.653678] [ 1043.653840] dump_stack_lvl+0xc1/0xf0 [ 1043.654147] should_fail_ex+0x4b4/0x5b0 [ 1043.654433] ? vm_area_dup+0x20/0x160 [ 1043.654716] should_failslab+0x9/0x20 [ 1043.654996] kmem_cache_alloc+0x62/0x370 [ 1043.655294] vm_area_dup+0x20/0x160 [ 1043.655570] dup_mmap+0x94e/0x1770 [ 1043.655844] ? __pfx_dup_mmap+0x10/0x10 [ 1043.656142] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 1043.656508] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1043.656881] ? mm_init+0xb4a/0xe70 [ 1043.657153] copy_process+0x3e68/0x7320 [ 1043.657464] ? __pfx_copy_process+0x10/0x10 [ 1043.657779] ? find_held_lock+0x2c/0x110 [ 1043.658085] ? ksys_write+0x122/0x250 [ 1043.658366] ? ksys_write+0x20f/0x250 [ 1043.658646] ? lock_release+0x1e3/0x680 [ 1043.658943] kernel_clone+0xeb/0x7d0 [ 1043.659231] ? __pfx_kernel_clone+0x10/0x10 [ 1043.659554] ? perf_trace_run_bpf_submit+0xf3/0x190 [ 1043.659910] ? perf_trace_run_bpf_submit+0xf3/0x190 [ 1043.660276] __do_sys_fork+0x80/0xc0 [ 1043.660555] ? __pfx___do_sys_fork+0x10/0x10 [ 1043.660877] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 1043.661298] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 1043.661669] ? syscall_enter_from_user_mode+0x21/0x50 [ 1043.662051] ? syscall_enter_from_user_mode+0x21/0x50 [ 1043.662423] do_syscall_64+0x3f/0x90 [ 1043.662701] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 1043.663074] RIP: 0033:0x7f2ec8a71b19 [ 1043.663337] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1043.664550] RSP: 002b:00007f2ec5fe7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1043.665051] RAX: ffffffffffffffda RBX: 00007f2ec8b84f60 RCX: 00007f2ec8a71b19 [ 1043.665539] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1043.666039] RBP: 00007f2ec5fe71d0 R08: 0000000000000000 R09: 0000000000000000 [ 1043.666534] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1043.667015] R13: 00007ffff806eeff R14: 00007f2ec5fe7300 R15: 0000000000022000 [ 1043.667514] 23:27:19 executing program 4: signalfd(0xffffffffffffffff, &(0x7f00000011c0), 0x8) dup(0xffffffffffffffff) clone3(0x0, 0x0) r0 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000000)) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) 23:27:19 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x7000000, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:27:33 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) fork() (fail_nth: 45) 23:27:33 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x80000, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:27:33 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x7000000, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:27:33 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x2000, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:27:33 executing program 4: r0 = epoll_create1(0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)) signalfd(r0, &(0x7f00000011c0), 0x8) dup(0xffffffffffffffff) clone3(0x0, 0x0) r2 = epoll_create1(0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000000)) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GETSTATE(r3, 0x40046629, &(0x7f0000000040)) 23:27:33 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) fork() (fail_nth: 52) 23:27:33 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x8000000, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:27:33 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x8000000, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:27:33 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x200000, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:27:33 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x8000000, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:27:33 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x9000000, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:27:33 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) fork() (fail_nth: 46) 23:27:33 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x1000000, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:27:33 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x9000000, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:27:33 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x9000000, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:27:33 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) fork() (fail_nth: 53) 23:27:33 executing program 4: signalfd(0xffffffffffffffff, &(0x7f00000011c0), 0x8) r0 = dup(0xffffffffffffffff) clone3(0x0, 0x0) r1 = epoll_create1(0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000000)) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = accept4$unix(r0, &(0x7f0000000040)=@abs, &(0x7f00000000c0)=0x6e, 0x80800) close_range(r0, r3, 0x2) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) [ 1057.627811] FAULT_INJECTION: forcing a failure. [ 1057.627811] name failslab, interval 1, probability 0, space 0, times 0 [ 1057.627841] CPU: 0 PID: 7921 Comm: syz-executor.7 Not tainted 6.4.0-next-20230630 #1 [ 1057.627859] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1057.627869] Call Trace: [ 1057.627874] [ 1057.627880] dump_stack_lvl+0xc1/0xf0 [ 1057.627912] should_fail_ex+0x4b4/0x5b0 [ 1057.627935] ? vm_area_dup+0x20/0x160 [ 1057.627959] should_failslab+0x9/0x20 [ 1057.627977] kmem_cache_alloc+0x62/0x370 [ 1057.628003] vm_area_dup+0x20/0x160 [ 1057.628025] dup_mmap+0x94e/0x1770 [ 1057.628058] ? __pfx_dup_mmap+0x10/0x10 [ 1057.628088] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 1057.628110] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1057.628139] ? mm_init+0xb4a/0xe70 [ 1057.628165] copy_process+0x3e68/0x7320 [ 1057.628208] ? __pfx_copy_process+0x10/0x10 [ 1057.628233] ? find_held_lock+0x2c/0x110 [ 1057.628259] ? ksys_write+0x122/0x250 [ 1057.628281] ? ksys_write+0x20f/0x250 [ 1057.628297] ? lock_release+0x1e3/0x680 [ 1057.628321] kernel_clone+0xeb/0x7d0 [ 1057.628348] ? __pfx_kernel_clone+0x10/0x10 [ 1057.628378] ? perf_trace_run_bpf_submit+0xf3/0x190 [ 1057.628398] ? perf_trace_run_bpf_submit+0xf3/0x190 [ 1057.628426] __do_sys_fork+0x80/0xc0 [ 1057.628450] ? __pfx___do_sys_fork+0x10/0x10 [ 1057.628474] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 1057.628510] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 1057.628530] ? syscall_enter_from_user_mode+0x21/0x50 [ 1057.628556] ? syscall_enter_from_user_mode+0x21/0x50 [ 1057.628578] do_syscall_64+0x3f/0x90 [ 1057.628603] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 1057.628631] RIP: 0033:0x7f2ec8a71b19 [ 1057.628643] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1057.628660] RSP: 002b:00007f2ec5fe7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1057.628676] RAX: ffffffffffffffda RBX: 00007f2ec8b84f60 RCX: 00007f2ec8a71b19 [ 1057.628688] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1057.628698] RBP: 00007f2ec5fe71d0 R08: 0000000000000000 R09: 0000000000000000 [ 1057.628708] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1057.628719] R13: 00007ffff806eeff R14: 00007f2ec5fe7300 R15: 0000000000022000 [ 1057.628744] 23:27:47 executing program 4: r0 = signalfd(0xffffffffffffffff, &(0x7f00000011c0), 0x8) r1 = dup(0xffffffffffffffff) clone3(0x0, 0xffffffffffffffdf) r2 = epoll_create1(0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x99f7c49397eceff}) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) 23:27:47 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x3fff, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:27:47 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0xa000000, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:27:47 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) fork() (fail_nth: 54) 23:27:47 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0xa000000, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:27:47 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0xa000000, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:27:47 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x2000000, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:27:47 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) fork() (fail_nth: 47) 23:27:47 executing program 4: r0 = epoll_create1(0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000100)={0x10002005}) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, &(0x7f00000000c0)={0x10000018}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)) signalfd(r0, &(0x7f00000011c0), 0x8) dup(0xffffffffffffffff) clone3(0x0, 0x0) r3 = epoll_create1(0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000000)) ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) r5 = openat$sr(0xffffffffffffff9c, 0x0, 0x2ce200, 0x0) openat$cgroup_subtree(r5, &(0x7f0000000040), 0x2, 0x0) 23:27:47 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) fork() (fail_nth: 55) [ 1071.665474] FAULT_INJECTION: forcing a failure. [ 1071.665474] name failslab, interval 1, probability 0, space 0, times 0 [ 1071.666291] CPU: 1 PID: 7959 Comm: syz-executor.0 Not tainted 6.4.0-next-20230630 #1 [ 1071.666836] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1071.667390] Call Trace: [ 1071.667571] [ 1071.667730] dump_stack_lvl+0xc1/0xf0 [ 1071.668021] should_fail_ex+0x4b4/0x5b0 [ 1071.668298] ? vm_area_dup+0x20/0x160 [ 1071.668568] should_failslab+0x9/0x20 [ 1071.668836] kmem_cache_alloc+0x62/0x370 [ 1071.669124] vm_area_dup+0x20/0x160 [ 1071.669388] dup_mmap+0x94e/0x1770 [ 1071.669640] ? perf_trace_preemptirq_template+0x252/0x420 [ 1071.670033] ? __pfx_dup_mmap+0x10/0x10 [ 1071.670332] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 1071.670697] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1071.671052] ? mm_init+0xb4a/0xe70 [ 1071.671311] copy_process+0x3e68/0x7320 [ 1071.671609] ? __pfx_copy_process+0x10/0x10 [ 1071.671907] ? find_held_lock+0x2c/0x110 [ 1071.672191] ? ksys_write+0x122/0x250 [ 1071.672460] ? ksys_write+0x20f/0x250 [ 1071.672719] ? lock_release+0x1e3/0x680 [ 1071.672999] kernel_clone+0xeb/0x7d0 [ 1071.673275] ? __pfx_kernel_clone+0x10/0x10 [ 1071.673579] ? perf_trace_run_bpf_submit+0xf3/0x190 [ 1071.673914] ? perf_trace_run_bpf_submit+0xf3/0x190 [ 1071.674268] __do_sys_fork+0x80/0xc0 [ 1071.674556] ? __pfx___do_sys_fork+0x10/0x10 [ 1071.674877] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 1071.675304] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 1071.675682] ? syscall_enter_from_user_mode+0x21/0x50 [ 1071.676062] ? syscall_enter_from_user_mode+0x21/0x50 [ 1071.676438] do_syscall_64+0x3f/0x90 [ 1071.676713] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 1071.677092] RIP: 0033:0x7f1199da5b19 [ 1071.677356] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1071.678614] RSP: 002b:00007f119731b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1071.679152] RAX: ffffffffffffffda RBX: 00007f1199eb8f60 RCX: 00007f1199da5b19 [ 1071.679659] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1071.680152] RBP: 00007f119731b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1071.680644] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1071.681144] R13: 00007ffca84fd02f R14: 00007f119731b300 R15: 0000000000022000 [ 1071.681661] 23:27:47 executing program 4: r0 = signalfd(0xffffffffffffffff, &(0x7f00000011c0), 0x8) r1 = dup(0xffffffffffffffff) clone3(0x0, 0x0) r2 = epoll_create1(0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000000)) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r0, &(0x7f0000001c00)={0x8}) openat$cgroup_int(r1, &(0x7f0000000040)='io.max\x00', 0x2, 0x0) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2, {0x1ce6874d}}, './file0\x00'}) stat(&(0x7f0000000180)='.\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r7, 0x0) recvmmsg$unix(r1, &(0x7f0000001940)=[{{&(0x7f0000000140)=@abs, 0x6e, &(0x7f0000000600)=[{&(0x7f00000001c0)=""/210, 0xd2}, {&(0x7f00000002c0)=""/13, 0xd}, {&(0x7f0000000300)=""/102, 0x66}, {&(0x7f0000000380)=""/106, 0x6a}, {&(0x7f0000000400)=""/252, 0xfc}, {&(0x7f0000000500)=""/227, 0xe3}], 0x6, &(0x7f0000000680)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x28}}, {{&(0x7f00000006c0), 0x6e, &(0x7f0000000a00)=[{&(0x7f0000000740)=""/97, 0x61}, {&(0x7f00000007c0)=""/234, 0xea}, {&(0x7f00000008c0)=""/104, 0x68}, {&(0x7f0000000940)=""/143, 0x8f}], 0x4, &(0x7f0000000a40)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x28}}, {{&(0x7f0000000a80)=@abs, 0x6e, &(0x7f0000000bc0)=[{&(0x7f0000000b00)=""/142, 0x8e}], 0x1, &(0x7f0000000c00)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xa0}}, {{&(0x7f0000000cc0), 0x6e, &(0x7f0000001140)=[{&(0x7f0000000d40)=""/86, 0x56}, {&(0x7f0000000dc0)=""/32, 0x20}, {&(0x7f0000000e00)=""/158, 0x9e}, {&(0x7f0000000ec0)=""/86, 0x56}, {&(0x7f0000000f40)=""/155, 0x9b}, {&(0x7f0000001000)=""/146, 0x92}, {&(0x7f00000010c0)=""/70, 0x46}, {&(0x7f0000001200)=""/199, 0xc7}], 0x8, &(0x7f0000001300)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x120}}, {{&(0x7f0000001440)=@abs, 0x6e, &(0x7f0000001840)=[{&(0x7f00000014c0)=""/253, 0xfd}, {&(0x7f00000015c0)=""/154, 0x9a}, {&(0x7f0000001680)=""/49, 0x31}, {&(0x7f00000016c0)=""/214, 0xd6}, {&(0x7f00000017c0)=""/124, 0x7c}], 0x5, &(0x7f00000018c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x60}}], 0x5, 0x12100, &(0x7f0000001a80)={0x77359400}) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x90414a, &(0x7f0000001ac0)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@cachetag={'cachetag', 0x3d, '-@^(\x0f(*^[}-/'}}, {@cache_loose}, {@noextend}, {@uname={'uname', 0x3d, 'io.max\x00'}}], [{@obj_user={'obj_user', 0x3d, 'io.max\x00'}}, {@uid_gt={'uid>', r7}}, {@permit_directio}, {@fsuuid={'fsuuid', 0x3d, {[0x32, 0x32, 0x31, 0x36, 0x62, 0x65, 0x62, 0x36], 0x2d, [0x64, 0x35, 0x36, 0x33], 0x2d, [0x37, 0x32, 0x35, 0x33], 0x2d, [0x61, 0x62, 0x61], 0x2d, [0x66, 0x37, 0x64, 0x31, 0x37, 0x31, 0x63, 0x35]}}}, {@pcr={'pcr', 0x3d, 0x18}}, {@pcr={'pcr', 0x3d, 0x3f}}, {@subj_type={'subj_type', 0x3d, 'io.max\x00'}}, {@uid_lt={'uid<', r8}}]}}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) 23:27:47 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x3000000, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:27:47 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0xb000000, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:27:47 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x4000, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:28:01 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) fork() (fail_nth: 56) 23:28:01 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0xb000000, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:28:01 executing program 4: signalfd(0xffffffffffffffff, &(0x7f00000011c0), 0x8) r0 = dup(0xffffffffffffffff) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) clone3(0x0, 0x0) r1 = epoll_create1(0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000000)) pipe2(&(0x7f0000000080), 0x84000) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) 23:28:01 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0xb000000, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:28:01 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0xc000000, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:28:01 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) fork() (fail_nth: 48) 23:28:01 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x4000000, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:28:01 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x6311, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:28:01 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0xc000000, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:28:01 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0xff3f, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:28:01 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0xc000000, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:28:02 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0xd000000, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:28:02 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x1874d, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:28:12 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0xd000000, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:28:12 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x80000, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:28:12 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x5000000, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:28:12 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) fork() (fail_nth: 49) 23:28:12 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) fork() (fail_nth: 57) 23:28:12 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0xd000000, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:28:12 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0xe000000, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:28:12 executing program 4: r0 = signalfd(0xffffffffffffffff, &(0x7f00000011c0), 0x8) r1 = dup(0xffffffffffffffff) clone3(0x0, 0x0) r2 = epoll_create1(0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) sendfile(r4, r4, 0x0, 0x100000) r5 = fsmount(r0, 0x1, 0xf2) r6 = syz_open_dev$vcsa(&(0x7f0000001140), 0x3ff, 0x2000) r7 = fsmount(r0, 0x1, 0xf2) r8 = signalfd4(r1, &(0x7f0000001680)={[0x5]}, 0x8, 0x800) recvmmsg$unix(r1, &(0x7f0000002240)=[{{&(0x7f0000001780), 0x6e, &(0x7f0000001a00)=[{&(0x7f0000001800)=""/34, 0x22}, {&(0x7f0000001840)=""/138, 0x8a}, {&(0x7f0000001900)=""/216, 0xd8}], 0x3}}, {{&(0x7f0000001a40), 0x6e, &(0x7f0000001d40)=[{&(0x7f0000001ac0)=""/23, 0x17}, {&(0x7f0000001b00)=""/148, 0x94}, {&(0x7f0000001bc0)=""/39, 0x27}, {&(0x7f0000001c00)=""/218, 0xda}, {&(0x7f0000001d00)=""/34, 0x22}], 0x5, &(0x7f0000001dc0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}}, {{&(0x7f0000001e40)=@abs, 0x6e, &(0x7f0000002140)=[{0xffffffffffffffff}, {&(0x7f0000001ec0)=""/230, 0xe6}, {&(0x7f0000001fc0)=""/172, 0xac}, {&(0x7f0000002080)=""/133, 0x85}], 0x4, &(0x7f0000002180)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa8}}], 0x3, 0x2040, 0x0) r10 = syz_open_dev$usbmon(&(0x7f0000002340), 0x101, 0x281) r11 = openat$zero(0xffffffffffffff9c, &(0x7f0000002400), 0x210201, 0x0) io_submit(0x0, 0xa, &(0x7f0000002500)=[&(0x7f0000001080)={0x0, 0x0, 0x0, 0x5, 0x4, 0xffffffffffffffff, &(0x7f0000000080)="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", 0x1000, 0x50c, 0x0, 0x3, r4}, &(0x7f0000001100)={0x0, 0x0, 0x0, 0x1, 0xf800, r3, &(0x7f00000010c0)="b6723a494e5b3c", 0x7, 0x790, 0x0, 0x0, r5}, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x8, 0x6e5, r3, &(0x7f0000001200)="74cb44e786b471f7ce6fbc50154f5606250e8a2efd43988eaf22189fb0cf21c6091130980aed2b6ca0d4964a8f3324429666618cffccac7bacc74fe9f27ac11d3af51aa898014724941b6ab52ec10e090007fa2e1f2da6396250b75a14de23180875d47cb0338aedb94361dec6ae5f47071c1f432ad56696908a79e00591b9f374490c51df7e94", 0x87, 0x5, 0x0, 0x1, r6}, &(0x7f0000001300)={0x0, 0x0, 0x0, 0x6, 0x81, r3, &(0x7f00000012c0)="b8befdc05598090e612392c207ab0313246629aabc5ea3163bcc02709345a712f59a00c1e8dceef31c8887bc9a6d593e37c15697", 0x34, 0x7, 0x0, 0x2, r1}, &(0x7f0000001440)={0x0, 0x0, 0x0, 0x1, 0x9, r3, &(0x7f0000001340)="35f834f46cf9417a25e373abf937d3082dc8c14fcbeb545b6fcdf38c58e191a6314819dcbb6d582258818d1ec613a24962a50a2ea282d5899a518d501da3ade80c8df7e9cff624d86054b4682cd9213afce97b6fb669ce8e83c9979b0e99e4c37e48dee87cd6ffb8e45cc9cdb22c5ac69888cd9f477c28af371750cac3fd122aa824b8f623ca2a7a16787c7b93080288191296e1907c9299483236db573f0d5105e96a5308d003772b0fae9996eb58739b8fdbdb366314984d76a1c6bedf4f6a6217c183", 0xc4, 0xfff, 0x0, 0x2}, &(0x7f0000001500)={0x0, 0x0, 0x0, 0x6, 0x3f, r2, &(0x7f0000001480)="5e19a7f3aebb039c3c0335018191b016a8a56d12e596695a86587d2a5148dd115aa6289f9ee865beba13af1a9f06bdc66787b3c078518cbab2ae061bfec46314e3a7a0eb34ad34ccde", 0x49, 0x10000, 0x0, 0x2}, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x2, 0x0, r3, &(0x7f0000001540)="819a3c1a026fa7f3fa275ec598c5e30f65698a4f0500f902b3c55ffdfd9a99b070faf4a63865c8797a0196bee75bc55c0dbd1de80afdabe9be411857c4f21c40d1e28708ae7ddf099e2e80f24f10b8361206cbd9426f4240f8903952fa9a6ae3b89b7af4cde8d695311f84f7a5e8cbd7080033d39cb3ebdbe2489a30f129b9f9eababc633e6b2eae24fdb236e5a61547a4b0e6b1aa34bd34588457ffc562eb77f7dcbedc1cce84047211b7c5e1a4ae6a2428279ec7e174d925d0e256bef39067de4de40be5bc5db94c06c792211d5d2aebe6a177500c0f99a85a79127496a1a123a48680fe823de6d7ad8a458ca41c6591", 0xf1, 0x3f, 0x0, 0x0, r7}, &(0x7f0000002300)={0x0, 0x0, 0x0, 0x8, 0x401, r8, &(0x7f00000016c0)="8821fb07205dd28aa5280118ebbf6bdf86453b4b9135fb72da29cdc8cb57ffd2563f5e5397adcb714ab5208e76814310fdc50a8f2b48ecde5ee92b9684f6cbcca0baf2faed372400ae6360d5a07a4fc56223f232125e2e0354621ea2b0df2d69e64426a178453ee72f2f593a91772d3dcd06668e5fae3fd3b4f1616230c6ad1f45b01421ab4db13a184afaff045e02dc7a", 0x91, 0xa1, 0x0, 0x1, r9}, &(0x7f0000002440)={0x0, 0x0, 0x0, 0x5, 0x2, r10, &(0x7f0000002380)="92d6b2030465e5b1e76c819d645cc40ae2cec7a7c65066bc192f73af80b01eabde7c823d13b08b698d29e2858ecee3203cbc5c93461abc89b9d592e95cbc207dbeaa77faaf20640a8ad7504b432544a5ab5e5d0d738573a794c855f71e42352514d3e6707ec696a0e15a49a9b76c8cdb57fdae83b5", 0x75, 0x9, 0x0, 0x1, r11}, &(0x7f00000024c0)={0x0, 0x0, 0x0, 0x2, 0x0, r3, &(0x7f0000002480)="9e631c9c434b5992cb30fafe460ec090c68487a25b0a4c4e165828eef4e675cc4bbc663dca4cfdc309753fa7111866c46220359f05", 0x35, 0xa9e4, 0x0, 0x3, r0}]) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000000)) openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) [ 1096.804418] FAULT_INJECTION: forcing a failure. [ 1096.804418] name failslab, interval 1, probability 0, space 0, times 0 [ 1096.805916] CPU: 0 PID: 8039 Comm: syz-executor.0 Not tainted 6.4.0-next-20230630 #1 [ 1096.807014] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1096.808233] Call Trace: [ 1096.808582] [ 1096.808891] dump_stack_lvl+0xc1/0xf0 [ 1096.809421] should_fail_ex+0x4b4/0x5b0 [ 1096.809968] ? vm_area_dup+0x52/0x160 [ 1096.810495] should_failslab+0x9/0x20 [ 1096.811034] kmem_cache_alloc+0x62/0x370 [ 1096.811594] vm_area_dup+0x52/0x160 [ 1096.812098] dup_mmap+0x94e/0x1770 [ 1096.812597] ? perf_trace_preemptirq_template+0x252/0x420 [ 1096.813343] ? __pfx_dup_mmap+0x10/0x10 [ 1096.813885] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 1096.814581] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1096.815286] ? mm_init+0xb4a/0xe70 [ 1096.815787] copy_process+0x3e68/0x7320 [ 1096.816355] ? __pfx_copy_process+0x10/0x10 [ 1096.816935] ? find_held_lock+0x2c/0x110 [ 1096.817498] ? ksys_write+0x122/0x250 [ 1096.818015] ? ksys_write+0x20f/0x250 [ 1096.818523] ? lock_release+0x1e3/0x680 [ 1096.819079] kernel_clone+0xeb/0x7d0 [ 1096.819596] ? __pfx_kernel_clone+0x10/0x10 [ 1096.820187] ? perf_trace_run_bpf_submit+0xf3/0x190 [ 1096.820847] ? perf_trace_run_bpf_submit+0xf3/0x190 [ 1096.821524] __do_sys_fork+0x80/0xc0 [ 1096.822035] ? __pfx___do_sys_fork+0x10/0x10 [ 1096.822635] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 1096.823441] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 1096.824135] ? syscall_enter_from_user_mode+0x21/0x50 [ 1096.824830] ? syscall_enter_from_user_mode+0x21/0x50 [ 1096.825504] do_syscall_64+0x3f/0x90 [ 1096.826019] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 1096.826718] RIP: 0033:0x7f1199da5b19 [ 1096.827206] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1096.829483] RSP: 002b:00007f119731b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1096.830457] RAX: ffffffffffffffda RBX: 00007f1199eb8f60 RCX: 00007f1199da5b19 [ 1096.831379] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1096.832281] RBP: 00007f119731b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1096.833194] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1096.834099] R13: 00007ffca84fd02f R14: 00007f119731b300 R15: 0000000000022000 [ 1096.835060] [ 1096.840243] FAULT_INJECTION: forcing a failure. [ 1096.840243] name failslab, interval 1, probability 0, space 0, times 0 [ 1096.841091] CPU: 1 PID: 8038 Comm: syz-executor.7 Not tainted 6.4.0-next-20230630 #1 [ 1096.841642] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1096.842220] Call Trace: [ 1096.842404] [ 1096.842568] dump_stack_lvl+0xc1/0xf0 [ 1096.842881] should_fail_ex+0x4b4/0x5b0 [ 1096.843197] ? anon_vma_fork+0xe6/0x630 [ 1096.843493] should_failslab+0x9/0x20 [ 1096.843772] kmem_cache_alloc+0x62/0x370 [ 1096.844080] anon_vma_fork+0xe6/0x630 [ 1096.844365] ? __init_rwsem+0x12d/0x1b0 [ 1096.844678] dup_mmap+0xe49/0x1770 [ 1096.844959] ? __pfx_dup_mmap+0x10/0x10 [ 1096.845265] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 1096.845641] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1096.846026] ? mm_init+0xb4a/0xe70 [ 1096.846301] copy_process+0x3e68/0x7320 [ 1096.846620] ? __pfx_copy_process+0x10/0x10 [ 1096.846947] ? find_held_lock+0x2c/0x110 [ 1096.847271] ? ksys_write+0x122/0x250 [ 1096.847554] ? ksys_write+0x20f/0x250 [ 1096.847834] ? lock_release+0x1e3/0x680 [ 1096.848144] kernel_clone+0xeb/0x7d0 [ 1096.848442] ? __pfx_kernel_clone+0x10/0x10 [ 1096.848766] ? perf_trace_run_bpf_submit+0xf3/0x190 [ 1096.849146] ? perf_trace_run_bpf_submit+0xf3/0x190 [ 1096.849519] __do_sys_fork+0x80/0xc0 [ 1096.849806] ? __pfx___do_sys_fork+0x10/0x10 [ 1096.850142] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 1096.850605] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 1096.851004] ? syscall_enter_from_user_mode+0x21/0x50 [ 1096.851464] ? syscall_enter_from_user_mode+0x21/0x50 [ 1096.851876] do_syscall_64+0x3f/0x90 [ 1096.852174] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 1096.852558] RIP: 0033:0x7f2ec8a71b19 [ 1096.852830] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1096.854091] RSP: 002b:00007f2ec5fe7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1096.854638] RAX: ffffffffffffffda RBX: 00007f2ec8b84f60 RCX: 00007f2ec8a71b19 [ 1096.855166] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1096.855664] RBP: 00007f2ec5fe71d0 R08: 0000000000000000 R09: 0000000000000000 [ 1096.856176] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1096.856676] R13: 00007ffff806eeff R14: 00007f2ec5fe7300 R15: 0000000000022000 [ 1096.857201] 23:28:12 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0xe000000, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:28:25 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) fork() (fail_nth: 58) 23:28:25 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x6000000, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:28:25 executing program 4: signalfd(0xffffffffffffffff, &(0x7f00000011c0), 0x8) dup(0xffffffffffffffff) clone3(0x0, 0x0) r0 = epoll_create1(0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) r3 = epoll_create1(0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000080)) syz_open_dev$tty1(0xc, 0x4, 0x1) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, 0x0) 23:28:25 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0xf000000, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:28:25 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0xe000000, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:28:25 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0xf000000, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:28:25 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x200000, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:28:25 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) fork() (fail_nth: 50) 23:28:25 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) fork() (fail_nth: 59) 23:28:25 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x10000000, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:28:25 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x1000000, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:28:25 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) fork() (fail_nth: 51) 23:28:25 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x10000000, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) [ 1109.859423] FAULT_INJECTION: forcing a failure. [ 1109.859423] name failslab, interval 1, probability 0, space 0, times 0 [ 1109.860296] CPU: 0 PID: 8082 Comm: syz-executor.7 Not tainted 6.4.0-next-20230630 #1 [ 1109.860856] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1109.861437] Call Trace: [ 1109.861631] [ 1109.861803] dump_stack_lvl+0xc1/0xf0 [ 1109.862107] should_fail_ex+0x4b4/0x5b0 [ 1109.862411] ? anon_vma_fork+0x1f4/0x630 [ 1109.862716] should_failslab+0x9/0x20 [ 1109.863027] kmem_cache_alloc+0x62/0x370 [ 1109.863345] anon_vma_fork+0x1f4/0x630 [ 1109.863642] dup_mmap+0xe49/0x1770 [ 1109.863932] ? __pfx_dup_mmap+0x10/0x10 [ 1109.864248] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 1109.864640] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1109.865026] ? mm_init+0xb4a/0xe70 [ 1109.865309] copy_process+0x3e68/0x7320 [ 1109.865633] ? __pfx_copy_process+0x10/0x10 [ 1109.865957] ? find_held_lock+0x2c/0x110 [ 1109.866272] ? ksys_write+0x122/0x250 [ 1109.866563] ? ksys_write+0x20f/0x250 [ 1109.866853] ? lock_release+0x1e3/0x680 [ 1109.867157] kernel_clone+0xeb/0x7d0 [ 1109.867451] ? __pfx_kernel_clone+0x10/0x10 [ 1109.867781] ? perf_trace_run_bpf_submit+0xf3/0x190 [ 1109.868150] ? perf_trace_run_bpf_submit+0xf3/0x190 [ 1109.868532] __do_sys_fork+0x80/0xc0 [ 1109.868827] ? __pfx___do_sys_fork+0x10/0x10 [ 1109.869163] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 1109.869613] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 1109.870007] ? syscall_enter_from_user_mode+0x21/0x50 [ 1109.870397] ? syscall_enter_from_user_mode+0x21/0x50 [ 1109.870785] do_syscall_64+0x3f/0x90 [ 1109.871091] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 1109.871479] RIP: 0033:0x7f2ec8a71b19 [ 1109.871752] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1109.873054] RSP: 002b:00007f2ec5fe7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1109.873599] RAX: ffffffffffffffda RBX: 00007f2ec8b84f60 RCX: 00007f2ec8a71b19 [ 1109.874117] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1109.874647] RBP: 00007f2ec5fe71d0 R08: 0000000000000000 R09: 0000000000000000 [ 1109.875171] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1109.875682] R13: 00007ffff806eeff R14: 00007f2ec5fe7300 R15: 0000000000022000 [ 1109.876212] 23:28:25 executing program 4: signalfd(0xffffffffffffffff, &(0x7f00000011c0), 0x8) dup(0xffffffffffffffff) clone3(0x0, 0x0) r0 = epoll_create1(0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) epoll_create(0x20) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) 23:28:25 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0xf000000, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:28:25 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x11000000, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:28:25 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x7000000, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) [ 1109.928522] FAULT_INJECTION: forcing a failure. [ 1109.928522] name failslab, interval 1, probability 0, space 0, times 0 [ 1109.929540] CPU: 0 PID: 8088 Comm: syz-executor.0 Not tainted 6.4.0-next-20230630 #1 [ 1109.929559] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1109.929569] Call Trace: [ 1109.929574] [ 1109.929580] dump_stack_lvl+0xc1/0xf0 [ 1109.929611] should_fail_ex+0x4b4/0x5b0 [ 1109.929634] ? vm_area_dup+0x20/0x160 [ 1109.929658] should_failslab+0x9/0x20 [ 1109.929676] kmem_cache_alloc+0x62/0x370 [ 1109.929703] vm_area_dup+0x20/0x160 [ 1109.929726] dup_mmap+0x94e/0x1770 [ 1109.929758] ? __pfx_dup_mmap+0x10/0x10 [ 1109.929789] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 1109.929811] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1109.929840] ? mm_init+0xb4a/0xe70 [ 1109.929866] copy_process+0x3e68/0x7320 [ 1109.929905] ? __pfx_copy_process+0x10/0x10 23:28:26 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x11000000, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) [ 1109.929930] ? find_held_lock+0x2c/0x110 [ 1109.929956] ? ksys_write+0x122/0x250 23:28:26 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) fork() (fail_nth: 52) [ 1109.929978] ? ksys_write+0x20f/0x250 [ 1109.929994] ? lock_release+0x1e3/0x680 [ 1109.930018] kernel_clone+0xeb/0x7d0 [ 1109.930045] ? __pfx_kernel_clone+0x10/0x10 [ 1109.930075] ? perf_trace_run_bpf_submit+0xf3/0x190 [ 1109.930096] ? perf_trace_run_bpf_submit+0xf3/0x190 [ 1109.930123] __do_sys_fork+0x80/0xc0 [ 1109.930148] ? __pfx___do_sys_fork+0x10/0x10 [ 1109.930175] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 1109.930211] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 1109.930231] ? syscall_enter_from_user_mode+0x21/0x50 [ 1109.930255] ? syscall_enter_from_user_mode+0x21/0x50 [ 1109.930278] do_syscall_64+0x3f/0x90 [ 1109.930302] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 1109.930330] RIP: 0033:0x7f1199da5b19 [ 1109.930342] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1109.930359] RSP: 002b:00007f119731b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1109.930376] RAX: ffffffffffffffda RBX: 00007f1199eb8f60 RCX: 00007f1199da5b19 [ 1109.930388] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1109.930398] RBP: 00007f119731b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1109.930409] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1109.930419] R13: 00007ffca84fd02f R14: 00007f119731b300 R15: 0000000000022000 [ 1109.930444] 23:28:38 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x12000000, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:28:38 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x10000000, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:28:38 executing program 4: r0 = signalfd(0xffffffffffffffff, &(0x7f00000011c0), 0x8) r1 = dup(0xffffffffffffffff) r2 = clone3(0x0, 0x0) r3 = epoll_create1(0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000000)) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000500)={{0x1, 0x1, 0x18, r0, {0x400}}, './file0\x00'}) clone3(&(0x7f0000000540)={0x80000000, &(0x7f0000000240), &(0x7f0000000300), &(0x7f0000000340), {0x31}, &(0x7f0000000380)=""/238, 0xee, &(0x7f0000000480)=""/58, &(0x7f00000004c0)=[r2, r2, r2], 0x3, {r5}}, 0x58) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xa, 0x10, 0xffffffffffffffff, 0x0) r7 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x10000000) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r8, &(0x7f0000000000)) ioctl$TIOCVHANGUP(r8, 0x5437, 0x0) r9 = mq_open(&(0x7f0000000680)='\x00', 0x80, 0x12a, &(0x7f00000006c0)={0x9, 0x3f, 0x8, 0x9}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000700)={{0x1, 0x1, 0x18, r8, {r9}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, r4, {0xffffffffffffffff, 0xee00}}, './file0\x00'}) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, r10, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@phonet={0x23, 0x2, 0x5, 0x15}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000100)="abc68b2d4a2900646d254a64bb661711f783da2dab7f1478ee83207e33c68fec6c9c74b0b54ff1c958bce9095ed14ff411650fb81db39673080e826dc89771394b5ab1d6590795287cdb04efb5e7b21316b2cb5deb825c8acefc9dc0d379e3a27a8b361a5b41d14dbd4cd133e3d9d516077d2e18f4d7b71901fe0b5900c6d5bcc7d509379f87229a6cec", 0x8a}, {&(0x7f00000001c0)="4934f4e02917655abf3b0ea05269", 0xe}], 0x2, &(0x7f0000000240)}, 0x0, 0x20050000, 0x1}, 0x8) ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) 23:28:38 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x8000000, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:28:38 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x2000000, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:28:38 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x12000000, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:28:38 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) fork() (fail_nth: 53) 23:28:38 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) fork() (fail_nth: 60) [ 1122.217464] FAULT_INJECTION: forcing a failure. [ 1122.217464] name failslab, interval 1, probability 0, space 0, times 0 [ 1122.218392] CPU: 1 PID: 8124 Comm: syz-executor.0 Not tainted 6.4.0-next-20230630 #1 [ 1122.218933] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1122.219522] Call Trace: [ 1122.219708] [ 1122.219874] dump_stack_lvl+0xc1/0xf0 [ 1122.220167] should_fail_ex+0x4b4/0x5b0 [ 1122.220457] ? vm_area_dup+0x52/0x160 [ 1122.220743] should_failslab+0x9/0x20 [ 1122.221013] kmem_cache_alloc+0x62/0x370 [ 1122.221313] vm_area_dup+0x52/0x160 [ 1122.221587] dup_mmap+0x94e/0x1770 [ 1122.221864] ? __pfx_dup_mmap+0x10/0x10 [ 1122.222166] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 1122.222523] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1122.222893] ? mm_init+0xb4a/0xe70 [ 1122.223169] copy_process+0x3e68/0x7320 [ 1122.223477] ? __pfx_copy_process+0x10/0x10 [ 1122.223794] ? find_held_lock+0x2c/0x110 [ 1122.224098] ? ksys_write+0x122/0x250 [ 1122.224381] ? ksys_write+0x20f/0x250 [ 1122.224657] ? lock_release+0x1e3/0x680 [ 1122.224952] kernel_clone+0xeb/0x7d0 [ 1122.225233] ? __pfx_kernel_clone+0x10/0x10 [ 1122.225538] ? perf_trace_run_bpf_submit+0xf3/0x190 [ 1122.225892] ? perf_trace_run_bpf_submit+0xf3/0x190 [ 1122.226264] __do_sys_fork+0x80/0xc0 [ 1122.226544] ? __pfx___do_sys_fork+0x10/0x10 [ 1122.226853] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 1122.227294] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 1122.227673] ? syscall_enter_from_user_mode+0x21/0x50 [ 1122.228042] ? syscall_enter_from_user_mode+0x21/0x50 [ 1122.228414] do_syscall_64+0x3f/0x90 [ 1122.228696] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 1122.229082] RIP: 0033:0x7f1199da5b19 [ 1122.229354] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1122.230597] RSP: 002b:00007f119731b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1122.231107] RAX: ffffffffffffffda RBX: 00007f1199eb8f60 RCX: 00007f1199da5b19 [ 1122.231597] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1122.232097] RBP: 00007f119731b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1122.232593] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1122.233088] R13: 00007ffca84fd02f R14: 00007f119731b300 R15: 0000000000022000 [ 1122.233601] 23:28:38 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x3000000, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:28:38 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) fork() (fail_nth: 54) 23:28:38 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x13000000, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:28:38 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x13000000, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:28:38 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x11000000, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:28:38 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x4000000, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:28:38 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x9000000, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:28:38 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x14000000, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:28:50 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) fork() (fail_nth: 55) 23:28:50 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x14000000, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:28:50 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x15000000, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:28:50 executing program 4: r0 = signalfd(0xffffffffffffffff, &(0x7f00000011c0), 0x8) r1 = dup(0xffffffffffffffff) clone3(0x0, 0x0) r2 = epoll_create1(0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000000)) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {r1}}, './file0\x00'}) r5 = epoll_create1(0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000000)) ioctl$TIOCVHANGUP(r6, 0x5437, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r6, &(0x7f0000000080)={0x8}) syz_open_dev$tty1(0xc, 0x4, 0x1) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) 23:28:50 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x5000000, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:28:50 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) fork() (fail_nth: 61) 23:28:50 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0xa000000, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:28:50 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x12000000, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) [ 1134.498333] FAULT_INJECTION: forcing a failure. [ 1134.498333] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1134.499382] CPU: 1 PID: 8179 Comm: syz-executor.7 Not tainted 6.4.0-next-20230630 #1 [ 1134.500029] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1134.500741] Call Trace: [ 1134.500968] [ 1134.501177] dump_stack_lvl+0xc1/0xf0 [ 1134.501543] should_fail_ex+0x4b4/0x5b0 [ 1134.501904] __should_fail_alloc_page+0xe0/0x110 [ 1134.502341] prepare_alloc_pages+0x178/0x500 [ 1134.502741] ? __pfx___lock_acquire+0x10/0x10 [ 1134.503145] __alloc_pages+0x149/0x480 [ 1134.503411] ? __pfx___alloc_pages+0x10/0x10 [ 1134.503798] ? copy_page_range+0x1f62/0x31e0 [ 1134.504084] ? lock_release+0x1e3/0x680 [ 1134.504437] alloc_pages+0x1a0/0x260 [ 1134.504689] get_zeroed_page+0x18/0xb0 [ 1134.505019] __pud_alloc+0x37/0x270 [ 1134.505266] copy_page_range+0x24be/0x31e0 [ 1134.505627] ? perf_trace_preemptirq_template+0x252/0x420 [ 1134.505991] ? mas_wr_modify+0x77a/0x1330 [ 1134.506357] ? __pfx_copy_page_range+0x10/0x10 [ 1134.506663] ? mas_store+0xb0/0xf0 [ 1134.506967] ? __pfx_mas_store+0x10/0x10 [ 1134.507257] ? up_write+0x196/0x510 [ 1134.507580] ? lock_is_held_type+0x9f/0x120 [ 1134.507867] dup_mmap+0xee2/0x1770 [ 1134.508192] ? __pfx_dup_mmap+0x10/0x10 [ 1134.508554] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 1134.508952] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1134.509400] ? mm_init+0xb4a/0xe70 [ 1134.509644] copy_process+0x3e68/0x7320 [ 1134.509931] ? __pfx_copy_process+0x10/0x10 [ 1134.510212] ? find_held_lock+0x2c/0x110 [ 1134.510488] ? ksys_write+0x122/0x250 [ 1134.510738] ? ksys_write+0x20f/0x250 [ 1134.510981] ? lock_release+0x1e3/0x680 [ 1134.511249] kernel_clone+0xeb/0x7d0 [ 1134.511501] ? __pfx_kernel_clone+0x10/0x10 [ 1134.511788] ? perf_trace_run_bpf_submit+0xf3/0x190 [ 1134.512106] ? perf_trace_run_bpf_submit+0xf3/0x190 [ 1134.512434] __do_sys_fork+0x80/0xc0 [ 1134.512681] ? __pfx___do_sys_fork+0x10/0x10 [ 1134.512973] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 1134.513350] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 1134.513684] ? syscall_enter_from_user_mode+0x21/0x50 [ 1134.514014] ? syscall_enter_from_user_mode+0x21/0x50 [ 1134.514344] do_syscall_64+0x3f/0x90 [ 1134.514593] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 1134.514932] RIP: 0033:0x7f2ec8a71b19 [ 1134.515183] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1134.516262] RSP: 002b:00007f2ec5fe7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1134.516723] RAX: ffffffffffffffda RBX: 00007f2ec8b84f60 RCX: 00007f2ec8a71b19 [ 1134.517158] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1134.517597] RBP: 00007f2ec5fe71d0 R08: 0000000000000000 R09: 0000000000000000 [ 1134.518036] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1134.518468] R13: 00007ffff806eeff R14: 00007f2ec5fe7300 R15: 0000000000022000 [ 1134.518917] 23:28:50 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x13000000, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:28:50 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x15000000, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:28:50 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) fork() (fail_nth: 62) 23:28:50 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x14000000, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:28:50 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x16000000, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:28:50 executing program 4: signalfd(0xffffffffffffffff, &(0x7f00000011c0), 0x8) dup(0xffffffffffffffff) clone3(0x0, 0x0) r0 = epoll_create1(0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) ioctl$VT_RESIZEX(r1, 0x560a, &(0x7f0000000040)={0x7, 0x2ae, 0x6, 0x1, 0x40, 0x8001}) 23:28:50 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x16000000, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:28:50 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x6000000, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) [ 1134.720857] FAULT_INJECTION: forcing a failure. [ 1134.720857] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1134.720886] CPU: 1 PID: 8205 Comm: syz-executor.7 Not tainted 6.4.0-next-20230630 #1 [ 1134.720905] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1134.720914] Call Trace: [ 1134.720919] [ 1134.720925] dump_stack_lvl+0xc1/0xf0 [ 1134.720956] should_fail_ex+0x4b4/0x5b0 [ 1134.720979] __should_fail_alloc_page+0xe0/0x110 [ 1134.721004] prepare_alloc_pages+0x178/0x500 [ 1134.721028] ? __memcg_kmem_charge_page+0x334/0x3d0 [ 1134.721049] __alloc_pages+0x149/0x480 [ 1134.721076] ? __pfx___alloc_pages+0x10/0x10 [ 1134.721099] ? find_held_lock+0x2c/0x110 [ 1134.721131] ? __pfx_lock_release+0x10/0x10 [ 1134.721150] ? do_raw_spin_lock+0x125/0x270 [ 1134.721178] alloc_pages+0x1a0/0x260 [ 1134.721203] __pmd_alloc+0x3b/0x690 [ 1134.721223] copy_page_range+0x244c/0x31e0 [ 1134.721246] ? perf_trace_preemptirq_template+0x252/0x420 [ 1134.721290] ? __pfx_copy_page_range+0x10/0x10 [ 1134.721314] ? mas_store+0xb0/0xf0 [ 1134.721331] ? __pfx_mas_store+0x10/0x10 [ 1134.721356] ? up_write+0x196/0x510 [ 1134.721376] ? lock_is_held_type+0x9f/0x120 [ 1134.721401] dup_mmap+0xee2/0x1770 [ 1134.721434] ? __pfx_dup_mmap+0x10/0x10 [ 1134.721465] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 1134.721485] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1134.721512] ? mm_init+0xb4a/0xe70 [ 1134.721538] copy_process+0x3e68/0x7320 [ 1134.721577] ? __pfx_copy_process+0x10/0x10 [ 1134.721602] ? find_held_lock+0x2c/0x110 [ 1134.721626] ? ksys_write+0x122/0x250 [ 1134.721647] ? ksys_write+0x20f/0x250 [ 1134.721663] ? lock_release+0x1e3/0x680 [ 1134.721687] kernel_clone+0xeb/0x7d0 [ 1134.721714] ? __pfx_kernel_clone+0x10/0x10 [ 1134.721743] ? perf_trace_run_bpf_submit+0xf3/0x190 [ 1134.721764] ? perf_trace_run_bpf_submit+0xf3/0x190 [ 1134.721791] __do_sys_fork+0x80/0xc0 [ 1134.721816] ? __pfx___do_sys_fork+0x10/0x10 [ 1134.721840] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 1134.721874] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 1134.721894] ? syscall_enter_from_user_mode+0x21/0x50 [ 1134.721917] ? syscall_enter_from_user_mode+0x21/0x50 [ 1134.721939] do_syscall_64+0x3f/0x90 [ 1134.721964] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 1134.721992] RIP: 0033:0x7f2ec8a71b19 [ 1134.722004] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1134.722020] RSP: 002b:00007f2ec5fe7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1134.722036] RAX: ffffffffffffffda RBX: 00007f2ec8b84f60 RCX: 00007f2ec8a71b19 [ 1134.722047] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1134.722057] RBP: 00007f2ec5fe71d0 R08: 0000000000000000 R09: 0000000000000000 [ 1134.722067] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1134.722077] R13: 00007ffff806eeff R14: 00007f2ec5fe7300 R15: 0000000000022000 [ 1134.722102] 23:29:03 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) fork() (fail_nth: 63) 23:29:03 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x15000000, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:29:03 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0xb000000, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:29:03 executing program 4: signalfd(0xffffffffffffffff, &(0x7f00000011c0), 0x8) r0 = dup(0xffffffffffffffff) clone3(0x0, 0x0) r1 = epoll_create1(0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000000)) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r3, 0x4b60, &(0x7f0000000080)=""/4096) mkdirat$cgroup(r0, &(0x7f0000000040)='syz0\x00', 0x1ff) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) 23:29:03 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x17000000, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:29:03 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) fork() (fail_nth: 56) 23:29:03 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x7000000, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:29:03 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x17000000, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:29:03 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x18000000, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:29:03 executing program 4: signalfd(0xffffffffffffffff, &(0x7f00000011c0), 0x8) r0 = dup(0xffffffffffffffff) clone3(0x0, 0x0) r1 = epoll_create1(0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @out_args}, './file0\x00'}) ioctl$PIO_UNIMAP(r3, 0x4b67, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x0, 0x7}]}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000000)) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) syz_io_uring_submit(r4, 0x0, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r0, &(0x7f0000000100)=0x80, &(0x7f0000000140)=@x25={0x9, @remote}, 0x0, 0x80000, 0x1}, 0x80) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) [ 1147.492520] FAULT_INJECTION: forcing a failure. [ 1147.492520] name failslab, interval 1, probability 0, space 0, times 0 [ 1147.494091] CPU: 0 PID: 8229 Comm: syz-executor.7 Not tainted 6.4.0-next-20230630 #1 [ 1147.495152] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1147.496271] Call Trace: [ 1147.496639] [ 1147.496971] dump_stack_lvl+0xc1/0xf0 [ 1147.497545] should_fail_ex+0x4b4/0x5b0 [ 1147.498127] ? __pmd_alloc+0x98/0x690 [ 1147.498669] should_failslab+0x9/0x20 [ 1147.499220] kmem_cache_alloc+0x62/0x370 [ 1147.499829] ? alloc_pages+0x1a8/0x260 [ 1147.500392] __pmd_alloc+0x98/0x690 [ 1147.500917] copy_page_range+0x244c/0x31e0 [ 1147.501529] ? perf_trace_preemptirq_template+0x252/0x420 [ 1147.502352] ? __pfx_copy_page_range+0x10/0x10 [ 1147.503013] ? mas_store+0xb0/0xf0 [ 1147.503542] ? __pfx_mas_store+0x10/0x10 [ 1147.504137] ? up_write+0x196/0x510 [ 1147.504678] ? lock_is_held_type+0x9f/0x120 [ 1147.505306] dup_mmap+0xee2/0x1770 [ 1147.505848] ? __pfx_dup_mmap+0x10/0x10 [ 1147.506440] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 1147.507180] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1147.507925] ? mm_init+0xb4a/0xe70 [ 1147.508459] copy_process+0x3e68/0x7320 [ 1147.509067] ? __pfx_copy_process+0x10/0x10 [ 1147.509698] ? find_held_lock+0x2c/0x110 [ 1147.510295] ? ksys_write+0x122/0x250 [ 1147.510855] ? ksys_write+0x20f/0x250 [ 1147.511416] ? lock_release+0x1e3/0x680 [ 1147.511997] kernel_clone+0xeb/0x7d0 [ 1147.512554] ? __pfx_kernel_clone+0x10/0x10 [ 1147.513189] ? perf_trace_run_bpf_submit+0xf3/0x190 [ 1147.513899] ? perf_trace_run_bpf_submit+0xf3/0x190 [ 1147.514627] __do_sys_fork+0x80/0xc0 [ 1147.515179] ? __pfx___do_sys_fork+0x10/0x10 [ 1147.515840] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 1147.516685] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 1147.517421] ? syscall_enter_from_user_mode+0x21/0x50 [ 1147.518148] ? syscall_enter_from_user_mode+0x21/0x50 [ 1147.518885] do_syscall_64+0x3f/0x90 [ 1147.519454] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 1147.520213] RIP: 0033:0x7f2ec8a71b19 [ 1147.520728] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1147.523149] RSP: 002b:00007f2ec5fe7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1147.524215] RAX: ffffffffffffffda RBX: 00007f2ec8b84f60 RCX: 00007f2ec8a71b19 [ 1147.525199] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1147.526166] RBP: 00007f2ec5fe71d0 R08: 0000000000000000 R09: 0000000000000000 [ 1147.527148] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1147.528134] R13: 00007ffff806eeff R14: 00007f2ec5fe7300 R15: 0000000000022000 [ 1147.529132] 23:29:03 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x8000000, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:29:03 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0xc000000, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:29:03 executing program 4: r0 = signalfd(0xffffffffffffffff, &(0x7f00000011c0), 0x8) dup(0xffffffffffffffff) clone3(0x0, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000000040)={@empty, @multicast1}, 0xc) r1 = epoll_create1(0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000000)) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) 23:29:03 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x19000000, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:29:03 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x16000000, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:29:03 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x18000000, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:29:15 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0xd000000, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:29:15 executing program 4: signalfd(0xffffffffffffffff, &(0x7f00000011c0), 0x8) dup(0xffffffffffffffff) clone3(0x0, 0x0) r0 = epoll_create1(0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)) r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r3 = inotify_init() inotify_add_watch(r3, &(0x7f0000000180)='./file0\x00', 0x400) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000001c0)={0x4, 0x80, 0x40, 0x81, 0x4, 0x1f, 0x0, 0x6, 0x90001, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x7f, 0x4, @perf_config_ext={0x1f, 0x8}, 0x44000, 0x348, 0x2, 0x3, 0x14702799, 0x0, 0x20, 0x0, 0x9, 0x0, 0xfffffffffffffffd}, 0xffffffffffffffff, 0xa, r2, 0x6) 23:29:15 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x19000000, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:29:15 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x9000000, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:29:15 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x17000000, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:29:15 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x40000000, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:29:15 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) fork() (fail_nth: 57) 23:29:15 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) fork() (fail_nth: 64) 23:29:15 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x40000000, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) [ 1159.400022] FAULT_INJECTION: forcing a failure. [ 1159.400022] name failslab, interval 1, probability 0, space 0, times 0 [ 1159.400791] CPU: 0 PID: 8281 Comm: syz-executor.0 Not tainted 6.4.0-next-20230630 #1 [ 1159.401283] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1159.401793] Call Trace: [ 1159.401969] [ 1159.402121] dump_stack_lvl+0xc1/0xf0 [ 1159.402394] should_fail_ex+0x4b4/0x5b0 [ 1159.402665] ? anon_vma_fork+0xe6/0x630 [ 1159.402932] should_failslab+0x9/0x20 [ 1159.403184] kmem_cache_alloc+0x62/0x370 [ 1159.403477] anon_vma_fork+0xe6/0x630 [ 1159.403729] ? __init_rwsem+0x12d/0x1b0 [ 1159.404003] dup_mmap+0xe49/0x1770 [ 1159.404262] ? __pfx_dup_mmap+0x10/0x10 [ 1159.404538] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 1159.404882] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1159.405227] ? mm_init+0xb4a/0xe70 [ 1159.405475] copy_process+0x3e68/0x7320 [ 1159.405761] ? __pfx_copy_process+0x10/0x10 [ 1159.406050] ? find_held_lock+0x2c/0x110 [ 1159.406330] ? ksys_write+0x122/0x250 [ 1159.406588] ? ksys_write+0x20f/0x250 [ 1159.406843] ? lock_release+0x1e3/0x680 [ 1159.407114] kernel_clone+0xeb/0x7d0 [ 1159.407373] ? __pfx_kernel_clone+0x10/0x10 [ 1159.407690] ? perf_trace_run_bpf_submit+0xf3/0x190 [ 1159.408016] ? perf_trace_run_bpf_submit+0xf3/0x190 [ 1159.408352] __do_sys_fork+0x80/0xc0 [ 1159.408607] ? __pfx___do_sys_fork+0x10/0x10 [ 1159.408905] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 1159.409299] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 1159.409637] ? syscall_enter_from_user_mode+0x21/0x50 [ 1159.409976] ? syscall_enter_from_user_mode+0x21/0x50 [ 1159.410322] do_syscall_64+0x3f/0x90 [ 1159.410582] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 1159.410925] RIP: 0033:0x7f1199da5b19 [ 1159.411170] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1159.412286] RSP: 002b:00007f119731b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1159.412761] RAX: ffffffffffffffda RBX: 00007f1199eb8f60 RCX: 00007f1199da5b19 [ 1159.413215] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1159.413661] RBP: 00007f119731b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1159.414102] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1159.414545] R13: 00007ffca84fd02f R14: 00007f119731b300 R15: 0000000000022000 [ 1159.415012] 23:29:15 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0xd4110000, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:29:15 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) fork() (fail_nth: 65) 23:29:15 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0xe000000, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:29:15 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x18000000, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:29:15 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0xa000000, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:29:15 executing program 4: sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x3, 0x2, 0x3, 0x0, 0x0, {0x7, 0x0, 0x9}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x20008005) r0 = signalfd(0xffffffffffffffff, &(0x7f00000011c0), 0x8) r1 = dup(0xffffffffffffffff) clone3(0x0, 0x0) r2 = epoll_create1(0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000080)={0x4}) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000000)) ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$netlink(0x10, 0x3, 0x9) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) 23:29:15 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0xff3f0000, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:29:15 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) fork() (fail_nth: 58) 23:29:15 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) fork() (fail_nth: 66) [ 1159.586833] FAULT_INJECTION: forcing a failure. [ 1159.586833] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1159.586863] CPU: 0 PID: 8300 Comm: syz-executor.7 Not tainted 6.4.0-next-20230630 #1 [ 1159.586881] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1159.586891] Call Trace: [ 1159.586896] [ 1159.586902] dump_stack_lvl+0xc1/0xf0 [ 1159.586933] should_fail_ex+0x4b4/0x5b0 [ 1159.586957] __should_fail_alloc_page+0xe0/0x110 [ 1159.586982] prepare_alloc_pages+0x178/0x500 [ 1159.587011] __alloc_pages+0x149/0x480 [ 1159.587034] ? __pfx___alloc_pages+0x10/0x10 [ 1159.587057] ? perf_trace_run_bpf_submit+0xf3/0x190 [ 1159.587084] ? find_held_lock+0x2c/0x110 [ 1159.587111] ? __pmd_alloc+0x315/0x690 23:29:15 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x19000000, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:29:15 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x8000000000000, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) [ 1159.587132] alloc_pages+0x1a0/0x260 [ 1159.587153] pte_alloc_one+0x1a/0x200 [ 1159.587180] __pte_alloc+0x6d/0x210 [ 1159.587205] ? __pfx___pte_alloc+0x10/0x10 [ 1159.587232] ? do_raw_spin_unlock+0x53/0x220 [ 1159.587256] ? _raw_spin_unlock+0x1e/0x40 [ 1159.587274] ? __pmd_alloc+0x31a/0x690 [ 1159.587293] copy_page_range+0x2119/0x31e0 [ 1159.587336] ? __pfx_copy_page_range+0x10/0x10 [ 1159.587360] ? mas_store+0xb0/0xf0 [ 1159.587376] ? __pfx_mas_store+0x10/0x10 [ 1159.587401] ? up_write+0x196/0x510 [ 1159.587438] ? lock_is_held_type+0x9f/0x120 [ 1159.587463] dup_mmap+0xee2/0x1770 [ 1159.587496] ? __pfx_dup_mmap+0x10/0x10 [ 1159.587527] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 1159.587547] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1159.587573] ? mm_init+0xb4a/0xe70 [ 1159.587600] copy_process+0x3e68/0x7320 [ 1159.587638] ? __pfx_copy_process+0x10/0x10 [ 1159.587663] ? find_held_lock+0x2c/0x110 [ 1159.587688] ? ksys_write+0x122/0x250 [ 1159.587708] ? ksys_write+0x20f/0x250 [ 1159.587724] ? lock_release+0x1e3/0x680 [ 1159.587748] kernel_clone+0xeb/0x7d0 [ 1159.587774] ? __pfx_kernel_clone+0x10/0x10 [ 1159.587804] ? perf_trace_run_bpf_submit+0xf3/0x190 [ 1159.587823] ? perf_trace_run_bpf_submit+0xf3/0x190 [ 1159.587850] __do_sys_fork+0x80/0xc0 [ 1159.587875] ? __pfx___do_sys_fork+0x10/0x10 [ 1159.587898] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 1159.587934] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 1159.587953] ? syscall_enter_from_user_mode+0x21/0x50 [ 1159.587977] ? syscall_enter_from_user_mode+0x21/0x50 [ 1159.587999] do_syscall_64+0x3f/0x90 [ 1159.588023] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 1159.588050] RIP: 0033:0x7f2ec8a71b19 [ 1159.588062] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1159.588079] RSP: 002b:00007f2ec5fe7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1159.588095] RAX: ffffffffffffffda RBX: 00007f2ec8b84f60 RCX: 00007f2ec8a71b19 [ 1159.588106] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1159.588116] RBP: 00007f2ec5fe71d0 R08: 0000000000000000 R09: 0000000000000000 [ 1159.588126] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1159.588136] R13: 00007ffff806eeff R14: 00007f2ec5fe7300 R15: 0000000000022000 [ 1159.588161] [ 1159.709753] FAULT_INJECTION: forcing a failure. [ 1159.709753] name failslab, interval 1, probability 0, space 0, times 0 [ 1159.709799] CPU: 1 PID: 8321 Comm: syz-executor.7 Not tainted 6.4.0-next-20230630 #1 [ 1159.709832] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1159.709847] Call Trace: [ 1159.709856] [ 1159.709866] dump_stack_lvl+0xc1/0xf0 [ 1159.709923] should_fail_ex+0x4b4/0x5b0 [ 1159.709962] ? ptlock_alloc+0x21/0x70 [ 1159.709994] should_failslab+0x9/0x20 [ 1159.710024] kmem_cache_alloc+0x62/0x370 [ 1159.710071] ptlock_alloc+0x21/0x70 [ 1159.710106] pte_alloc_one+0x6c/0x200 [ 1159.710148] __pte_alloc+0x6d/0x210 [ 1159.710193] ? __pfx___pte_alloc+0x10/0x10 [ 1159.710237] ? do_raw_spin_unlock+0x53/0x220 [ 1159.710281] ? _raw_spin_unlock+0x1e/0x40 [ 1159.710313] ? __pmd_alloc+0x31a/0x690 [ 1159.710347] copy_page_range+0x2119/0x31e0 [ 1159.710428] ? __pfx_copy_page_range+0x10/0x10 [ 1159.710472] ? mas_store+0xb0/0xf0 [ 1159.710502] ? __pfx_mas_store+0x10/0x10 [ 1159.710549] ? up_write+0x196/0x510 [ 1159.710586] ? lock_is_held_type+0x9f/0x120 [ 1159.710631] dup_mmap+0xee2/0x1770 [ 1159.710692] ? __pfx_dup_mmap+0x10/0x10 [ 1159.710749] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 1159.710785] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1159.710835] ? mm_init+0xb4a/0xe70 [ 1159.710883] copy_process+0x3e68/0x7320 [ 1159.710955] ? __pfx_copy_process+0x10/0x10 [ 1159.711001] ? find_held_lock+0x2c/0x110 [ 1159.711048] ? ksys_write+0x122/0x250 [ 1159.711084] ? ksys_write+0x20f/0x250 [ 1159.711114] ? lock_release+0x1e3/0x680 [ 1159.711159] kernel_clone+0xeb/0x7d0 [ 1159.711209] ? __pfx_kernel_clone+0x10/0x10 [ 1159.711263] ? perf_trace_run_bpf_submit+0xf3/0x190 [ 1159.711300] ? perf_trace_run_bpf_submit+0xf3/0x190 [ 1159.711350] __do_sys_fork+0x80/0xc0 [ 1159.711397] ? __pfx___do_sys_fork+0x10/0x10 [ 1159.747529] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 1159.747608] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 1159.748674] ? syscall_enter_from_user_mode+0x21/0x50 [ 1159.749358] ? syscall_enter_from_user_mode+0x21/0x50 [ 1159.750034] do_syscall_64+0x3f/0x90 [ 1159.750540] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 1159.751227] RIP: 0033:0x7f2ec8a71b19 [ 1159.751728] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1159.753956] RSP: 002b:00007f2ec5fe7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1159.754904] RAX: ffffffffffffffda RBX: 00007f2ec8b84f60 RCX: 00007f2ec8a71b19 [ 1159.755810] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1159.756702] RBP: 00007f2ec5fe71d0 R08: 0000000000000000 R09: 0000000000000000 [ 1159.757599] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1159.758494] R13: 00007ffff806eeff R14: 00007f2ec5fe7300 R15: 0000000000022000 [ 1159.759409] 23:29:15 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x40000000, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:29:15 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x20000000000000, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:29:15 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0xb000000, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:29:15 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0xe20d0000, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:29:27 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0xf000000, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:29:27 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) fork() (fail_nth: 67) 23:29:27 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0xff3f0000, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:29:27 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0xba000000, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:29:27 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0xc000000, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:29:27 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) fork() (fail_nth: 59) 23:29:27 executing program 4: signalfd(0xffffffffffffffff, &(0x7f00000011c0), 0x8) dup(0xffffffffffffffff) clone3(0x0, 0x0) r0 = epoll_create1(0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, &(0x7f0000000000)) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r3 = epoll_create1(0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000000)) ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) r5 = epoll_create1(0x80000) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000040)) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) 23:29:27 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x100000000000000, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:29:27 executing program 4: signalfd(0xffffffffffffffff, &(0x7f00000011c0), 0x8) dup(0xffffffffffffffff) clone3(0x0, 0x0) r0 = epoll_create1(0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) [ 1171.433695] FAULT_INJECTION: forcing a failure. [ 1171.433695] name failslab, interval 1, probability 0, space 0, times 0 [ 1171.434527] CPU: 1 PID: 8359 Comm: syz-executor.0 Not tainted 6.4.0-next-20230630 #1 [ 1171.435073] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1171.435641] Call Trace: [ 1171.435829] [ 1171.435995] dump_stack_lvl+0xc1/0xf0 [ 1171.436292] should_fail_ex+0x4b4/0x5b0 [ 1171.436598] ? anon_vma_fork+0x1f4/0x630 [ 1171.436897] should_failslab+0x9/0x20 [ 1171.437182] kmem_cache_alloc+0x62/0x370 [ 1171.437482] anon_vma_fork+0x1f4/0x630 [ 1171.437769] dup_mmap+0xe49/0x1770 [ 1171.438058] ? __pfx_dup_mmap+0x10/0x10 [ 1171.438372] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 1171.438753] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1171.439126] ? mm_init+0xb4a/0xe70 [ 1171.439395] copy_process+0x3e68/0x7320 [ 1171.439722] ? __pfx_copy_process+0x10/0x10 [ 1171.440044] ? find_held_lock+0x2c/0x110 [ 1171.440354] ? ksys_write+0x122/0x250 [ 1171.440640] ? ksys_write+0x20f/0x250 [ 1171.440920] ? lock_release+0x1e3/0x680 [ 1171.441218] kernel_clone+0xeb/0x7d0 [ 1171.441517] ? __pfx_kernel_clone+0x10/0x10 [ 1171.441849] ? perf_trace_run_bpf_submit+0xf3/0x190 [ 1171.442208] ? perf_trace_run_bpf_submit+0xf3/0x190 [ 1171.442575] __do_sys_fork+0x80/0xc0 [ 1171.442870] ? __pfx___do_sys_fork+0x10/0x10 [ 1171.443226] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 1171.443663] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 1171.444063] ? syscall_enter_from_user_mode+0x21/0x50 [ 1171.444443] ? syscall_enter_from_user_mode+0x21/0x50 [ 1171.444810] do_syscall_64+0x3f/0x90 [ 1171.445094] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 1171.445471] RIP: 0033:0x7f1199da5b19 [ 1171.445746] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1171.447004] RSP: 002b:00007f119731b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1171.447559] RAX: ffffffffffffffda RBX: 00007f1199eb8f60 RCX: 00007f1199da5b19 [ 1171.448098] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1171.448601] RBP: 00007f119731b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1171.449108] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1171.449612] R13: 00007ffca84fd02f R14: 00007f119731b300 R15: 0000000000022000 [ 1171.450128] 23:29:27 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0xd000000, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:29:27 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x10000000, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:29:27 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) fork() (fail_nth: 68) 23:29:27 executing program 4: signalfd(0xffffffffffffffff, &(0x7f00000011c0), 0x8) dup(0xffffffffffffffff) clone3(0x0, 0x0) r0 = epoll_create1(0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) pidfd_send_signal(r2, 0x2a, &(0x7f0000000080)={0x3b, 0x6, 0x435}, 0x0) [ 1171.616919] FAULT_INJECTION: forcing a failure. [ 1171.616919] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1171.616967] CPU: 0 PID: 8381 Comm: syz-executor.7 Not tainted 6.4.0-next-20230630 #1 [ 1171.616999] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1171.617017] Call Trace: [ 1171.617030] [ 1171.617041] dump_stack_lvl+0xc1/0xf0 [ 1171.617093] should_fail_ex+0x4b4/0x5b0 [ 1171.617134] __should_fail_alloc_page+0xe0/0x110 [ 1171.617179] prepare_alloc_pages+0x178/0x500 [ 1171.617232] __alloc_pages+0x149/0x480 [ 1171.617275] ? __pfx___alloc_pages+0x10/0x10 [ 1171.617317] ? find_held_lock+0x2c/0x110 [ 1171.617366] ? copy_page_range+0x17d6/0x31e0 [ 1171.617406] ? __pfx_lock_release+0x10/0x10 [ 1171.617457] vma_alloc_folio+0xe2/0x480 [ 1171.617499] copy_page_range+0x2253/0x31e0 [ 1171.617587] ? __pfx_copy_page_range+0x10/0x10 [ 1171.617637] ? __pfx_mas_store+0x10/0x10 [ 1171.617686] ? up_write+0x196/0x510 [ 1171.617723] ? lock_is_held_type+0x9f/0x120 [ 1171.617770] dup_mmap+0xee2/0x1770 [ 1171.617834] ? __pfx_dup_mmap+0x10/0x10 [ 1171.617892] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 1171.617929] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1171.617982] ? mm_init+0xb4a/0xe70 [ 1171.618031] copy_process+0x3e68/0x7320 [ 1171.618107] ? __pfx_copy_process+0x10/0x10 [ 1171.618153] ? find_held_lock+0x2c/0x110 [ 1171.618200] ? ksys_write+0x122/0x250 [ 1171.618237] ? ksys_write+0x20f/0x250 [ 1171.618268] ? lock_release+0x1e3/0x680 [ 1171.618313] kernel_clone+0xeb/0x7d0 [ 1171.618364] ? __pfx_kernel_clone+0x10/0x10 [ 1171.618420] ? perf_trace_run_bpf_submit+0xf3/0x190 [ 1171.618457] ? perf_trace_run_bpf_submit+0xf3/0x190 [ 1171.618510] __do_sys_fork+0x80/0xc0 [ 1171.618557] ? __pfx___do_sys_fork+0x10/0x10 [ 1171.618601] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 1171.618668] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 1171.618705] ? syscall_enter_from_user_mode+0x21/0x50 [ 1171.618748] ? syscall_enter_from_user_mode+0x21/0x50 [ 1171.618790] do_syscall_64+0x3f/0x90 [ 1171.618834] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 1171.618884] RIP: 0033:0x7f2ec8a71b19 [ 1171.618905] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1171.618934] RSP: 002b:00007f2ec5fe7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1171.618964] RAX: ffffffffffffffda RBX: 00007f2ec8b84f60 RCX: 00007f2ec8a71b19 [ 1171.618984] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1171.619002] RBP: 00007f2ec5fe71d0 R08: 0000000000000000 R09: 0000000000000000 [ 1171.619021] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1171.619039] R13: 00007ffff806eeff R14: 00007f2ec5fe7300 R15: 0000000000022000 [ 1171.619088] 23:29:39 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0xe000000, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:29:39 executing program 4: signalfd(0xffffffffffffffff, &(0x7f00000011c0), 0x8) dup(0xffffffffffffffff) clone3(0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.net/syz0\x00', 0x200002, 0x0) readv(r0, &(0x7f0000000200)=[{&(0x7f0000000040)=""/255, 0xff}, {&(0x7f0000001200)=""/4096, 0x1000}, {&(0x7f0000000140)=""/56, 0x38}, {&(0x7f0000000180)=""/80, 0x50}], 0x4) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000000000)) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, &(0x7f0000000240)) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SPACE_INFO(0xffffffffffffffff, 0xc0109414, &(0x7f0000002200)={0xf53, 0x5afc36e4, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) 23:29:39 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x8000000000000, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:29:39 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) fork() (fail_nth: 69) 23:29:39 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x200000000000000, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:29:39 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) fork() (fail_nth: 60) 23:29:39 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0xff3f0000, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:29:39 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x11000000, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) [ 1183.786707] FAULT_INJECTION: forcing a failure. [ 1183.786707] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1183.787549] CPU: 0 PID: 8401 Comm: syz-executor.7 Not tainted 6.4.0-next-20230630 #1 [ 1183.788056] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1183.788571] Call Trace: [ 1183.788744] [ 1183.788897] dump_stack_lvl+0xc1/0xf0 [ 1183.789164] should_fail_ex+0x4b4/0x5b0 [ 1183.789439] __should_fail_alloc_page+0xe0/0x110 [ 1183.789757] prepare_alloc_pages+0x178/0x500 [ 1183.790059] __alloc_pages+0x149/0x480 [ 1183.790324] ? __pfx___alloc_pages+0x10/0x10 [ 1183.790618] ? find_held_lock+0x2c/0x110 [ 1183.790899] ? copy_page_range+0x17d6/0x31e0 [ 1183.791195] ? __pfx_lock_release+0x10/0x10 [ 1183.791484] vma_alloc_folio+0xe2/0x480 [ 1183.791767] copy_page_range+0x2253/0x31e0 [ 1183.792102] ? __pfx_copy_page_range+0x10/0x10 [ 1183.792416] ? __pfx_mas_store+0x10/0x10 [ 1183.792692] ? up_write+0x196/0x510 [ 1183.792939] ? lock_is_held_type+0x9f/0x120 [ 1183.793234] dup_mmap+0xee2/0x1770 [ 1183.793490] ? __pfx_dup_mmap+0x10/0x10 [ 1183.793768] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 1183.794106] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1183.794441] ? mm_init+0xb4a/0xe70 [ 1183.794688] copy_process+0x3e68/0x7320 [ 1183.795001] ? __pfx_copy_process+0x10/0x10 [ 1183.795295] ? find_held_lock+0x2c/0x110 [ 1183.795567] ? ksys_write+0x122/0x250 [ 1183.795830] ? ksys_write+0x20f/0x250 [ 1183.796081] ? lock_release+0x1e3/0x680 [ 1183.796352] kernel_clone+0xeb/0x7d0 [ 1183.796606] ? __pfx_kernel_clone+0x10/0x10 [ 1183.796895] ? perf_trace_run_bpf_submit+0xf3/0x190 [ 1183.797221] ? perf_trace_run_bpf_submit+0xf3/0x190 [ 1183.797550] __do_sys_fork+0x80/0xc0 [ 1183.797837] ? __pfx___do_sys_fork+0x10/0x10 [ 1183.798134] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 1183.798526] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 1183.798863] ? syscall_enter_from_user_mode+0x21/0x50 [ 1183.799201] ? syscall_enter_from_user_mode+0x21/0x50 [ 1183.799536] do_syscall_64+0x3f/0x90 [ 1183.799881] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 1183.800231] RIP: 0033:0x7f2ec8a71b19 [ 1183.800504] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1183.801616] RSP: 002b:00007f2ec5fe7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1183.802085] RAX: ffffffffffffffda RBX: 00007f2ec8b84f60 RCX: 00007f2ec8a71b19 [ 1183.802535] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1183.802981] RBP: 00007f2ec5fe71d0 R08: 0000000000000000 R09: 0000000000000000 [ 1183.803424] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1183.803883] R13: 00007ffff806eeff R14: 00007f2ec5fe7300 R15: 0000000000022000 [ 1183.804343] 23:29:50 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) fork() (fail_nth: 70) 23:29:50 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x300000000000000, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:29:50 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) fork() (fail_nth: 61) 23:29:50 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x8000000000000, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:29:50 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x12000000, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:29:50 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0xf000000, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:29:50 executing program 4: r0 = signalfd(0xffffffffffffffff, &(0x7f00000011c0), 0x8) r1 = epoll_create1(0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000000)) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) fsopen(&(0x7f0000000040)='pstore\x00', 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) clone3(0x0, 0x0) r5 = epoll_create1(0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000000)) r7 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x400400, 0x0) pidfd_getfd(r0, r4, 0x0) r8 = openat2(r7, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x100, 0x41, 0x4}, 0x18) ioctl$TIOCVHANGUP(r8, 0x5437, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) 23:29:50 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x20000000000000, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) [ 1194.557022] FAULT_INJECTION: forcing a failure. [ 1194.557022] name failslab, interval 1, probability 0, space 0, times 0 [ 1194.558653] CPU: 1 PID: 8427 Comm: syz-executor.7 Not tainted 6.4.0-next-20230630 #1 [ 1194.559710] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1194.560823] Call Trace: [ 1194.561196] [ 1194.561526] dump_stack_lvl+0xc1/0xf0 [ 1194.562093] should_fail_ex+0x4b4/0x5b0 [ 1194.562660] ? vm_area_dup+0x20/0x160 [ 1194.563220] should_failslab+0x9/0x20 [ 1194.563758] kmem_cache_alloc+0x62/0x370 [ 1194.564367] vm_area_dup+0x20/0x160 [ 1194.564901] dup_mmap+0x94e/0x1770 [ 1194.565449] ? __pfx_dup_mmap+0x10/0x10 [ 1194.566069] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 1194.566830] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1194.567587] ? mm_init+0xb4a/0xe70 [ 1194.567962] FAULT_INJECTION: forcing a failure. [ 1194.567962] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1194.568154] copy_process+0x3e68/0x7320 [ 1194.570275] ? __pfx_copy_process+0x10/0x10 [ 1194.570912] ? find_held_lock+0x2c/0x110 [ 1194.571526] ? ksys_write+0x122/0x250 [ 1194.572114] ? ksys_write+0x20f/0x250 [ 1194.572672] ? lock_release+0x1e3/0x680 [ 1194.573273] kernel_clone+0xeb/0x7d0 [ 1194.573845] ? __pfx_kernel_clone+0x10/0x10 [ 1194.574487] ? perf_trace_run_bpf_submit+0xf3/0x190 [ 1194.575212] ? perf_trace_run_bpf_submit+0xf3/0x190 [ 1194.575981] __do_sys_fork+0x80/0xc0 [ 1194.576550] ? __pfx___do_sys_fork+0x10/0x10 [ 1194.577210] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 1194.578078] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 1194.578801] ? syscall_enter_from_user_mode+0x21/0x50 [ 1194.579550] ? syscall_enter_from_user_mode+0x21/0x50 [ 1194.580324] do_syscall_64+0x3f/0x90 [ 1194.580881] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 1194.581639] RIP: 0033:0x7f2ec8a71b19 [ 1194.582177] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1194.584688] RSP: 002b:00007f2ec5fe7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1194.585758] RAX: ffffffffffffffda RBX: 00007f2ec8b84f60 RCX: 00007f2ec8a71b19 [ 1194.586750] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1194.587744] RBP: 00007f2ec5fe71d0 R08: 0000000000000000 R09: 0000000000000000 [ 1194.588754] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1194.589748] R13: 00007ffff806eeff R14: 00007f2ec5fe7300 R15: 0000000000022000 [ 1194.590771] [ 1194.591117] CPU: 0 PID: 8422 Comm: syz-executor.0 Not tainted 6.4.0-next-20230630 #1 [ 1194.591675] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1194.592261] Call Trace: [ 1194.592448] [ 1194.592621] dump_stack_lvl+0xc1/0xf0 [ 1194.592909] should_fail_ex+0x4b4/0x5b0 [ 1194.593203] __should_fail_alloc_page+0xe0/0x110 [ 1194.593549] prepare_alloc_pages+0x178/0x500 [ 1194.593876] ? __pfx___lock_acquire+0x10/0x10 [ 1194.594212] __alloc_pages+0x149/0x480 [ 1194.594506] ? __pfx___alloc_pages+0x10/0x10 [ 1194.594841] ? copy_page_range+0x1f62/0x31e0 [ 1194.595160] ? lock_release+0x1e3/0x680 [ 1194.595461] alloc_pages+0x1a0/0x260 [ 1194.595743] get_zeroed_page+0x18/0xb0 [ 1194.596038] __pud_alloc+0x37/0x270 [ 1194.596306] copy_page_range+0x24be/0x31e0 [ 1194.596621] ? perf_trace_preemptirq_template+0x252/0x420 [ 1194.597028] ? mas_wr_modify+0x77a/0x1330 [ 1194.597341] ? __pfx_copy_page_range+0x10/0x10 [ 1194.597677] ? mas_store+0xb0/0xf0 [ 1194.597943] ? __pfx_mas_store+0x10/0x10 [ 1194.598249] ? up_write+0x196/0x510 [ 1194.598524] ? lock_is_held_type+0x9f/0x120 [ 1194.598846] dup_mmap+0xee2/0x1770 [ 1194.599122] ? __pfx_dup_mmap+0x10/0x10 [ 1194.599424] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 1194.599801] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1194.600195] ? mm_init+0xb4a/0xe70 [ 1194.600466] copy_process+0x3e68/0x7320 [ 1194.600778] ? __pfx_copy_process+0x10/0x10 [ 1194.601098] ? find_held_lock+0x2c/0x110 [ 1194.601405] ? ksys_write+0x122/0x250 [ 1194.601686] ? ksys_write+0x20f/0x250 [ 1194.601961] ? lock_release+0x1e3/0x680 [ 1194.602257] kernel_clone+0xeb/0x7d0 [ 1194.602542] ? __pfx_kernel_clone+0x10/0x10 [ 1194.602867] ? perf_trace_run_bpf_submit+0xf3/0x190 [ 1194.603228] ? perf_trace_run_bpf_submit+0xf3/0x190 [ 1194.603595] __do_sys_fork+0x80/0xc0 [ 1194.603878] ? __pfx___do_sys_fork+0x10/0x10 [ 1194.604202] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 1194.604635] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 1194.605020] ? syscall_enter_from_user_mode+0x21/0x50 [ 1194.605395] ? syscall_enter_from_user_mode+0x21/0x50 [ 1194.605772] do_syscall_64+0x3f/0x90 [ 1194.606052] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 1194.606426] RIP: 0033:0x7f1199da5b19 [ 1194.606697] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1194.607956] RSP: 002b:00007f119731b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1194.608493] RAX: ffffffffffffffda RBX: 00007f1199eb8f60 RCX: 00007f1199da5b19 [ 1194.608989] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1194.609489] RBP: 00007f119731b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1194.609987] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1194.610484] R13: 00007ffca84fd02f R14: 00007f119731b300 R15: 0000000000022000 [ 1194.611002] 23:29:50 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x20000000000000, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:29:50 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x10000000, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:29:50 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x100000000000000, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:29:50 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x400000000000000, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:29:50 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x13000000, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:29:50 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x500000000000000, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:29:50 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) fork() (fail_nth: 71) 23:29:50 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x200000000000000, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:29:50 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x600000000000000, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:29:50 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x11000000, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:29:50 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) fork() (fail_nth: 62) 23:29:50 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x100000000000000, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:29:50 executing program 4: openat2(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)={0x20000, 0x159, 0x3b}, 0x18) inotify_init() r0 = memfd_create(&(0x7f0000000380)='\x0e(\x00', 0x6) r1 = signalfd(r0, &(0x7f0000000000), 0x8) ioctl$VFAT_IOCTL_READDIR_BOTH(r1, 0x82307201, &(0x7f0000000080)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) clone3(0x0, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)=0x400000) r2 = epoll_create1(0x0) openat$cgroup_ro(r1, &(0x7f00000003c0)='memory.swap.events\x00', 0x0, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000002c0)) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) r4 = epoll_create1(0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000000)) ioctl$TIOCVHANGUP(r5, 0x5437, 0x0) dup2(r3, r5) fchdir(0xffffffffffffffff) syz_open_dev$tty1(0xc, 0x4, 0x1) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) [ 1195.043549] FAULT_INJECTION: forcing a failure. [ 1195.043549] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1195.043598] CPU: 1 PID: 8481 Comm: syz-executor.0 Not tainted 6.4.0-next-20230630 #1 [ 1195.043632] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1195.043649] Call Trace: [ 1195.043657] [ 1195.043669] dump_stack_lvl+0xc1/0xf0 [ 1195.043722] should_fail_ex+0x4b4/0x5b0 [ 1195.043764] __should_fail_alloc_page+0xe0/0x110 [ 1195.043811] prepare_alloc_pages+0x178/0x500 [ 1195.043886] ? __memcg_kmem_charge_page+0x334/0x3d0 [ 1195.043929] __alloc_pages+0x149/0x480 [ 1195.043975] ? __pfx___alloc_pages+0x10/0x10 [ 1195.044017] ? find_held_lock+0x2c/0x110 [ 1195.044079] ? __pfx_lock_release+0x10/0x10 [ 1195.044118] ? do_raw_spin_lock+0x125/0x270 [ 1195.044178] alloc_pages+0x1a0/0x260 [ 1195.044219] __pmd_alloc+0x3b/0x690 [ 1195.044256] copy_page_range+0x244c/0x31e0 [ 1195.044303] ? perf_trace_preemptirq_template+0x252/0x420 [ 1195.044388] ? __pfx_copy_page_range+0x10/0x10 [ 1195.044437] ? mas_store+0xb0/0xf0 [ 1195.044470] ? __pfx_mas_store+0x10/0x10 [ 1195.044520] ? up_write+0x196/0x510 [ 1195.044560] ? lock_is_held_type+0x9f/0x120 [ 1195.044608] dup_mmap+0xee2/0x1770 [ 1195.044674] ? __pfx_dup_mmap+0x10/0x10 [ 1195.044734] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 1195.044774] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1195.044828] ? mm_init+0xb4a/0xe70 [ 1195.044879] copy_process+0x3e68/0x7320 [ 1195.044956] ? __pfx_copy_process+0x10/0x10 [ 1195.045004] ? perf_trace_preemptirq_template+0x252/0x420 [ 1195.045062] ? __pfx___perf_event_task_sched_in+0x10/0x10 [ 1195.045110] ? lock_release+0x1e3/0x680 [ 1195.045157] kernel_clone+0xeb/0x7d0 [ 1195.045207] ? finish_task_switch.isra.0+0x293/0x830 [ 1195.045259] ? __pfx_kernel_clone+0x10/0x10 [ 1195.045318] ? perf_trace_run_bpf_submit+0xf3/0x190 [ 1195.045356] ? perf_trace_run_bpf_submit+0xf3/0x190 [ 1195.045409] __do_sys_fork+0x80/0xc0 [ 1195.045459] ? __pfx___do_sys_fork+0x10/0x10 [ 1195.045508] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 1195.045575] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 1195.045614] ? syscall_enter_from_user_mode+0x21/0x50 [ 1195.045660] ? syscall_enter_from_user_mode+0x21/0x50 [ 1195.045704] do_syscall_64+0x3f/0x90 [ 1195.045752] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 1195.045805] RIP: 0033:0x7f1199da5b19 [ 1195.045828] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1195.045859] RSP: 002b:00007f119731b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1195.045891] RAX: ffffffffffffffda RBX: 00007f1199eb8f60 RCX: 00007f1199da5b19 [ 1195.045913] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1195.045933] RBP: 00007f119731b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1195.045953] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1195.045973] R13: 00007ffca84fd02f R14: 00007f119731b300 R15: 0000000000022000 [ 1195.046022] 23:30:02 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x12000000, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:30:02 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x700000000000000, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:30:02 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) fork() (fail_nth: 63) 23:30:02 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x14000000, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:30:02 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) fork() (fail_nth: 72) 23:30:02 executing program 4: r0 = signalfd(0xffffffffffffffff, &(0x7f00000011c0), 0x8) r1 = dup(0xffffffffffffffff) clone3(0x0, 0x0) r2 = epoll_create1(0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000000)) r4 = epoll_create1(0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000000)) ioctl$TIOCVHANGUP(r5, 0x5437, 0x0) close_range(r5, r1, 0x2) r6 = openat2(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)={0x593e81, 0x1fc, 0x5}, 0x18) dup2(r6, r5) ioctl$GIO_UNISCRNMAP(r6, 0x4b69, &(0x7f00000002c0)=""/188) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000180)=ANY=[@ANYBLOB="000000000000000000000000267194aae600367be27e238315fdda625c7858837b3a25fa26a4f08cc4d798300a327ea5605cd296a9f82b02c952c618569afe36888aa24a99142e4614298d5d85b6fd62b81154625ab3982abca02de47868bfd2bd0bbf489c6fbf01142a578fc76ac646c4da7dcedbbb8606bf392a88c59fb1acc1d12ddde91a1e4aa8d4b23a1ad085396d263644274cc37359a3aa97dff76e0b881523604f5d99c57780e4732c6a380f0a5f25c0c44175981783a19665392020d782fc9ca8840e0029122463e173f57bdc7b4cce3aadf1487dd869c45619ffcac009b75fe461d7af8098d3f04fe124643aec7e1604", @ANYRES32=r2, @ANYBLOB="08000000ff0000002e2f66696c653000"]) epoll_pwait(r7, &(0x7f0000000080)=[{}, {}, {}, {}, {}], 0x5, 0x1e03, &(0x7f00000000c0)={[0xec]}, 0x8) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) 23:30:02 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x300000000000000, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:30:02 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x200000000000000, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:30:02 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x13000000, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) [ 1206.671832] FAULT_INJECTION: forcing a failure. [ 1206.671832] name failslab, interval 1, probability 0, space 0, times 0 [ 1206.672674] CPU: 1 PID: 8493 Comm: syz-executor.0 Not tainted 6.4.0-next-20230630 #1 [ 1206.673267] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1206.673839] Call Trace: [ 1206.674024] [ 1206.674191] dump_stack_lvl+0xc1/0xf0 [ 1206.674498] should_fail_ex+0x4b4/0x5b0 [ 1206.674790] ? __pmd_alloc+0x98/0x690 [ 1206.675066] should_failslab+0x9/0x20 [ 1206.675348] kmem_cache_alloc+0x62/0x370 [ 1206.675644] ? alloc_pages+0x1a8/0x260 [ 1206.675931] __pmd_alloc+0x98/0x690 [ 1206.676223] copy_page_range+0x244c/0x31e0 [ 1206.676548] ? perf_trace_preemptirq_template+0x252/0x420 [ 1206.676967] ? __pfx_copy_page_range+0x10/0x10 [ 1206.677301] ? mas_store+0xb0/0xf0 [ 1206.677573] ? __pfx_mas_store+0x10/0x10 [ 1206.677876] ? up_write+0x196/0x510 [ 1206.678149] ? lock_is_held_type+0x9f/0x120 [ 1206.678476] dup_mmap+0xee2/0x1770 [ 1206.678757] ? __pfx_dup_mmap+0x10/0x10 [ 1206.679059] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 1206.679440] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1206.679814] ? mm_init+0xb4a/0xe70 [ 1206.680096] copy_process+0x3e68/0x7320 [ 1206.680419] ? __pfx_copy_process+0x10/0x10 [ 1206.680738] ? find_held_lock+0x2c/0x110 [ 1206.681039] ? ksys_write+0x122/0x250 [ 1206.681324] ? ksys_write+0x20f/0x250 [ 1206.681612] ? lock_release+0x1e3/0x680 [ 1206.681907] kernel_clone+0xeb/0x7d0 [ 1206.682191] ? __pfx_kernel_clone+0x10/0x10 [ 1206.682515] ? perf_trace_run_bpf_submit+0xf3/0x190 [ 1206.682878] ? perf_trace_run_bpf_submit+0xf3/0x190 [ 1206.683250] __do_sys_fork+0x80/0xc0 [ 1206.683539] ? __pfx___do_sys_fork+0x10/0x10 [ 1206.683869] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 1206.684321] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 1206.684716] ? syscall_enter_from_user_mode+0x21/0x50 [ 1206.685092] ? syscall_enter_from_user_mode+0x21/0x50 [ 1206.685470] do_syscall_64+0x3f/0x90 [ 1206.685755] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 1206.686136] RIP: 0033:0x7f1199da5b19 [ 1206.686423] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1206.687682] RSP: 002b:00007f119731b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1206.688231] RAX: ffffffffffffffda RBX: 00007f1199eb8f60 RCX: 00007f1199da5b19 [ 1206.688730] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1206.689233] RBP: 00007f119731b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1206.689760] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1206.690252] R13: 00007ffca84fd02f R14: 00007f119731b300 R15: 0000000000022000 [ 1206.690767] [ 1206.697108] FAULT_INJECTION: forcing a failure. [ 1206.697108] name failslab, interval 1, probability 0, space 0, times 0 [ 1206.698012] CPU: 1 PID: 8496 Comm: syz-executor.7 Not tainted 6.4.0-next-20230630 #1 [ 1206.698545] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1206.699085] Call Trace: [ 1206.699260] [ 1206.699426] dump_stack_lvl+0xc1/0xf0 [ 1206.699701] should_fail_ex+0x4b4/0x5b0 [ 1206.699981] ? vm_area_dup+0x52/0x160 [ 1206.700267] should_failslab+0x9/0x20 [ 1206.700542] kmem_cache_alloc+0x62/0x370 [ 1206.700834] vm_area_dup+0x52/0x160 [ 1206.701091] dup_mmap+0x94e/0x1770 [ 1206.701361] ? __pfx_dup_mmap+0x10/0x10 [ 1206.701650] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 1206.701981] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1206.702354] ? mm_init+0xb4a/0xe70 [ 1206.702626] copy_process+0x3e68/0x7320 [ 1206.702922] ? __pfx_copy_process+0x10/0x10 [ 1206.703203] ? find_held_lock+0x2c/0x110 [ 1206.703498] ? ksys_write+0x122/0x250 [ 1206.703769] ? ksys_write+0x20f/0x250 [ 1206.704058] ? lock_release+0x1e3/0x680 [ 1206.704350] kernel_clone+0xeb/0x7d0 [ 1206.704624] ? __pfx_kernel_clone+0x10/0x10 [ 1206.704930] ? perf_trace_run_bpf_submit+0xf3/0x190 [ 1206.705272] ? perf_trace_run_bpf_submit+0xf3/0x190 [ 1206.705635] __do_sys_fork+0x80/0xc0 [ 1206.705904] ? __pfx___do_sys_fork+0x10/0x10 [ 1206.706216] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 1206.706656] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 1206.707030] ? syscall_enter_from_user_mode+0x21/0x50 [ 1206.707418] ? syscall_enter_from_user_mode+0x21/0x50 [ 1206.707795] do_syscall_64+0x3f/0x90 [ 1206.708100] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 1206.708492] RIP: 0033:0x7f2ec8a71b19 [ 1206.708765] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1206.710027] RSP: 002b:00007f2ec5fe7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1206.710565] RAX: ffffffffffffffda RBX: 00007f2ec8b84f60 RCX: 00007f2ec8a71b19 [ 1206.711059] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1206.711570] RBP: 00007f2ec5fe71d0 R08: 0000000000000000 R09: 0000000000000000 [ 1206.712077] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1206.712595] R13: 00007ffff806eeff R14: 00007f2ec5fe7300 R15: 0000000000022000 [ 1206.713108] 23:30:02 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x400000000000000, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:30:02 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x300000000000000, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:30:02 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x800000000000000, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:30:02 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) fork() (fail_nth: 73) 23:30:02 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x15000000, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:30:02 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x400000000000000, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) [ 1206.870867] FAULT_INJECTION: forcing a failure. [ 1206.870867] name failslab, interval 1, probability 0, space 0, times 0 [ 1206.872142] CPU: 1 PID: 8519 Comm: syz-executor.7 Not tainted 6.4.0-next-20230630 #1 [ 1206.872835] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1206.873546] Call Trace: [ 1206.873790] [ 1206.874003] dump_stack_lvl+0xc1/0xf0 [ 1206.874377] should_fail_ex+0x4b4/0x5b0 [ 1206.874752] ? vm_area_dup+0x52/0x160 [ 1206.875109] should_failslab+0x9/0x20 [ 1206.875466] kmem_cache_alloc+0x62/0x370 [ 1206.875848] vm_area_dup+0x52/0x160 [ 1206.876205] dup_mmap+0x94e/0x1770 [ 1206.876555] ? __pfx_dup_mmap+0x10/0x10 [ 1206.876947] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 1206.877421] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1206.877861] ? mm_init+0xb4a/0xe70 [ 1206.878204] copy_process+0x3e68/0x7320 [ 1206.878608] ? __pfx_copy_process+0x10/0x10 [ 1206.879013] ? find_held_lock+0x2c/0x110 [ 1206.879403] ? ksys_write+0x122/0x250 [ 1206.879751] ? ksys_write+0x20f/0x250 [ 1206.880095] ? lock_release+0x1e3/0x680 [ 1206.880475] kernel_clone+0xeb/0x7d0 [ 1206.880839] ? __pfx_kernel_clone+0x10/0x10 [ 1206.881255] ? perf_trace_run_bpf_submit+0xf3/0x190 [ 1206.881714] ? perf_trace_run_bpf_submit+0xf3/0x190 [ 1206.882143] __do_sys_fork+0x80/0xc0 [ 1206.882504] ? __pfx___do_sys_fork+0x10/0x10 [ 1206.882912] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 1206.883410] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 1206.883869] ? syscall_enter_from_user_mode+0x21/0x50 [ 1206.884310] ? syscall_enter_from_user_mode+0x21/0x50 [ 1206.884767] do_syscall_64+0x3f/0x90 [ 1206.885095] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 1206.885570] RIP: 0033:0x7f2ec8a71b19 [ 1206.885887] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1206.887426] RSP: 002b:00007f2ec5fe7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1206.888104] RAX: ffffffffffffffda RBX: 00007f2ec8b84f60 RCX: 00007f2ec8a71b19 [ 1206.888711] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1206.889325] RBP: 00007f2ec5fe71d0 R08: 0000000000000000 R09: 0000000000000000 [ 1206.889922] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1206.890536] R13: 00007ffff806eeff R14: 00007f2ec5fe7300 R15: 0000000000022000 [ 1206.891167] 23:30:02 executing program 4: signalfd(0xffffffffffffffff, &(0x7f00000011c0), 0x8) dup(0xffffffffffffffff) clone3(0x0, 0x0) r0 = epoll_create1(0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) epoll_create1(0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = epoll_create1(0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000000)) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) fcntl$F_SET_RW_HINT(r2, 0x40c, &(0x7f0000000040)=0x1) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) 23:30:02 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) fork() (fail_nth: 64) 23:30:15 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) fork() (fail_nth: 65) 23:30:15 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x500000000000000, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:30:15 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x14000000, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:30:15 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x500000000000000, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:30:15 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) fork() (fail_nth: 74) 23:30:15 executing program 4: r0 = signalfd(0xffffffffffffffff, &(0x7f00000011c0), 0x8) r1 = dup(0xffffffffffffffff) clone3(0x0, 0x0) r2 = epoll_create1(0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000000)) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x400100, 0x44) ioctl$AUTOFS_IOC_CATATONIC(r4, 0x9362, 0x0) ioctl$BTRFS_IOC_QGROUP_CREATE(r0, 0x4010942a, &(0x7f0000000040)={0x1, 0x8001}) 23:30:15 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x900000000000000, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:30:15 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x16000000, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) [ 1219.887252] FAULT_INJECTION: forcing a failure. [ 1219.887252] name failslab, interval 1, probability 0, space 0, times 0 [ 1219.888086] CPU: 1 PID: 8543 Comm: syz-executor.7 Not tainted 6.4.0-next-20230630 #1 [ 1219.888634] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1219.889188] Call Trace: [ 1219.889362] [ 1219.889528] dump_stack_lvl+0xc1/0xf0 [ 1219.889814] should_fail_ex+0x4b4/0x5b0 [ 1219.890097] ? vm_area_dup+0x20/0x160 [ 1219.890378] should_failslab+0x9/0x20 [ 1219.890641] kmem_cache_alloc+0x62/0x370 [ 1219.890932] vm_area_dup+0x20/0x160 [ 1219.891189] dup_mmap+0x94e/0x1770 [ 1219.891456] ? __pfx_dup_mmap+0x10/0x10 [ 1219.891749] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 1219.892109] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1219.892499] ? mm_init+0xb4a/0xe70 [ 1219.892761] copy_process+0x3e68/0x7320 [ 1219.893059] ? __pfx_copy_process+0x10/0x10 [ 1219.893377] ? find_held_lock+0x2c/0x110 [ 1219.893669] ? ksys_write+0x122/0x250 [ 1219.893941] ? ksys_write+0x20f/0x250 [ 1219.894208] ? lock_release+0x1e3/0x680 [ 1219.894495] kernel_clone+0xeb/0x7d0 [ 1219.894761] ? __pfx_kernel_clone+0x10/0x10 [ 1219.895079] ? perf_trace_run_bpf_submit+0xf3/0x190 [ 1219.895429] ? perf_trace_run_bpf_submit+0xf3/0x190 [ 1219.895776] __do_sys_fork+0x80/0xc0 [ 1219.896045] ? __pfx___do_sys_fork+0x10/0x10 [ 1219.896362] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 1219.896771] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 1219.897132] ? syscall_enter_from_user_mode+0x21/0x50 [ 1219.897514] ? syscall_enter_from_user_mode+0x21/0x50 [ 1219.897889] do_syscall_64+0x3f/0x90 [ 1219.898171] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 1219.898563] RIP: 0033:0x7f2ec8a71b19 [ 1219.898832] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1219.900090] RSP: 002b:00007f2ec5fe7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1219.900647] RAX: ffffffffffffffda RBX: 00007f2ec8b84f60 RCX: 00007f2ec8a71b19 [ 1219.901152] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1219.901657] RBP: 00007f2ec5fe71d0 R08: 0000000000000000 R09: 0000000000000000 [ 1219.902156] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1219.902658] R13: 00007ffff806eeff R14: 00007f2ec5fe7300 R15: 0000000000022000 [ 1219.903173] 23:30:15 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) fork() (fail_nth: 75) [ 1219.949205] FAULT_INJECTION: forcing a failure. [ 1219.949205] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1219.950123] CPU: 1 PID: 8553 Comm: syz-executor.0 Not tainted 6.4.0-next-20230630 #1 [ 1219.950644] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1219.951183] Call Trace: [ 1219.951370] [ 1219.951542] dump_stack_lvl+0xc1/0xf0 [ 1219.951829] should_fail_ex+0x4b4/0x5b0 [ 1219.952110] __should_fail_alloc_page+0xe0/0x110 [ 1219.952461] prepare_alloc_pages+0x178/0x500 [ 1219.952783] __alloc_pages+0x149/0x480 [ 1219.953068] ? __pfx___alloc_pages+0x10/0x10 [ 1219.953378] ? perf_trace_run_bpf_submit+0xf3/0x190 [ 1219.953744] ? find_held_lock+0x2c/0x110 [ 1219.954040] ? __pmd_alloc+0x315/0x690 [ 1219.954323] alloc_pages+0x1a0/0x260 [ 1219.954597] pte_alloc_one+0x1a/0x200 [ 1219.954887] __pte_alloc+0x6d/0x210 [ 1219.955154] ? __pfx___pte_alloc+0x10/0x10 [ 1219.955463] ? do_raw_spin_unlock+0x53/0x220 [ 1219.955783] ? _raw_spin_unlock+0x1e/0x40 [ 1219.956089] ? __pmd_alloc+0x31a/0x690 [ 1219.956379] copy_page_range+0x2119/0x31e0 [ 1219.956699] ? __pfx_copy_page_range+0x10/0x10 [ 1219.957019] ? mas_store+0xb0/0xf0 [ 1219.957276] ? __pfx_mas_store+0x10/0x10 [ 1219.957573] ? up_write+0x196/0x510 [ 1219.957845] ? lock_is_held_type+0x9f/0x120 [ 1219.958148] dup_mmap+0xee2/0x1770 [ 1219.958419] ? __pfx_dup_mmap+0x10/0x10 [ 1219.958711] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 1219.959069] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1219.959416] ? mm_init+0xb4a/0xe70 [ 1219.959683] copy_process+0x3e68/0x7320 [ 1219.959982] ? __pfx_copy_process+0x10/0x10 [ 1219.960306] ? find_held_lock+0x2c/0x110 [ 1219.960603] ? ksys_write+0x122/0x250 [ 1219.960871] ? ksys_write+0x20f/0x250 [ 1219.961152] ? lock_release+0x1e3/0x680 [ 1219.961436] kernel_clone+0xeb/0x7d0 [ 1219.961719] ? __pfx_kernel_clone+0x10/0x10 [ 1219.962024] ? perf_trace_run_bpf_submit+0xf3/0x190 [ 1219.962383] ? perf_trace_run_bpf_submit+0xf3/0x190 [ 1219.962760] __do_sys_fork+0x80/0xc0 [ 1219.963046] ? __pfx___do_sys_fork+0x10/0x10 [ 1219.963386] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 1219.963830] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 1219.964230] ? syscall_enter_from_user_mode+0x21/0x50 [ 1219.964608] ? syscall_enter_from_user_mode+0x21/0x50 [ 1219.964988] do_syscall_64+0x3f/0x90 [ 1219.965270] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 1219.965647] RIP: 0033:0x7f1199da5b19 [ 1219.965918] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1219.967188] RSP: 002b:00007f119731b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1219.967723] RAX: ffffffffffffffda RBX: 00007f1199eb8f60 RCX: 00007f1199da5b19 [ 1219.968246] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1219.968746] RBP: 00007f119731b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1219.969243] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1219.969742] R13: 00007ffca84fd02f R14: 00007f119731b300 R15: 0000000000022000 [ 1219.970256] 23:30:16 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x512000000000000, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:30:16 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x15000000, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:30:16 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x600000000000000, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:30:16 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0xa00000000000000, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:30:16 executing program 4: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x40800) signalfd(0xffffffffffffffff, &(0x7f00000011c0), 0x8) dup(0xffffffffffffffff) clone3(0x0, 0x0) r0 = epoll_create1(0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) 23:30:16 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x17000000, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:30:16 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x2002d7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) fork() (fail_nth: 66) 23:30:16 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x600000000000000, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:30:16 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x700000000000000, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:30:16 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x700000000000000, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:30:16 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x800000000000000, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) 23:30:16 executing program 4: signalfd(0xffffffffffffffff, &(0x7f00000011c0), 0x8) dup(0xffffffffffffffff) clone3(0x0, 0x0) r0 = epoll_create1(0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) r2 = epoll_create1(0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000000)) finit_module(r2, &(0x7f0000000040)='\'!*{,\x18\x92}\x00', 0x2) syz_open_dev$tty1(0xc, 0x4, 0x1) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) 23:30:16 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0xb00000000000000, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) [ 1220.279364] FAULT_INJECTION: forcing a failure. [ 1220.279364] name failslab, interval 1, probability 0, space 0, times 0 [ 1220.280948] CPU: 0 PID: 8590 Comm: syz-executor.0 Not tainted 6.4.0-next-20230630 #1 [ 1220.281950] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1220.282969] Call Trace: [ 1220.283300] [ 1220.283604] dump_stack_lvl+0xc1/0xf0 [ 1220.284118] should_fail_ex+0x4b4/0x5b0 [ 1220.284651] ? __pmd_alloc+0x98/0x690 [ 1220.285143] should_failslab+0x9/0x20 [ 1220.285638] kmem_cache_alloc+0x62/0x370 [ 1220.286166] ? alloc_pages+0x1a8/0x260 [ 1220.286689] __pmd_alloc+0x98/0x690 [ 1220.287173] copy_page_range+0x244c/0x31e0 [ 1220.287735] ? perf_trace_preemptirq_template+0x252/0x420 [ 1220.288500] ? __pfx_copy_page_range+0x10/0x10 [ 1220.289109] ? mas_store+0xb0/0xf0 [ 1220.289580] ? __pfx_mas_store+0x10/0x10 [ 1220.290120] ? up_write+0x196/0x510 [ 1220.290610] ? lock_is_held_type+0x9f/0x120 [ 1220.291194] dup_mmap+0xee2/0x1770 [ 1220.291703] ? __pfx_dup_mmap+0x10/0x10 [ 1220.292270] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 1220.292961] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1220.293643] ? mm_init+0xb4a/0xe70 23:30:16 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x18000000, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) [ 1220.294139] copy_process+0x3e68/0x7320 23:30:16 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x16000000, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1) [ 1220.294213] ? __pfx_copy_process+0x10/0x10 [ 1220.294259] ? find_held_lock+0x2c/0x110 [ 1220.294306] ? ksys_write+0x122/0x250 [ 1220.294344] ? ksys_write+0x20f/0x250 [ 1220.294374] ? lock_release+0x1e3/0x680 [ 1220.294419] kernel_clone+0xeb/0x7d0 [ 1220.294469] ? __pfx_kernel_clone+0x10/0x10 [ 1220.294523] ? perf_trace_run_bpf_submit+0xf3/0x190 [ 1220.294560] ? perf_trace_run_bpf_submit+0xf3/0x190 [ 1220.294611] __do_sys_fork+0x80/0xc0 [ 1220.294658] ? __pfx___do_sys_fork+0x10/0x10 [ 1220.294702] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 1220.294765] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 1220.294802] ? syscall_enter_from_user_mode+0x21/0x50 [ 1220.294845] ? syscall_enter_from_user_mode+0x21/0x50 [ 1220.294886] do_syscall_64+0x3f/0x90 [ 1220.294931] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 1220.294980] RIP: 0033:0x7f1199da5b19 [ 1220.295002] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1220.295031] RSP: 002b:00007f119731b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1220.295059] RAX: ffffffffffffffda RBX: 00007f1199eb8f60 RCX: 00007f1199da5b19 [ 1220.295080] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1220.295099] RBP: 00007f119731b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1220.295118] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1220.295136] R13: 00007ffca84fd02f R14: 00007f119731b300 R15: 0000000000022000 [ 1220.295182] [ 1220.483984] ================================================================== [ 1220.484905] BUG: KASAN: stack-out-of-bounds in init_module_from_file+0x630/0x6b0 [ 1220.485837] Read of size 8 at addr ffff888042f8fe20 by task syz-executor.4/8608 [ 1220.486730] [ 1220.486949] CPU: 0 PID: 8608 Comm: syz-executor.4 Not tainted 6.4.0-next-20230630 #1 [ 1220.487901] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1220.488928] Call Trace: [ 1220.489255] [ 1220.489549] dump_stack_lvl+0x91/0xf0 [ 1220.490046] print_report+0xcc/0x620 [ 1220.490536] ? __virt_addr_valid+0x102/0x340 [ 1220.491110] ? init_module_from_file+0x630/0x6b0 [ 1220.491713] ? init_module_from_file+0x630/0x6b0 [ 1220.492329] kasan_report+0xbe/0xf0 [ 1220.492809] ? init_module_from_file+0x630/0x6b0 [ 1220.493418] init_module_from_file+0x630/0x6b0 [ 1220.494003] ? __pfx_init_module_from_file+0x10/0x10 [ 1220.494638] ? lock_acquire+0x19a/0x4c0 [ 1220.495159] ? xfd_validate_state+0x51/0x170 [ 1220.495742] __x64_sys_finit_module+0xee/0x160 [ 1220.496358] do_syscall_64+0x3f/0x90 [ 1220.496845] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 1220.497513] RIP: 0033:0x7fead5731b19 [ 1220.497984] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1220.503817] RSP: 002b:00007fead2c86188 EFLAGS: 00000246 ORIG_RAX: 0000000000000139 [ 1220.503847] RAX: ffffffffffffffda RBX: 00007fead5845020 RCX: 00007fead5731b19 [ 1220.505683] RDX: 0000000000000002 RSI: 0000000020000040 RDI: 0000000000000006 [ 1220.506562] RBP: 00007fead578bf6d R08: 0000000000000000 R09: 0000000000000000 [ 1220.506581] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1220.506599] R13: 00007ffc5f66854f R14: 00007fead2c86300 R15: 0000000000022000 [ 1220.506629] [ 1220.509515] [ 1220.509520] The buggy address belongs to the physical page: [ 1220.509530] page:00000000d272f93a refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x42f8f [ 1220.509561] flags: 0x100000000000000(node=0|zone=1) [ 1220.509580] page_type: 0xffffffff() [ 1220.509603] raw: 0100000000000000 0000000000000000 dead000000000122 0000000000000000 [ 1220.509630] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 1220.509645] page dumped because: kasan: bad access detected [ 1220.509655] [ 1220.509659] Memory state around the buggy address: [ 1220.509670] ffff888042f8fd00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1220.509689] ffff888042f8fd80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f1 f1 [ 1220.509708] >ffff888042f8fe00: f1 f1 f1 f1 04 f2 00 00 f2 f2 00 00 00 f3 f3 f3 [ 1220.509722] ^ [ 1220.509736] ffff888042f8fe80: f3 f3 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1220.509754] ffff888042f8ff00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1220.509769] ================================================================== [ 1220.510888] Disabling lock debugging due to kernel taint VM DIAGNOSIS: 23:30:16 Registers: info registers vcpu 0 RAX=0000000000000066 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff82516865 RDI=ffffffff87f7f7a0 RBP=ffffffff87f7f760 RSP=ffff888045acf5f8 R8 =0000000000000001 R9 =000000000000000a R10=0000000000000066 R11=0000000065646f43 R12=0000000000000066 R13=ffffffff87f7f760 R14=0000000000000010 R15=ffffffff82516850 RIP=ffffffff825168bd RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007fead2c86700 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000000000000000 CR3=0000000042d56000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000600 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=000000000000000000000000000000ff XMM01=25252525252525252525252525252525 XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=0000000000000000000000524f525245 XMM07=00000000000000000000000000000000 XMM08=000000000000000000524f5252450040 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=1b8a2eb7bc3f1e21 RBX=ffffffff87176040 RCX=ffffffff8779f0c0 RDX=00000000000038cc RSI=0000000000000008 RDI=ffffffff87176048 RBP=ffff888016cc0000 RSP=ffff888016ccf308 R8 =0000000000000000 R9 =fffffbfff0ef9d62 R10=ffffffff877ceb17 R11=0000000000000001 R12=ffff888016cc0a18 R13=3347b5e163dc8029 R14=dffffc0000000000 R15=0000000000000000 RIP=ffffffff812d6f59 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007fb8abd33900 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fb8ab562000 CR3=0000000016256000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=756f6a2f646d65747379732f6e75722f XMM01=00676f6c7379732f6c616e72756f6a2f XMM02=756f6a2f646d65747379732f6e75722f XMM03=006c616e72756f6a2f646d6574737973 XMM04=d0080effb833f2c600000000000ae988 XMM05=6684c585c5d95f900000000000443dc0 XMM06=f0a0c5801d85aa8d00000000004379e0 XMM07=00000000000000000000000000000000 XMM08=726573752f7325003e69253c00203a5d XMM09=00000000000000000000000000000000 XMM10=00202000000000000000000000200000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000