0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x935b}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:55:20 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 9) 05:55:20 executing program 4: socket$inet6_udp(0xa, 0x2, 0x0) socket$inet(0x2, 0xa, 0xff7ffffd) r0 = syz_io_uring_setup(0x3157, &(0x7f0000000140), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x95, 0x0, 0x0, 0x0) 05:55:20 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000000040)={0x2, {0x2, 0x3, 0x7, 0x1, 0x3ff, 0x14}}) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x935b}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x20000000) 05:55:20 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(r1, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r2 = socket$inet(0x2, 0xa, 0xff7ffffd) ioctl$SNAPSHOT_UNFREEZE(r2, 0x3302) r3 = dup3(r2, r1, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r2, 0x8982, &(0x7f0000000300)) socket$inet(0x2, 0xa, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto(r3, &(0x7f0000000340)="0da38e193ee7f80fb0ebe9050fe5a722fce8e24d4590ef25169987df1e7614a2dc7dc78044df276b3a26a33c0e919a221bc62622b15902bc6bf7ee2fcef9576e94960daf9d", 0x45, 0x8000, &(0x7f00000003c0)=@sco={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x80) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0xff, 0x3, 0x2, 0x9, 0x1, 0x2, 0x3e, 0xffff, 0x373, 0x40, 0x21b, 0x4, 0x7, 0x38, 0x1, 0x6, 0x20, 0x8}, [{0x5, 0x0, 0x3, 0x20f62445, 0x7113ce8f, 0x0, 0x0, 0x6}], "37525525d28f6bf715ae182474919cb605c6edd55799063802495ba6058e1ae451b63bd18119e4ba610e4ab77509063046a7433c509e30ddd3a994bd6f533f68a6167c6f63caa5998efbcde02d1281a8ba882a737bf7dc15e05af7c3c9d98bf8e5aec355791583b1aafecc009de5d6102566be5e5dfe50c3e965b8712b8b471cf603bc"}, 0xfb) r4 = syz_io_uring_setup(0x3157, &(0x7f0000000140), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) syz_io_uring_submit(r7, r6, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$inet6(r8, &(0x7f00000002c0)={0xa, 0x4e24, 0xfff, @empty, 0x7fffffff}, 0x1c) io_uring_enter(r4, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2705.357796] FAULT_INJECTION: forcing a failure. [ 2705.357796] name failslab, interval 1, probability 0, space 0, times 0 [ 2705.359046] CPU: 0 PID: 15259 Comm: syz-executor.0 Not tainted 5.10.202 #1 [ 2705.359817] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2705.360719] Call Trace: [ 2705.361016] dump_stack+0x107/0x167 [ 2705.361415] should_fail.cold+0x5/0xa [ 2705.361829] ? create_object.isra.0+0x3a/0xa20 [ 2705.362332] should_failslab+0x5/0x20 [ 2705.362745] kmem_cache_alloc+0x5b/0x310 [ 2705.363201] ? mark_held_locks+0x9e/0xe0 [ 2705.363650] create_object.isra.0+0x3a/0xa20 [ 2705.364134] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2705.364686] kmem_cache_alloc_bulk+0x168/0x320 [ 2705.365190] io_submit_sqes+0x6f76/0x85c0 [ 2705.365643] ? percpu_ref_tryget_many+0x166/0x2d0 [ 2705.366188] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 2705.366734] __do_sys_io_uring_enter+0x6b5/0x1920 [ 2705.367263] ? lock_downgrade+0x6d0/0x6d0 [ 2705.367718] ? find_held_lock+0x2c/0x110 [ 2705.368178] ? io_submit_sqes+0x85c0/0x85c0 [ 2705.368669] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2705.369217] ? wait_for_completion_io+0x270/0x270 [ 2705.369760] ? rcu_read_lock_any_held+0x75/0xa0 [ 2705.370292] ? vfs_write+0x354/0xa70 [ 2705.370699] ? fput_many+0x2f/0x1a0 [ 2705.371114] ? ksys_write+0x1a9/0x260 [ 2705.371541] ? __ia32_sys_read+0xb0/0xb0 [ 2705.371994] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2705.372576] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2705.373140] do_syscall_64+0x33/0x40 [ 2705.373568] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2705.374144] RIP: 0033:0x7fb03d693b19 [ 2705.374570] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2705.376616] RSP: 002b:00007fb03ac09188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2705.377470] RAX: ffffffffffffffda RBX: 00007fb03d7a6f60 RCX: 00007fb03d693b19 [ 2705.378241] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2705.379047] RBP: 00007fb03ac091d0 R08: 0000000000000000 R09: 0000000000000000 [ 2705.379802] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2705.380633] R13: 00007ffe77755f3f R14: 00007fb03ac09300 R15: 0000000000022000 05:55:20 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r1 = socket$inet(0x2, 0xa, 0xff7ffffd) ioctl$SNAPSHOT_UNFREEZE(r1, 0x3302) r2 = syz_io_uring_setup(0x3157, &(0x7f0000000140), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) syz_io_uring_submit(r5, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x2000) 05:55:20 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x935b}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x2504000000000000, 0x0, 0x0) 05:55:20 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x935b}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(r5, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r6 = socket$inet(0x2, 0xa, 0xff7ffffd) r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x4000, 0x0) getsockopt$inet_mreqsrc(r7, 0x0, 0x28, &(0x7f0000000180)={@local, @multicast2, @broadcast}, &(0x7f00000001c0)=0xc) ioctl$TUNSETQUEUE(r7, 0x400454d9, &(0x7f00000000c0)={'gretap0\x00'}) ioctl$SNAPSHOT_UNFREEZE(r6, 0x3302) dup3(r6, r5, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_TEE={0x21, 0x5, 0x0, @fd_index=0x9, 0x0, 0x0, 0x1f, 0x0, 0x0, {0x0, r4, r5}}, 0x10001) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:55:20 executing program 3: socket$inet6_udp(0xa, 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r1 = socket$inet(0x2, 0xa, 0xff7ffffd) ioctl$SNAPSHOT_UNFREEZE(r1, 0x3302) dup3(r1, r0, 0x0) r2 = syz_io_uring_setup(0x3157, &(0x7f0000000140), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x8006, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x40000000, 0x100000, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = dup2(0xffffffffffffffff, r1) ioctl$F2FS_IOC_FLUSH_DEVICE(r5, 0x4008f50a, &(0x7f0000000040)={0x8, 0x8001}) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) syz_io_uring_submit(r6, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:55:20 executing program 4: socket$inet6_udp(0xa, 0x2, 0x0) socket$inet(0x2, 0xa, 0xff7ffffd) r0 = syz_io_uring_setup(0x3157, &(0x7f0000000140), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x2000, 0x0, 0x0, 0x0) 05:55:20 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 10) 05:55:20 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r1 = socket$inet(0x2, 0xa, 0xff7ffffd) ioctl$SNAPSHOT_UNFREEZE(r1, 0x3302) r2 = syz_io_uring_setup(0x3157, &(0x7f0000000140), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) syz_io_uring_submit(r5, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x4000) [ 2705.634527] FAULT_INJECTION: forcing a failure. [ 2705.634527] name failslab, interval 1, probability 0, space 0, times 0 [ 2705.635856] CPU: 0 PID: 15297 Comm: syz-executor.0 Not tainted 5.10.202 #1 [ 2705.636612] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2705.637519] Call Trace: [ 2705.637812] dump_stack+0x107/0x167 [ 2705.638231] should_fail.cold+0x5/0xa [ 2705.638650] ? create_io_worker+0xe8/0x620 [ 2705.639108] should_failslab+0x5/0x20 [ 2705.639534] kmem_cache_alloc_node_trace+0x59/0x340 [ 2705.640087] create_io_worker+0xe8/0x620 [ 2705.640533] io_wqe_enqueue+0x69e/0xbe0 [ 2705.640972] ? create_worker_cb+0x260/0x260 [ 2705.641450] ? io_prep_async_work+0x340/0x540 [ 2705.641960] io_queue_async_work+0x26b/0x4f0 [ 2705.642440] __io_queue_sqe+0x5cc/0x9d0 [ 2705.642878] ? io_issue_sqe+0x7700/0x7700 [ 2705.643341] io_submit_sqes+0x4461/0x85c0 [ 2705.643815] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 2705.644353] __do_sys_io_uring_enter+0x6b5/0x1920 [ 2705.644901] ? lock_downgrade+0x6d0/0x6d0 [ 2705.645364] ? find_held_lock+0x2c/0x110 [ 2705.645830] ? io_submit_sqes+0x85c0/0x85c0 [ 2705.646331] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2705.646876] ? wait_for_completion_io+0x270/0x270 [ 2705.647423] ? rcu_read_lock_any_held+0x75/0xa0 [ 2705.647945] ? vfs_write+0x354/0xa70 [ 2705.648372] ? fput_many+0x2f/0x1a0 [ 2705.648789] ? ksys_write+0x1a9/0x260 [ 2705.649219] ? __ia32_sys_read+0xb0/0xb0 [ 2705.649682] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2705.650292] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2705.650877] do_syscall_64+0x33/0x40 [ 2705.651303] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2705.651880] RIP: 0033:0x7fb03d693b19 [ 2705.652299] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2705.654360] RSP: 002b:00007fb03ac09188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2705.655217] RAX: ffffffffffffffda RBX: 00007fb03d7a6f60 RCX: 00007fb03d693b19 [ 2705.655983] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2705.656782] RBP: 00007fb03ac091d0 R08: 0000000000000000 R09: 0000000000000000 [ 2705.657546] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2705.658356] R13: 00007ffe77755f3f R14: 00007fb03ac09300 R15: 0000000000022000 05:55:35 executing program 4: socket$inet6_udp(0xa, 0x2, 0x0) socket$inet(0x2, 0xa, 0xff7ffffd) r0 = syz_io_uring_setup(0x3157, &(0x7f0000000140), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x4000, 0x0, 0x0, 0x0) 05:55:35 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000000040)={0x2, {0x2, 0x3, 0x7, 0x1, 0x3ff, 0x14}}) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x935b}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x3f000000) 05:55:35 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet(0x2, 0x6, 0x3) setsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f0000000240)={@broadcast, @private=0xa010100}, 0xc) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_io_uring_setup(0x3157, &(0x7f0000000140), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000140)={'sit0\x00', 0x0}) r8 = syz_open_dev$vcsn(&(0x7f0000000340), 0x2e6, 0x715002) io_uring_enter(r8, 0x1808, 0xa886, 0x0, &(0x7f0000000380)={[0x3]}, 0x8) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000040)={@local, 0x0, r7}) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, &(0x7f0000000300)={'syztnl1\x00', &(0x7f0000000280)={'ip6gre0\x00', r7, 0x0, 0x7c, 0x1, 0x7ff, 0x0, @private1, @ipv4={'\x00', '\xff\xff', @loopback}, 0x8, 0x1, 0x8, 0xffffffff}}) r9 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x1, 0x0, r9, &(0x7f00000001c0)={0xc0081, 0x61, 0x18}, &(0x7f0000000200)='./file0\x00', 0x18, 0x0, 0x23456}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r10 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) syz_io_uring_submit(r10, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2720.719219] audit: type=1400 audit(1701755735.642:16): avc: denied { create } for pid=15317 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dccp_socket permissive=1 05:55:35 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(r1, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r2 = socket$inet(0x2, 0xa, 0xff7ffffd) ioctl$SNAPSHOT_UNFREEZE(r2, 0x3302) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r1, {r0}}, './file0\x00'}) dup3(r1, r3, 0x80000) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(r4, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r5 = socket$inet(0x2, 0xa, 0xff7ffffd) ioctl$SNAPSHOT_UNFREEZE(r5, 0x3302) dup3(r5, r4, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000040)={0x0, 0x8, 0x3e, 0x3, 0x39}) r6 = syz_io_uring_setup(0x3157, &(0x7f0000000140), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x8006, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x40000000, 0x100000, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r6, 0x0) syz_io_uring_submit(r9, r8, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r6, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:55:35 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r1 = socket$inet(0x2, 0xa, 0xff7ffffd) ioctl$SNAPSHOT_UNFREEZE(r1, 0x3302) r2 = syz_io_uring_setup(0x3157, &(0x7f0000000140), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) syz_io_uring_submit(r5, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x95ff) 05:55:35 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x935b}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x2604000000000000, 0x0, 0x0) 05:55:35 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 11) 05:55:35 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)=0x0) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r1, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x5, 0x2, &(0x7f0000000500)="d364c681e5bdf434bfdbbe2469817d1ade3bb7737efa67b6ad4ffd4b6db11af53a461e5a97af26607303f77284abab8149ecede424dbaa9597939e8191148653a1baa7bbdfd75754c84bef1ab83cef157d5fb10c4e33aca116bdbfb519107980dc5df2b51f9bc5c3f08fc4c8f35ec989a0303f0b07ac5005eb9b803606ac3911888a4c1c15de10b0bd5b4bfdd5d4193d0586ed0571e0a9ce125d0bdb7a7eef6d99204d91d3751099b21b82e387d4eb85515274301eedf64c3d7bae80b062fc62db3acc905cebdd3c2359e28c8d08d8ccedbdb1ab4640f86a4282abd771ddfc5bccd17f060655ec7bf8da3e", 0xfffffffe}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x935b}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xe4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r1, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) r6 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KIOCSOUND(r6, 0x4b2f, 0x1) dup2(r6, r5) r7 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xdffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x644e2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000002580)={0x0, 0x0, {}, {}, {0x0, @struct, 0x0}}) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f00000000c0)={r9, 0x0, 0x20}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r8, 0xc0189379, &(0x7f0000000080)=ANY=[@ANYRESHEX, @ANYRES32=r9, @ANYRESHEX=r7]) ioctl$BTRFS_IOC_DEV_INFO(r5, 0xd000941e, &(0x7f0000000600)={r9, "d68d56d89177cdf01ea20bd2fa288f7d"}) [ 2720.760554] FAULT_INJECTION: forcing a failure. [ 2720.760554] name failslab, interval 1, probability 0, space 0, times 0 [ 2720.762997] CPU: 0 PID: 15331 Comm: syz-executor.0 Not tainted 5.10.202 #1 [ 2720.764402] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2720.766053] Call Trace: [ 2720.766595] dump_stack+0x107/0x167 [ 2720.767342] should_fail.cold+0x5/0xa [ 2720.768111] ? create_object.isra.0+0x3a/0xa20 [ 2720.769055] should_failslab+0x5/0x20 [ 2720.769819] kmem_cache_alloc+0x5b/0x310 [ 2720.770683] ? lock_acquire+0x197/0x470 [ 2720.771482] create_object.isra.0+0x3a/0xa20 [ 2720.772372] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2720.773369] kmem_cache_alloc_node_trace+0x16d/0x340 [ 2720.774377] create_io_worker+0xe8/0x620 [ 2720.775177] io_wqe_enqueue+0x69e/0xbe0 [ 2720.775955] ? create_worker_cb+0x260/0x260 [ 2720.776818] ? io_prep_async_work+0x340/0x540 [ 2720.777699] io_queue_async_work+0x26b/0x4f0 [ 2720.778588] __io_queue_sqe+0x5cc/0x9d0 [ 2720.779366] ? io_issue_sqe+0x7700/0x7700 [ 2720.780191] io_submit_sqes+0x4461/0x85c0 [ 2720.781032] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 2720.782031] __do_sys_io_uring_enter+0x6b5/0x1920 [ 2720.782984] ? lock_downgrade+0x6d0/0x6d0 [ 2720.783788] ? find_held_lock+0x2c/0x110 [ 2720.784584] ? io_submit_sqes+0x85c0/0x85c0 [ 2720.785446] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2720.786428] ? wait_for_completion_io+0x270/0x270 [ 2720.787412] ? rcu_read_lock_any_held+0x75/0xa0 [ 2720.788335] ? vfs_write+0x354/0xa70 [ 2720.789059] ? fput_many+0x2f/0x1a0 [ 2720.789781] ? ksys_write+0x1a9/0x260 [ 2720.790533] ? __ia32_sys_read+0xb0/0xb0 [ 2720.791329] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2720.792355] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2720.793367] do_syscall_64+0x33/0x40 [ 2720.794098] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2720.795107] RIP: 0033:0x7fb03d693b19 [ 2720.795858] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2720.799469] RSP: 002b:00007fb03ac09188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2720.801007] RAX: ffffffffffffffda RBX: 00007fb03d7a6f60 RCX: 00007fb03d693b19 [ 2720.802395] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2720.803825] RBP: 00007fb03ac091d0 R08: 0000000000000000 R09: 0000000000000000 [ 2720.805191] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2720.806590] R13: 00007ffe77755f3f R14: 00007fb03ac09300 R15: 0000000000022000 05:55:35 executing program 3: socket$inet6_udp(0xa, 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r1 = socket$inet(0x2, 0xa, 0xff7ffffd) ioctl$SNAPSHOT_UNFREEZE(r1, 0x3302) dup3(r1, 0xffffffffffffffff, 0x0) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, &(0x7f0000000280)=""/208) r2 = socket$inet(0x2, 0xa, 0xff7ffffd) ioctl$SNAPSHOT_UNFREEZE(r2, 0x3302) dup3(r2, r0, 0x0) r3 = syz_io_uring_setup(0x3157, &(0x7f0000000140), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x8006, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x40000000, 0x100000, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) syz_io_uring_submit(r6, r5, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r3, 0x58ab, 0x0, 0x0, 0x0, 0x0) r7 = syz_open_dev$vcsa(0x0, 0xe11, 0x4000) ioctl$ifreq_SIOCGIFINDEX_wireguard(r7, 0x8933, &(0x7f0000000240)={'wg2\x00'}) syz_io_uring_setup(0xf25, &(0x7f00000001c0)={0x0, 0x10bd, 0x1, 0x1, 0x1c7, 0x0, r7}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)) 05:55:50 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 12) 05:55:50 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) socket$inet(0x2, 0xa, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3157, &(0x7f0000000140), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x40000000005e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd364, 0x0, @perf_bp={&(0x7f00000002c0), 0x1}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff1000/0x2000)=nil, 0x2000, 0x2, 0x1050, r1, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0xc0242, 0x0) getsockopt$inet_tcp_buf(r5, 0x6, 0x1c, &(0x7f00000001c0)=""/174, &(0x7f0000000280)=0xae) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000300)={'wg2\x00'}) 05:55:50 executing program 3: socket$inet6_udp(0xa, 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000040)={'sit0\x00'}) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r1 = socket$inet(0x2, 0xa, 0xff7ffffd) ioctl$SNAPSHOT_UNFREEZE(r1, 0x3302) r2 = dup3(r1, r0, 0x0) r3 = syz_io_uring_setup(0x3157, &(0x7f0000000140), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e23, 0x8, @local, 0x5}, 0x1c) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x8006, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x40000000, 0x100000, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) syz_io_uring_submit(r6, r5, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r3, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:55:50 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r1 = socket$inet(0x2, 0xa, 0xff7ffffd) ioctl$SNAPSHOT_UNFREEZE(r1, 0x3302) r2 = syz_io_uring_setup(0x3157, &(0x7f0000000140), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) syz_io_uring_submit(r5, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0xff95) 05:55:50 executing program 4: socket$inet6_udp(0xa, 0x2, 0x0) socket$inet(0x2, 0xa, 0xff7ffffd) r0 = syz_io_uring_setup(0x3157, &(0x7f0000000140), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x95ff, 0x0, 0x0, 0x0) 05:55:50 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x90000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4da5, 0x935b}, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:55:50 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x935b}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x2704000000000000, 0x0, 0x0) 05:55:50 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000000040)={0x2, {0x2, 0x3, 0x7, 0x1, 0x3ff, 0x14}}) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x935b}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x40000000) [ 2735.232595] FAULT_INJECTION: forcing a failure. [ 2735.232595] name failslab, interval 1, probability 0, space 0, times 0 [ 2735.235120] CPU: 1 PID: 15385 Comm: syz-executor.0 Not tainted 5.10.202 #1 [ 2735.236557] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2735.238287] Call Trace: [ 2735.238867] dump_stack+0x107/0x167 [ 2735.239621] should_fail.cold+0x5/0xa [ 2735.240425] ? copy_process+0x5d2/0x7800 [ 2735.241286] should_failslab+0x5/0x20 [ 2735.242096] kmem_cache_alloc_node+0x55/0x330 [ 2735.243070] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2735.244172] copy_process+0x5d2/0x7800 [ 2735.244994] ? stack_trace_save+0x8c/0xc0 [ 2735.245860] ? stack_trace_consume_entry+0x160/0x160 [ 2735.246945] ? kasan_save_stack+0x32/0x40 [ 2735.247817] ? kasan_save_stack+0x1b/0x40 [ 2735.248688] ? create_io_worker+0xe8/0x620 [ 2735.249564] ? io_wqe_enqueue+0x69e/0xbe0 [ 2735.250450] ? __cleanup_sighand+0xb0/0xb0 [ 2735.251344] ? __lockdep_reset_lock+0x180/0x180 [ 2735.252317] ? lock_acquire+0x197/0x470 [ 2735.253149] ? create_object.isra.0+0x3ad/0xa20 [ 2735.254162] ? lock_release+0x680/0x680 [ 2735.255217] ? find_held_lock+0x2c/0x110 [ 2735.256290] ? io_wqe_dec_running+0x220/0x220 [ 2735.257309] create_io_thread+0xb6/0xf0 [ 2735.258143] ? pidfd_pid+0x90/0x90 [ 2735.258900] ? mark_held_locks+0x9e/0xe0 [ 2735.259760] ? io_wqe_dec_running+0x220/0x220 [ 2735.260737] ? __init_swait_queue_head+0xc6/0x150 [ 2735.261753] create_io_worker+0x23a/0x620 [ 2735.262631] io_wqe_enqueue+0x69e/0xbe0 [ 2735.263463] ? create_worker_cb+0x260/0x260 [ 2735.264391] ? io_prep_async_work+0x340/0x540 [ 2735.265356] io_queue_async_work+0x26b/0x4f0 [ 2735.266295] __io_queue_sqe+0x5cc/0x9d0 [ 2735.267156] ? io_issue_sqe+0x7700/0x7700 [ 2735.268052] io_submit_sqes+0x4461/0x85c0 [ 2735.268980] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 2735.270030] __do_sys_io_uring_enter+0x6b5/0x1920 [ 2735.271065] ? lock_downgrade+0x6d0/0x6d0 [ 2735.271938] ? find_held_lock+0x2c/0x110 [ 2735.272824] ? io_submit_sqes+0x85c0/0x85c0 [ 2735.273781] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2735.274805] ? wait_for_completion_io+0x270/0x270 [ 2735.275829] ? rcu_read_lock_any_held+0x75/0xa0 [ 2735.276839] ? vfs_write+0x354/0xa70 [ 2735.277607] ? fput_many+0x2f/0x1a0 [ 2735.278378] ? ksys_write+0x1a9/0x260 [ 2735.279171] ? __ia32_sys_read+0xb0/0xb0 [ 2735.280061] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2735.281152] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2735.282227] do_syscall_64+0x33/0x40 [ 2735.283015] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2735.284075] RIP: 0033:0x7fb03d693b19 [ 2735.284862] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2735.288679] RSP: 002b:00007fb03ac09188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2735.290266] RAX: ffffffffffffffda RBX: 00007fb03d7a6f60 RCX: 00007fb03d693b19 [ 2735.291758] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2735.293234] RBP: 00007fb03ac091d0 R08: 0000000000000000 R09: 0000000000000000 [ 2735.294727] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2735.296195] R13: 00007ffe77755f3f R14: 00007fb03ac09300 R15: 0000000000022000 05:55:50 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x935b}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_dev$vcsa(0x0, 0xe11, 0x4000) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000000240)={'wg2\x00'}) io_uring_enter(r4, 0x736f, 0x7c72, 0x2, &(0x7f0000000040)={[0x8001]}, 0x8) 05:55:50 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000000040)={0x2, {0x2, 0x3, 0x7, 0x1, 0x3ff, 0x14}}) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x935b}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xbd040000) 05:55:50 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r1 = socket$inet(0x2, 0xa, 0xff7ffffd) ioctl$SNAPSHOT_UNFREEZE(r1, 0x3302) r2 = syz_io_uring_setup(0x3157, &(0x7f0000000140), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) syz_io_uring_submit(r5, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x400000) 05:55:50 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) socket$inet(0x2, 0xa, 0x0) sendmmsg$inet6(r0, &(0x7f0000000d80)=[{{&(0x7f0000000040)={0xa, 0x4e21, 0x800, @local, 0x100}, 0x1c, &(0x7f0000000700)=[{&(0x7f00000001c0)="dc53cc2fef8f4a76b5cca38b3808f6624c2db8ccdd5ad1afe80ba71162803ad00f3717", 0x23}, {&(0x7f0000000200)="40164fde96bad91c3ff9d30bf90a1c65c501e4ff5ece2b36a12c02e5ce19c70fd2e5e18d914bf53aacc32aceb283a7d81f503ffde0753b794b625f4d8dae7bb3cfcb9f1a7a24cc82a5d11e0474601a18e152f633638013a76f06063646da317d2e93f8a5c7fca2c77e91d718270226a0e20fe7232540c4814e8d703714e0908e79f5828347", 0x85}, {&(0x7f00000002c0)="b46cd59a8f61cca06d3cd09f5d14d8be4a558bf49f7e8ddcb4cf59cd72d575604407bbe6c8def4a3ed3a65386fc36d8d82f2bbbbb4a7acac69ea0e3f20428a5a2d07b50e3dd29f2b64631fbd84290a6f1b799089c919170d75809de6550987b46f2be212b0ede38fe99efd79a6c76eef6d4b0c39dfd97443cd1774e93a8a3c6a68eca81f15d68a9cfee0e3174cdef529d1e6e65fe499984f743529a74bbc8e2d28279f2d6a5f779725ec71905f878d67c53fd372451992b745656db99029a462a6466a28", 0xc4}, {&(0x7f00000003c0)="5fd98385223bffda2c695a3bb7106b0a4d136a2a0a5f932f7c3804a22879c8d13136f6e4576d2e7a3b2137937dccba18650df29c4b172eb10867e4a954913c4f3129882d1fb00ebdcd0e2dc0ad6799750dca2071f03be041be37312f50e15de557090b6fe43486fcc2984f631b42f599b128d26f5093b153158e6c9b67bec1adca757ec713bfdb26396aa5970b36b6c1421b97568c8acde7d9f2009e94cbdc5f51f46cb169b11c70c41116c82282a6499b189b550bcfaaf424109126ae344545c45be1d8f895e177c75f6904893cfb8fd3", 0xd1}, {&(0x7f00000004c0)="86b6efd7c30a3ff0d51c72b073ef4e7e8882883dfb51057a6c5c59efc20ddab8151b979083ca116d8c3e227363662e7015caf2a9de32b67e82574d4b117629621bdd141c19253c6635c22dd0d04ff86988d98bc9d0a83aea714240d7a317188476a2636926ff4c054501739237b64cef7dc052a7fd6bc63237020df01ffcc9a2a7437d91629e2c32340d82b25660c153d5704f87b0c43e67752b13da13ea02b036e1d74d7b5370678b1e68957bc10ff694915833a2a3ffa4af474e4f26c0f8020fc08b9fdaa63f3f276c02572e7eeb37b3a0638b312e7df53e1258b813204d3a233e277db5cbcdfc9100764937d57dd3c5cf", 0xf2}, {&(0x7f00000005c0)="16cc4ddb56e0f1aeaf6920f93b1f3ca4cf1578425cdc26f336716077afc05ff23c9ac8baef347f26f48d34d492093dac2634172a5a40e9d9600b545fdd8a86fdcfd74b4c65b266417ada18ab9f065c12cadbd59359e2e94af25a40aef9d23dedff0c9c4ace5a7d4405789fb54567b9f2f7486855d0b9d8", 0x77}, {&(0x7f0000000640)="a8e4fd30cb2f66d2be4b5f932ad89c240680a665b44d44d6efb5fdd36cc9a281ecdda61ea9fabcd9e443a018cfc5c08accb3689fcbbfb56767e13dfd44100acf591e655b126eb2e6ed334636cda26e5d5b0ec242619a864d5335ec977f79afed17b21e7d59ae0866eda7c0e210214ff0db7294e222c3625dced69cf8b0c21f8f326eaa3be916042fe9", 0x89}], 0x7, &(0x7f0000000780)=[@rthdr_2292={{0x48, 0x29, 0x39, {0x6c, 0x6, 0x1, 0x2, 0x0, [@private0, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01']}}}, @hopopts_2292={{0x30, 0x29, 0x36, {0x84, 0x2, '\x00', [@ra={0x5, 0x2, 0x8}, @hao={0xc9, 0x10, @mcast1}]}}}], 0x78}}, {{&(0x7f0000000800)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0x2}, 0x1c, &(0x7f0000000cc0)=[{&(0x7f0000000840)="b6172409d1af978ff5867f91aa77c22253d3ad8d17cebc7ccf64128ee8b53cece5e0f69dd195482df0e2b8bc7fce6c938401223e82630af772b4c4afbf7be6d7489ec47b8db49540d35efc6dd3f791060d3ad0725043e703c258470248e5e3f2049cc9f2c337ce37230ea77171e81ebe2a12a53f", 0x74}, {&(0x7f00000008c0)="faa0d9a92215a15b298f45fc81ce8211bab82ceea7d96e84ef5edb1b606a40cd60b8845542dcb67b4251945b2fafe0f7db3a9bfb29723970e3a3c54cc21b93e702cad3fae9760c9bc4d0c61346f7b73c866bba07a71c15e88100da5fc0a9c5f6c587627b5aed2a6b5f30863d6b743bffe7888e8d", 0x74}, {&(0x7f0000000940)="9d2ec2409f4ed0c7c8cfe81941ec4e63a6c1cdc9360d6eb8991cbf80570f1adab17f487be6614149c664ddd1dc5f8259262c434c0ecdcabb9dd1f412c0eeb5dcecae4c5c90b6fdc4d1e3f6", 0x4b}, {&(0x7f00000009c0)="3ca5c3fac858932c7b2e893e0f9d0f059898dcf12ba87c4f028b836d8c20c4afd414716c1eb8dad7cf620ec2d956b229ec93d83d32b2969b2fb037dad36ddc01eeb6ed975ee0580df82467bc63f5aa62fa1231e5d173432d4dfde8e478038c82d2b10aa8f5df828015b885a3506d8229afa659fd2f2f3b79d9a99dd0c07d3b13f938f9faaf562dec8ddb494f69ab11f72d87166a1eee2b6e59666923749f003e75bf8446dc0e9ca222434b4418bd4e13da66d95877e3a4bbc4234366d42f4e6fc1729b8d0a34d48271942a259ebfb53a9c118236f33c7371f684bdc905fd07f0378ce4f74db0f10ab4072d78", 0xec}, {&(0x7f0000000ac0)="e00bea869da923217026710404f2a30bdd0df86778ad37a126504fb7ac128a412072b03869f1ae4996facaf17894a86eb2e19a0d920850b24efe991a79f30bb16f269637c53fcc46f1a58bdedd27ece59adf287fbd1e2950673178de28bc8b2a5bd05b497298801fdb70021bd971", 0x6e}, {&(0x7f0000000b40)="dee0e97a8396efd0e1e33ebc4275715f7963b818e2c651d2c4fcbc47fc976fcb0e93995e9af921feb1a7e1c0de67efadfc18f6240d55965f5c02d6ea2813cd269989b0a6b01a70faf06a2022506246d9adf9afe322f86f07e2efa404c96d002bca56a92bedd212549bbc", 0x6a}, {&(0x7f0000000bc0)="cf", 0x1}, {&(0x7f0000000c00)="32553e5256f7ef165896f4f898a82c4638d552fc07826b29330a29840da523061f0ee5d1ad719bcfabccb4da14435c0a7649b624e78f96ab26588d927f545c29aa262ab84c8672ee181fa0c654768f831872063227bcb74f94e7b0f9ebb8888d931a560eefb1f397c4fef74bd06b34c84dc27a114e9910ac435dd3efe7db9a77cbd7cc1aaee04d2b025bd4d28e786601935511ca2cad9a0af9412a76802d3d03bad2152200e5f25c", 0xa8}], 0x8, &(0x7f0000000e00)=ANY=[@ANYBLOB="200000000000000029000000360000002b0000002ebb69000200000401650000000000"], 0x20}}], 0x2, 0x4000000) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3157, &(0x7f0000000140), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:55:50 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 13) 05:55:50 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(r1, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r2 = socket$inet(0x2, 0xa, 0xff7ffffd) ioctl$SNAPSHOT_UNFREEZE(r2, 0x3302) r3 = dup3(r0, r0, 0x0) r4 = syz_io_uring_setup(0x3157, &(0x7f0000000140), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x8006, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x40000000, 0x100000, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x9, 0x5, 0x1, 0x40, 0x0, 0x81, 0x4a284, 0x4, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x7f, 0x0, @perf_bp={&(0x7f0000000040), 0x3}, 0x110, 0x2, 0x7f, 0x7, 0x737, 0x8, 0x20, 0x0, 0x1}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0xf) syz_io_uring_submit(r7, r6, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f0000000240)={{0x1, 0x1, 0x18, r2, {r2}}, './file0\x00'}) ioctl$TUNSETQUEUE(r8, 0x400454d9, &(0x7f0000000280)={'team0\x00'}) io_uring_enter(r4, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:55:50 executing program 4: socket$inet6_udp(0xa, 0x2, 0x0) socket$inet(0x2, 0xa, 0xff7ffffd) r0 = syz_io_uring_setup(0x3157, &(0x7f0000000140), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0xff95, 0x0, 0x0, 0x0) [ 2735.788420] FAULT_INJECTION: forcing a failure. [ 2735.788420] name failslab, interval 1, probability 0, space 0, times 0 [ 2735.790767] CPU: 0 PID: 15435 Comm: syz-executor.0 Not tainted 5.10.202 #1 [ 2735.792177] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2735.793857] Call Trace: [ 2735.794430] dump_stack+0x107/0x167 [ 2735.795187] should_fail.cold+0x5/0xa [ 2735.795974] ? create_io_worker+0xe8/0x620 [ 2735.796841] should_failslab+0x5/0x20 [ 2735.797619] kmem_cache_alloc_node_trace+0x59/0x340 [ 2735.798650] create_io_worker+0xe8/0x620 [ 2735.799483] io_wqe_enqueue+0x69e/0xbe0 [ 2735.800299] ? create_worker_cb+0x260/0x260 [ 2735.801187] ? io_prep_async_work+0x340/0x540 [ 2735.802116] io_queue_async_work+0x26b/0x4f0 [ 2735.803037] __io_queue_sqe+0x5cc/0x9d0 [ 2735.803852] ? io_issue_sqe+0x7700/0x7700 [ 2735.804717] io_submit_sqes+0x4461/0x85c0 [ 2735.805610] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 2735.806635] __do_sys_io_uring_enter+0x6b5/0x1920 [ 2735.807629] ? lock_downgrade+0x6d0/0x6d0 [ 2735.808479] ? find_held_lock+0x2c/0x110 [ 2735.809313] ? io_submit_sqes+0x85c0/0x85c0 [ 2735.810202] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2735.811187] ? wait_for_completion_io+0x270/0x270 [ 2735.812177] ? rcu_read_lock_any_held+0x75/0xa0 [ 2735.813112] ? vfs_write+0x354/0xa70 [ 2735.813876] ? fput_many+0x2f/0x1a0 [ 2735.814634] ? ksys_write+0x1a9/0x260 [ 2735.815412] ? __ia32_sys_read+0xb0/0xb0 [ 2735.816245] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2735.817311] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2735.818378] do_syscall_64+0x33/0x40 [ 2735.819146] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2735.820193] RIP: 0033:0x7fb03d693b19 [ 2735.820955] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2735.824703] RSP: 002b:00007fb03ac09188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2735.826252] RAX: ffffffffffffffda RBX: 00007fb03d7a6f60 RCX: 00007fb03d693b19 [ 2735.827720] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2735.829172] RBP: 00007fb03ac091d0 R08: 0000000000000000 R09: 0000000000000000 [ 2735.830634] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2735.832082] R13: 00007ffe77755f3f R14: 00007fb03ac09300 R15: 0000000000022000 05:55:50 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r1 = socket$inet(0x2, 0xa, 0xff7ffffd) ioctl$SNAPSHOT_UNFREEZE(r1, 0x3302) r2 = syz_io_uring_setup(0x3157, &(0x7f0000000140), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) syz_io_uring_submit(r5, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x1000000) 05:55:50 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x935b}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x2804000000000000, 0x0, 0x0) 05:55:50 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)={0x24, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@nested={0x10, 0x0, 0x0, 0x1, [@typed={0x4}, @typed={0x8, 0xd, 0x0, 0x0, @u32}]}]}, 0x24}}, 0x0) listxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=""/30, 0x1e) linkat(0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000540)='./file0\x00', 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x935b}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) recvmsg(r3, &(0x7f0000000240)={&(0x7f0000000180)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000380)=""/119, 0x77}], 0x1, &(0x7f0000000400)=""/231, 0xe7}, 0x40000023) 05:55:50 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000000040)={0x2, {0x2, 0x3, 0x7, 0x1, 0x3ff, 0x14}}) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x935b}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xbe040000) 05:55:50 executing program 3: socket$inet6_udp(0xa, 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r1 = socket$inet(0x2, 0xa, 0xff7ffffd) ioctl$SNAPSHOT_UNFREEZE(r1, 0x3302) dup3(r1, r0, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000040)={'hsr0\x00'}) r2 = syz_io_uring_setup(0x3157, &(0x7f0000000140), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x8006, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x40000000, 0x100000, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) syz_io_uring_submit(r5, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:55:51 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 14) 05:55:51 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r1 = socket$inet(0x2, 0xa, 0xff7ffffd) ioctl$SNAPSHOT_UNFREEZE(r1, 0x3302) r2 = syz_io_uring_setup(0x3157, &(0x7f0000000140), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) syz_io_uring_submit(r5, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x20000000) 05:55:51 executing program 2: socket$inet6_udp(0xa, 0x2, 0x0) socket$inet(0x2, 0xa, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsa(0x0, 0xe11, 0x4000) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000240)={'wg2\x00'}) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000080)={0x0, 0xd68, 0xfffffffffffffffe}) r1 = syz_open_dev$vcsa(0x0, 0xe11, 0x4000) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000240)={'wg2\x00'}) r2 = syz_io_uring_setup(0x3157, &(0x7f0000000140)={0x0, 0xa250, 0x0, 0xc00, 0x3e5, 0x0, r1}, &(0x7f0000ff6000/0x2000)=nil, &(0x7f0000ff9000/0x6000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0), 0x240, 0x0) ioctl$HIDIOCGRAWNAME(r5, 0x80404804, &(0x7f0000000200)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) syz_io_uring_submit(r6, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2736.222205] FAULT_INJECTION: forcing a failure. [ 2736.222205] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2736.224217] CPU: 1 PID: 15480 Comm: syz-executor.0 Not tainted 5.10.202 #1 [ 2736.225396] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2736.226818] Call Trace: [ 2736.227274] dump_stack+0x107/0x167 [ 2736.227920] should_fail.cold+0x5/0xa [ 2736.228635] __alloc_pages_nodemask+0x182/0x600 [ 2736.229442] ? lock_downgrade+0x6d0/0x6d0 [ 2736.230153] ? __alloc_pages_slowpath.constprop.0+0x2130/0x2130 [ 2736.231182] ? memcg_slab_post_alloc_hook+0x17a/0x430 [ 2736.232048] ? kmem_cache_alloc_node+0x2bc/0x330 [ 2736.232876] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2736.233759] copy_process+0x618/0x7800 [ 2736.234441] ? stack_trace_save+0x8c/0xc0 [ 2736.235133] ? stack_trace_consume_entry+0x160/0x160 [ 2736.235990] ? kasan_save_stack+0x32/0x40 [ 2736.236681] ? kasan_save_stack+0x1b/0x40 [ 2736.237375] ? create_io_worker+0xe8/0x620 [ 2736.238074] ? io_wqe_enqueue+0x69e/0xbe0 [ 2736.238783] ? __cleanup_sighand+0xb0/0xb0 [ 2736.239492] ? __lockdep_reset_lock+0x180/0x180 [ 2736.240260] ? lock_acquire+0x197/0x470 [ 2736.240919] ? create_object.isra.0+0x3ad/0xa20 [ 2736.241694] ? lock_release+0x680/0x680 [ 2736.242355] ? find_held_lock+0x2c/0x110 [ 2736.243035] ? io_wqe_dec_running+0x220/0x220 [ 2736.243776] create_io_thread+0xb6/0xf0 [ 2736.244430] ? pidfd_pid+0x90/0x90 [ 2736.245016] ? mark_held_locks+0x9e/0xe0 [ 2736.245688] ? io_wqe_dec_running+0x220/0x220 [ 2736.246454] ? __init_swait_queue_head+0xc6/0x150 [ 2736.247252] create_io_worker+0x23a/0x620 [ 2736.247936] io_wqe_enqueue+0x69e/0xbe0 [ 2736.248595] ? create_worker_cb+0x260/0x260 [ 2736.249311] ? io_prep_async_work+0x340/0x540 [ 2736.250056] io_queue_async_work+0x26b/0x4f0 [ 2736.250791] __io_queue_sqe+0x5cc/0x9d0 [ 2736.251450] ? io_issue_sqe+0x7700/0x7700 [ 2736.252151] io_submit_sqes+0x4461/0x85c0 [ 2736.252862] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 2736.253678] __do_sys_io_uring_enter+0x6b5/0x1920 [ 2736.254490] ? lock_downgrade+0x6d0/0x6d0 [ 2736.255169] ? find_held_lock+0x2c/0x110 [ 2736.255842] ? io_submit_sqes+0x85c0/0x85c0 [ 2736.256561] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2736.257367] ? wait_for_completion_io+0x270/0x270 [ 2736.258160] ? rcu_read_lock_any_held+0x75/0xa0 [ 2736.258929] ? vfs_write+0x354/0xa70 [ 2736.259540] ? fput_many+0x2f/0x1a0 [ 2736.260135] ? ksys_write+0x1a9/0x260 [ 2736.260759] ? __ia32_sys_read+0xb0/0xb0 [ 2736.261428] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2736.262285] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2736.263147] do_syscall_64+0x33/0x40 [ 2736.263757] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2736.264596] RIP: 0033:0x7fb03d693b19 [ 2736.265201] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2736.268082] RSP: 002b:00007fb03ac09188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2736.269310] RAX: ffffffffffffffda RBX: 00007fb03d7a6f60 RCX: 00007fb03d693b19 [ 2736.270451] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2736.271584] RBP: 00007fb03ac091d0 R08: 0000000000000000 R09: 0000000000000000 [ 2736.272701] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2736.273818] R13: 00007ffe77755f3f R14: 00007fb03ac09300 R15: 0000000000022000 05:56:04 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 15) 05:56:04 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r1 = socket$inet(0x2, 0xa, 0xff7ffffd) ioctl$SNAPSHOT_UNFREEZE(r1, 0x3302) r2 = syz_io_uring_setup(0x3157, &(0x7f0000000140), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) syz_io_uring_submit(r5, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x95ffffff) 05:56:04 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x935b}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3f00000000000000, 0x0, 0x0) 05:56:04 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000000040)={0x2, {0x2, 0x3, 0x7, 0x1, 0x3ff, 0x14}}) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x935b}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xd72f0000) 05:56:04 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_complete(r1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x935b}, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:56:04 executing program 2: socket$inet6_udp(0xa, 0x2, 0x0) socket$inet(0x2, 0xa, 0x0) r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3157, &(0x7f0000000140), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f0000000040)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) ioctl$SG_GET_SCSI_ID(r5, 0x2276, &(0x7f00000001c0)) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r6, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:56:04 executing program 4: socket$inet6_udp(0xa, 0x2, 0x0) socket$inet(0x2, 0xa, 0xff7ffffd) r0 = syz_io_uring_setup(0x3157, &(0x7f0000000140), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x400000, 0x0, 0x0, 0x0) 05:56:04 executing program 3: socket$inet6_udp(0xa, 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r1 = socket$inet(0x2, 0xa, 0xff7ffffd) ioctl$SNAPSHOT_UNFREEZE(r1, 0x3302) dup3(r1, r0, 0x0) r2 = syz_io_uring_setup(0x2157, &(0x7f0000000140)={0x0, 0x3019}, &(0x7f0000ff6000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x8006, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x40000000, 0x100000, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) mmap(&(0x7f0000ff8000/0x1000)=nil, 0x1000, 0x2000000, 0x810, r1, 0x498e1000) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r1, 0xc0096616, &(0x7f0000000040)={0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) syz_io_uring_submit(r5, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2749.411122] FAULT_INJECTION: forcing a failure. [ 2749.411122] name failslab, interval 1, probability 0, space 0, times 0 [ 2749.413497] CPU: 0 PID: 15506 Comm: syz-executor.0 Not tainted 5.10.202 #1 [ 2749.414614] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2749.415917] Call Trace: [ 2749.416335] dump_stack+0x107/0x167 [ 2749.416954] should_fail.cold+0x5/0xa [ 2749.417574] ? copy_process+0x5d2/0x7800 [ 2749.418219] should_failslab+0x5/0x20 [ 2749.418876] kmem_cache_alloc_node+0x55/0x330 [ 2749.419581] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2749.420408] copy_process+0x5d2/0x7800 [ 2749.421033] ? stack_trace_save+0x8c/0xc0 [ 2749.421718] ? stack_trace_consume_entry+0x160/0x160 [ 2749.422584] ? kasan_save_stack+0x32/0x40 [ 2749.423266] ? kasan_save_stack+0x1b/0x40 [ 2749.423959] ? create_io_worker+0xe8/0x620 [ 2749.424657] ? io_wqe_enqueue+0x69e/0xbe0 [ 2749.425352] ? __cleanup_sighand+0xb0/0xb0 [ 2749.426062] ? __lockdep_reset_lock+0x180/0x180 [ 2749.426842] ? lock_acquire+0x197/0x470 [ 2749.427499] ? create_object.isra.0+0x3ad/0xa20 [ 2749.428270] ? lock_release+0x680/0x680 [ 2749.428931] ? find_held_lock+0x2c/0x110 [ 2749.429598] ? io_wqe_dec_running+0x220/0x220 [ 2749.430342] create_io_thread+0xb6/0xf0 [ 2749.431010] ? pidfd_pid+0x90/0x90 [ 2749.431595] ? mark_held_locks+0x9e/0xe0 [ 2749.432268] ? io_wqe_dec_running+0x220/0x220 [ 2749.433056] ? __init_swait_queue_head+0xc6/0x150 [ 2749.433872] create_io_worker+0x23a/0x620 [ 2749.434590] io_wqe_enqueue+0x69e/0xbe0 [ 2749.435273] ? create_worker_cb+0x260/0x260 [ 2749.436019] ? io_prep_async_work+0x340/0x540 [ 2749.436798] io_queue_async_work+0x26b/0x4f0 [ 2749.437549] __io_queue_sqe+0x5cc/0x9d0 [ 2749.438223] ? io_issue_sqe+0x7700/0x7700 [ 2749.438932] io_submit_sqes+0x4461/0x85c0 [ 2749.439667] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 2749.440518] __do_sys_io_uring_enter+0x6b5/0x1920 [ 2749.441330] ? lock_downgrade+0x6d0/0x6d0 [ 2749.442031] ? find_held_lock+0x2c/0x110 [ 2749.442677] ? io_submit_sqes+0x85c0/0x85c0 [ 2749.443403] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2749.444176] ? wait_for_completion_io+0x270/0x270 [ 2749.444971] ? rcu_read_lock_any_held+0x75/0xa0 [ 2749.445753] ? vfs_write+0x354/0xa70 [ 2749.446383] ? fput_many+0x2f/0x1a0 [ 2749.446998] ? ksys_write+0x1a9/0x260 [ 2749.447640] ? __ia32_sys_read+0xb0/0xb0 [ 2749.448317] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2749.449186] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2749.450059] do_syscall_64+0x33/0x40 [ 2749.450701] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2749.451565] RIP: 0033:0x7fb03d693b19 [ 2749.452194] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2749.455286] RSP: 002b:00007fb03ac09188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2749.456510] RAX: ffffffffffffffda RBX: 00007fb03d7a6f60 RCX: 00007fb03d693b19 [ 2749.457651] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2749.458811] RBP: 00007fb03ac091d0 R08: 0000000000000000 R09: 0000000000000000 [ 2749.459932] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2749.461056] R13: 00007ffe77755f3f R14: 00007fb03ac09300 R15: 0000000000022000 05:56:04 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000000040)={0x2, {0x2, 0x3, 0x7, 0x1, 0x3ff, 0x14}}) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x935b}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xd82f0000) 05:56:04 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r1 = socket$inet(0x2, 0xa, 0xff7ffffd) ioctl$SNAPSHOT_UNFREEZE(r1, 0x3302) r2 = syz_io_uring_setup(0x3157, &(0x7f0000000140), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) syz_io_uring_submit(r5, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0xffffff95) 05:56:19 executing program 2: socket$inet6_udp(0xa, 0x2, 0x0) socket$inet(0x2, 0xa, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3157, &(0x7f0000000140), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$vcsa(0x0, 0xe11, 0x4000) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000240)={'wg2\x00'}) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x4, 0x1, 0x3, 0x2, 0x0, 0x1ff, 0x4040, 0xa, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x7fffffff, 0x1, @perf_config_ext={0x2}, 0x20, 0xedb, 0x10001, 0x2, 0x5, 0x3f, 0x1000, 0x0, 0xffffffc1, 0x0, 0xa5}, 0xffffffffffffffff, 0xf, r3, 0x1) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) clock_gettime(0x0, &(0x7f0000000040)) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsetxattr$security_selinux(r5, &(0x7f0000000100), &(0x7f0000000340)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x12, 0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000000, 0x10010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r6, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x1f, 0x0, 0x0, 0x0, {0x204}}, 0x9) pipe(&(0x7f0000003fc0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r8, 0xc0045878, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_POLL_REMOVE={0x7, 0x4, 0x0, 0x0, 0x0, 0x1}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:56:19 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r1 = socket$inet(0x2, 0xa, 0xff7ffffd) ioctl$SNAPSHOT_UNFREEZE(r1, 0x3302) r2 = syz_io_uring_setup(0x3157, &(0x7f0000000140), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) syz_io_uring_submit(r5, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x7ffffffff000) 05:56:19 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 16) 05:56:19 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x935b}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x4000000000000000, 0x0, 0x0) 05:56:19 executing program 4: socket$inet6_udp(0xa, 0x2, 0x0) socket$inet(0x2, 0xa, 0xff7ffffd) r0 = syz_io_uring_setup(0x3157, &(0x7f0000000140), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x1000000, 0x0, 0x0, 0x0) 05:56:19 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000000040)={0x2, {0x2, 0x3, 0x7, 0x1, 0x3ff, 0x14}}) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x935b}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xe4ffffff) 05:56:19 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x50, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000001c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000480)="8439606a9aab51af76cea58ae810879b101270f213250ffa05c5d5a61fdb23b7968f61be80891b00919d6c006be78c15de76fc8b5dea0ebe98b89802f2666c501dc2fe627300e02af386ebf6d1e6d87f1bd27422ce54190a45f6b23461408f1c47b6276ff880002181a9b15e3bc35bc7feaacfd734068dbdb64a962af6f444427178367604a2299b9c65fee8baa83d1340f49cac72944b01", 0x98, 0x3}, 0x7ff) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1000000935b}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r5 = syz_io_uring_setup(0x1eb8, &(0x7f0000000040)={0x0, 0xdfb, 0x8, 0x1, 0x1f9, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) r8 = syz_open_dev$vcsa(0x0, 0xe11, 0x4000) ioctl$ifreq_SIOCGIFINDEX_wireguard(r8, 0x8933, &(0x7f0000000240)={'wg2\x00'}) r9 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x1b0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) r12 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x6, 0x12, r9, 0x10000000) syz_io_uring_submit(0x0, r12, &(0x7f0000000540)=@IORING_OP_RECVMSG={0xa, 0x3, 0x0, r8, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=@l2tp={0x2, 0x0, @broadcast}, 0x80, &(0x7f00000001c0), 0x0, &(0x7f0000000340)=""/140, 0x8c}, 0x0, 0x20, 0x1}, 0x2) r13 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000001, 0x40010, r8, 0x8000000) r14 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(r13, 0x0, &(0x7f0000000440)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x4, 0x0, @fd_index=0x9, 0xf4, 0x0, 0x0, 0x6, 0x1, {0x0, r14}}, 0xffffffff) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2764.292239] FAULT_INJECTION: forcing a failure. [ 2764.292239] name failslab, interval 1, probability 0, space 0, times 0 [ 2764.294588] CPU: 1 PID: 15557 Comm: syz-executor.0 Not tainted 5.10.202 #1 [ 2764.296038] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2764.297740] Call Trace: [ 2764.298297] dump_stack+0x107/0x167 [ 2764.299072] should_fail.cold+0x5/0xa [ 2764.299879] ? create_object.isra.0+0x3a/0xa20 [ 2764.301008] should_failslab+0x5/0x20 [ 2764.301807] kmem_cache_alloc+0x5b/0x310 [ 2764.302682] create_object.isra.0+0x3a/0xa20 [ 2764.303593] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2764.304632] kmem_cache_alloc+0x159/0x310 05:56:19 executing program 3: socket$inet6_udp(0xa, 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r1 = socket$inet(0x2, 0xa, 0xff7ffffd) ioctl$SNAPSHOT_UNFREEZE(r1, 0x3302) r2 = dup3(r1, r0, 0x0) r3 = syz_io_uring_setup(0x3157, &(0x7f0000000140), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x577f, &(0x7f00000001c0)={0x0, 0x764c, 0x20, 0x3, 0x15e, 0x0, r2}, &(0x7f0000ff4000/0x1000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000240)) syz_io_uring_setup(0x3eae, &(0x7f0000000280)={0x0, 0x1e99, 0x2, 0x1, 0xfa}, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)=0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r8 = socket$inet(0x2, 0xa, 0xff7ffffd) ioctl$SNAPSHOT_UNFREEZE(r8, 0x3302) dup3(r8, 0xffffffffffffffff, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000003c0)={'veth0_to_hsr\x00'}) syz_io_uring_submit(r6, r7, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x4, 0x2, &(0x7f0000000740)="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", 0x9, 0x0, 0x0, {0x2}}, 0x8) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x40, 0x0, 0x0, 0x5e, 0x8006, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x100000000}, 0x0, 0x40000000, 0x100000, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) syz_io_uring_submit(r9, r5, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r3, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2764.305606] __delayacct_tsk_init+0x1b/0x80 [ 2764.306650] copy_process+0x3319/0x7800 [ 2764.307677] ? stack_trace_save+0x8c/0xc0 [ 2764.308545] ? stack_trace_consume_entry+0x160/0x160 [ 2764.309635] ? kasan_save_stack+0x1b/0x40 [ 2764.310502] ? __cleanup_sighand+0xb0/0xb0 [ 2764.311420] ? __lockdep_reset_lock+0x180/0x180 [ 2764.312375] ? lock_acquire+0x197/0x470 [ 2764.313212] ? create_object.isra.0+0x3ad/0xa20 [ 2764.314169] ? lock_release+0x680/0x680 [ 2764.315029] ? find_held_lock+0x2c/0x110 [ 2764.315865] ? io_wqe_dec_running+0x220/0x220 [ 2764.316823] create_io_thread+0xb6/0xf0 [ 2764.317631] ? pidfd_pid+0x90/0x90 [ 2764.318367] ? mark_held_locks+0x9e/0xe0 [ 2764.319221] ? io_wqe_dec_running+0x220/0x220 [ 2764.320150] ? __init_swait_queue_head+0xc6/0x150 [ 2764.321148] create_io_worker+0x23a/0x620 [ 2764.321998] io_wqe_enqueue+0x69e/0xbe0 [ 2764.322836] ? create_worker_cb+0x260/0x260 [ 2764.323736] ? io_prep_async_work+0x340/0x540 [ 2764.324674] io_queue_async_work+0x26b/0x4f0 [ 2764.325583] __io_queue_sqe+0x5cc/0x9d0 [ 2764.326412] ? io_issue_sqe+0x7700/0x7700 [ 2764.327311] io_submit_sqes+0x4461/0x85c0 [ 2764.328213] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 2764.329233] __do_sys_io_uring_enter+0x6b5/0x1920 [ 2764.330234] ? lock_downgrade+0x6d0/0x6d0 [ 2764.331090] ? find_held_lock+0x2c/0x110 [ 2764.331935] ? io_submit_sqes+0x85c0/0x85c0 [ 2764.332829] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2764.333846] ? wait_for_completion_io+0x270/0x270 [ 2764.334837] ? rcu_read_lock_any_held+0x75/0xa0 [ 2764.335805] ? vfs_write+0x354/0xa70 [ 2764.336570] ? fput_many+0x2f/0x1a0 [ 2764.337326] ? ksys_write+0x1a9/0x260 [ 2764.338105] ? __ia32_sys_read+0xb0/0xb0 [ 2764.338995] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2764.340072] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2764.341145] do_syscall_64+0x33/0x40 [ 2764.341925] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2764.343000] RIP: 0033:0x7fb03d693b19 [ 2764.343776] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2764.347557] RSP: 002b:00007fb03ac09188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2764.349137] RAX: ffffffffffffffda RBX: 00007fb03d7a6f60 RCX: 00007fb03d693b19 [ 2764.350607] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2764.352092] RBP: 00007fb03ac091d0 R08: 0000000000000000 R09: 0000000000000000 [ 2764.353547] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2764.355022] R13: 00007ffe77755f3f R14: 00007fb03ac09300 R15: 0000000000022000 05:56:19 executing program 4: socket$inet6_udp(0xa, 0x2, 0x0) socket$inet(0x2, 0xa, 0xff7ffffd) r0 = syz_io_uring_setup(0x3157, &(0x7f0000000140), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x20000000, 0x0, 0x0, 0x0) 05:56:19 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r1 = socket$inet(0x2, 0xa, 0xff7ffffd) ioctl$SNAPSHOT_UNFREEZE(r1, 0x3302) r2 = syz_io_uring_setup(0x3157, &(0x7f0000000140), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) syz_io_uring_submit(r5, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x40000000000000) 05:56:19 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000000040)={0x2, {0x2, 0x3, 0x7, 0x1, 0x3ff, 0x14}}) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x935b}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xffffffe4) 05:56:19 executing program 3: socket$inet6_udp(0xa, 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r1 = socket$inet(0x2, 0xa, 0xff7ffffd) ioctl$SNAPSHOT_UNFREEZE(r1, 0x3302) dup3(r1, r0, 0x0) r2 = syz_io_uring_setup(0x3157, &(0x7f0000000140), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f0000000040)={{{@in, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}}, {{@in6=@rand_addr=' \x01\x00', 0x0, 0x6c}, 0x0, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}, 0xe8) setsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f0000000340)={{{@in=@dev, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x32}, 0x0, @in6=@empty}}, 0xe8) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@flushpolicy={0x10, 0x1d, 0x1}, 0x10}}, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x8006, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x40000000, 0x100000, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) syz_io_uring_submit(r7, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:56:19 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000040)={0x0, 0x3ece}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x935b}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:56:19 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 17) 05:56:19 executing program 4: socket$inet6_udp(0xa, 0x2, 0x0) socket$inet(0x2, 0xa, 0xff7ffffd) r0 = syz_io_uring_setup(0x3157, &(0x7f0000000140), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x95ffffff, 0x0, 0x0, 0x0) [ 2764.878824] FAULT_INJECTION: forcing a failure. [ 2764.878824] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2764.881321] CPU: 1 PID: 15621 Comm: syz-executor.0 Not tainted 5.10.202 #1 [ 2764.882754] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2764.884491] Call Trace: [ 2764.885035] dump_stack+0x107/0x167 [ 2764.885795] should_fail.cold+0x5/0xa [ 2764.886583] __alloc_pages_nodemask+0x182/0x600 [ 2764.887561] ? lock_downgrade+0x6d0/0x6d0 [ 2764.888412] ? __alloc_pages_slowpath.constprop.0+0x2130/0x2130 [ 2764.889666] ? memcg_slab_post_alloc_hook+0x17a/0x430 [ 2764.890754] ? kmem_cache_alloc_node+0x2bc/0x330 [ 2764.891745] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2764.892831] copy_process+0x618/0x7800 [ 2764.893641] ? stack_trace_save+0x8c/0xc0 [ 2764.894508] ? stack_trace_consume_entry+0x160/0x160 [ 2764.895589] ? kasan_save_stack+0x32/0x40 [ 2764.896441] ? kasan_save_stack+0x1b/0x40 05:56:19 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r1 = socket$inet(0x2, 0xa, 0xff7ffffd) ioctl$SNAPSHOT_UNFREEZE(r1, 0x3302) r2 = syz_io_uring_setup(0x3157, &(0x7f0000000140), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) syz_io_uring_submit(r5, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0xf0ffffff7f0000) [ 2764.897298] ? create_io_worker+0xe8/0x620 [ 2764.898312] ? io_wqe_enqueue+0x69e/0xbe0 [ 2764.899187] ? __cleanup_sighand+0xb0/0xb0 [ 2764.900051] ? __lockdep_reset_lock+0x180/0x180 [ 2764.901004] ? lock_acquire+0x197/0x470 [ 2764.901819] ? create_object.isra.0+0x3ad/0xa20 [ 2764.902791] ? lock_release+0x680/0x680 05:56:19 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000000040)={0x2, {0x2, 0x3, 0x7, 0x1, 0x3ff, 0x14}}) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x935b}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x1000000000000) [ 2764.903603] ? find_held_lock+0x2c/0x110 [ 2764.904547] ? io_wqe_dec_running+0x220/0x220 [ 2764.905463] create_io_thread+0xb6/0xf0 [ 2764.906273] ? pidfd_pid+0x90/0x90 [ 2764.907019] ? mark_held_locks+0x9e/0xe0 [ 2764.907855] ? io_wqe_dec_running+0x220/0x220 [ 2764.908804] ? __init_swait_queue_head+0xc6/0x150 [ 2764.909792] create_io_worker+0x23a/0x620 [ 2764.910639] io_wqe_enqueue+0x69e/0xbe0 [ 2764.911474] ? create_worker_cb+0x260/0x260 [ 2764.912373] ? io_prep_async_work+0x340/0x540 [ 2764.913303] io_queue_async_work+0x26b/0x4f0 [ 2764.914221] __io_queue_sqe+0x5cc/0x9d0 [ 2764.915060] ? io_issue_sqe+0x7700/0x7700 [ 2764.915931] io_submit_sqes+0x4461/0x85c0 [ 2764.916808] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 2764.917830] __do_sys_io_uring_enter+0x6b5/0x1920 [ 2764.918836] ? lock_downgrade+0x6d0/0x6d0 [ 2764.919680] ? find_held_lock+0x2c/0x110 [ 2764.920533] ? io_submit_sqes+0x85c0/0x85c0 [ 2764.921435] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2764.922430] ? wait_for_completion_io+0x270/0x270 [ 2764.923468] ? rcu_read_lock_any_held+0x75/0xa0 [ 2764.924422] ? vfs_write+0x354/0xa70 [ 2764.925190] ? fput_many+0x2f/0x1a0 [ 2764.925935] ? ksys_write+0x1a9/0x260 [ 2764.926746] ? __ia32_sys_read+0xb0/0xb0 [ 2764.927577] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2764.928670] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2764.929750] do_syscall_64+0x33/0x40 [ 2764.930532] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2764.931666] RIP: 0033:0x7fb03d693b19 [ 2764.932436] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2764.936184] RSP: 002b:00007fb03ac09188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2764.937746] RAX: ffffffffffffffda RBX: 00007fb03d7a6f60 RCX: 00007fb03d693b19 [ 2764.939231] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2764.940683] RBP: 00007fb03ac091d0 R08: 0000000000000000 R09: 0000000000000000 [ 2764.942139] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2764.943614] R13: 00007ffe77755f3f R14: 00007fb03ac09300 R15: 0000000000022000 05:56:19 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x935b}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0xe4ffffff00000000, 0x0, 0x0) 05:56:19 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) socket$inet(0x2, 0xa, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3157, &(0x7f00000001c0), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000240)={0x0, 0x0}) perf_event_open(&(0x7f0000000140)={0x3, 0x80, 0x0, 0x4e, 0x3a, 0x80, 0x0, 0x10000, 0x0, 0xc, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x4, @perf_bp={&(0x7f0000000040), 0x3}, 0x14000, 0x400000000000000, 0x1, 0x1, 0x578, 0xff, 0x1, 0x0, 0x85, 0x0, 0x3}, r5, 0x1, 0xffffffffffffffff, 0x3) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsetxattr$security_selinux(r6, &(0x7f0000000100), &(0x7f0000000340)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x12, 0x0) r7 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000000, 0x10010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r7, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x1f, 0x0, 0x0, 0x0, {0x204}}, 0x9) pipe(&(0x7f0000003fc0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r8, 0xc0045878, 0x0) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r7, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r9}}, 0x800) syz_io_uring_submit(0x0, r3, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)='./file0\x00', 0x116, 0x84400, 0x12345, {0x0, r9}}, 0x400) 05:56:19 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x3e4c148c624b5902, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x935b}, 0x1004}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_dev$vcsa(0x0, 0xe11, 0x4000) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000000240)={'wg2\x00'}) readv(r4, &(0x7f00000001c0)=[{&(0x7f0000000040)=""/131, 0x83}, {&(0x7f0000000180)=""/29, 0x1d}], 0x2) 05:56:20 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r1 = socket$inet(0x2, 0xa, 0xff7ffffd) ioctl$SNAPSHOT_UNFREEZE(r1, 0x3302) r2 = syz_io_uring_setup(0x3157, &(0x7f0000000140), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) syz_io_uring_submit(r5, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x100000000000000) 05:56:20 executing program 4: socket$inet6_udp(0xa, 0x2, 0x0) socket$inet(0x2, 0xa, 0xff7ffffd) r0 = syz_io_uring_setup(0x3157, &(0x7f0000000140), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0xffffff95, 0x0, 0x0, 0x0) 05:56:20 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000000040)={0x2, {0x2, 0x3, 0x7, 0x1, 0x3ff, 0x14}}) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x935b}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x80000000000000) 05:56:20 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000004c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x103400, 0x0) io_uring_enter(r3, 0x66ea, 0x45d1, 0x1, &(0x7f0000000080)={[0x1]}, 0x8) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r3, 0x8008f512, &(0x7f0000000180)) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = perf_event_open(&(0x7f0000001d80)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x935b}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xa, 0x50, r0, 0x10000000) r7 = dup(r5) close_range(r0, r3, 0x0) syz_io_uring_submit(r4, r6, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x2007, @fd=r7, 0x1ff, &(0x7f0000000340)=""/237, 0xed, 0x2}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_OPENAT={0x12, 0x3, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)='./file0\x00', 0xa0, 0x20000, 0x31713}, 0x9) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) fgetxattr(r3, &(0x7f0000000280)=@known='system.posix_acl_access\x00', &(0x7f0000000440)=""/123, 0x7b) 05:56:20 executing program 2: socket$inet6_udp(0xa, 0x2, 0x0) socket$inet(0x2, 0xa, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3157, &(0x7f0000000140), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:56:20 executing program 3: socket$inet6_udp(0xa, 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r1 = socket$inet(0x2, 0xa, 0xff7ffffd) ioctl$SNAPSHOT_UNFREEZE(r1, 0x3302) r2 = dup3(r1, r0, 0x0) r3 = syz_io_uring_setup(0x3157, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x3}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x3, 0x0}, 0x0) write$P9_RLERROR(r2, &(0x7f0000000080)={0xa, 0x7, 0x1, {0x1, '\x00'}}, 0xa) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x8006, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x40000000, 0x100000, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff7000/0x1000)=nil, 0x1000, 0x8, 0x30, r3, 0x8000000) syz_io_uring_submit(r6, r5, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x80800}, 0x8001) sync_file_range(r1, 0x1, 0xfffffffffffffffc, 0x3) io_uring_enter(r3, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2780.134270] FAULT_INJECTION: forcing a failure. [ 2780.134270] name failslab, interval 1, probability 0, space 0, times 0 [ 2780.137015] CPU: 0 PID: 15698 Comm: syz-executor.0 Not tainted 5.10.202 #1 [ 2780.138674] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2780.140613] Call Trace: [ 2780.141181] dump_stack+0x107/0x167 [ 2780.141961] should_fail.cold+0x5/0xa [ 2780.142767] ? create_object.isra.0+0x3a/0xa20 [ 2780.143767] should_failslab+0x5/0x20 [ 2780.144568] kmem_cache_alloc+0x5b/0x310 [ 2780.145437] create_object.isra.0+0x3a/0xa20 [ 2780.146363] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2780.147473] kmem_cache_alloc+0x159/0x310 [ 2780.148358] alloc_pid+0xd7/0xd30 [ 2780.149116] copy_process+0x3a8e/0x7800 [ 2780.149962] ? stack_trace_save+0x8c/0xc0 [ 2780.150848] ? stack_trace_consume_entry+0x160/0x160 [ 2780.151970] ? __cleanup_sighand+0xb0/0xb0 [ 2780.152874] ? __lockdep_reset_lock+0x180/0x180 [ 2780.153849] ? lock_acquire+0x197/0x470 [ 2780.154691] ? create_object.isra.0+0x3ad/0xa20 [ 2780.155700] ? lock_release+0x680/0x680 [ 2780.156543] ? find_held_lock+0x2c/0x110 [ 2780.157407] ? io_wqe_dec_running+0x220/0x220 [ 2780.158353] create_io_thread+0xb6/0xf0 [ 2780.159219] ? pidfd_pid+0x90/0x90 [ 2780.159969] ? mark_held_locks+0x9e/0xe0 [ 2780.160827] ? io_wqe_dec_running+0x220/0x220 [ 2780.161788] ? __init_swait_queue_head+0xc6/0x150 [ 2780.162782] create_io_worker+0x23a/0x620 [ 2780.163691] io_wqe_enqueue+0x69e/0xbe0 [ 2780.164531] ? create_worker_cb+0x260/0x260 [ 2780.165446] ? io_prep_async_work+0x340/0x540 [ 2780.166398] io_queue_async_work+0x26b/0x4f0 [ 2780.167346] __io_queue_sqe+0x5cc/0x9d0 [ 2780.168188] ? io_issue_sqe+0x7700/0x7700 [ 2780.169078] io_submit_sqes+0x4461/0x85c0 [ 2780.169987] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 2780.171075] __do_sys_io_uring_enter+0x6b5/0x1920 [ 2780.172097] ? lock_downgrade+0x6d0/0x6d0 [ 2780.172962] ? find_held_lock+0x2c/0x110 [ 2780.173823] ? io_submit_sqes+0x85c0/0x85c0 [ 2780.174743] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2780.175776] ? wait_for_completion_io+0x270/0x270 [ 2780.176793] ? rcu_read_lock_any_held+0x75/0xa0 [ 2780.177766] ? vfs_write+0x354/0xa70 [ 2780.178555] ? fput_many+0x2f/0x1a0 [ 2780.179347] ? ksys_write+0x1a9/0x260 [ 2780.180153] ? __ia32_sys_read+0xb0/0xb0 [ 2780.181016] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2780.182126] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2780.183245] do_syscall_64+0x33/0x40 [ 2780.184030] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2780.185105] RIP: 0033:0x7fb03d693b19 [ 2780.185885] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2780.189747] RSP: 002b:00007fb03ac09188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2780.191355] RAX: ffffffffffffffda RBX: 00007fb03d7a6f60 RCX: 00007fb03d693b19 [ 2780.192850] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2780.194344] RBP: 00007fb03ac091d0 R08: 0000000000000000 R09: 0000000000000000 [ 2780.195855] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2780.197344] R13: 00007ffe77755f3f R14: 00007fb03ac09300 R15: 0000000000022000 05:56:35 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 18) 05:56:35 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r1 = socket$inet(0x2, 0xa, 0xff7ffffd) ioctl$SNAPSHOT_UNFREEZE(r1, 0x3302) r2 = syz_io_uring_setup(0x3157, &(0x7f0000000140), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) syz_io_uring_submit(r5, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x2000000000000000) 05:56:35 executing program 2: socket$inet6_udp(0xa, 0x2, 0x0) socket$inet(0x2, 0xa, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3157, &(0x7f0000000140), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r4 = syz_open_dev$vcsa(0x0, 0xe11, 0x4000) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000000240)={'wg2\x00'}) io_uring_enter(r4, 0x722e, 0xa5c9, 0x2, &(0x7f0000000040)={[0x3f]}, 0x8) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:56:35 executing program 3: socket$inet6_udp(0xa, 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r1 = socket$inet(0x2, 0xa, 0xff7ffffd) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f00000005c0)={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x28}}, {0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2c}}, 0xe6, {0x2, 0x4e22, @empty}, 'macvlan0\x00'}) ioctl$SNAPSHOT_UNFREEZE(r1, 0x3302) dup3(r1, r0, 0x0) r2 = syz_io_uring_setup(0x3157, &(0x7f0000000140), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x8006, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x40000000, 0x100000, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) syz_io_uring_submit(r5, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(r6, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r7 = socket$inet(0x2, 0xa, 0xff7ffffd) ioctl$SNAPSHOT_UNFREEZE(r7, 0x3302) dup3(r7, r6, 0x0) ioctl$BTRFS_IOC_SCRUB(r6, 0xc400941b, &(0x7f00000001c0)={0x0, 0x79155ae4, 0x100000000}) io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:56:35 executing program 4: socket$inet6_udp(0xa, 0x2, 0x0) socket$inet(0x2, 0xa, 0xff7ffffd) r0 = syz_io_uring_setup(0x3157, &(0x7f0000000140), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0xffffffff, 0x0, 0x0, 0x0) 05:56:35 executing program 6: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r1 = syz_io_uring_setup(0x78da, &(0x7f0000000180)={0x0, 0xa03f, 0x20, 0x0, 0xa6, 0x0, r0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x935b}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x77359400}, 0x1, 0x0, 0x0, {0x0, r5}}, 0x7) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:56:35 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000000040)={0x2, {0x2, 0x3, 0x7, 0x1, 0x3ff, 0x14}}) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x935b}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x200000000000000) 05:56:35 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x935b}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0xffffffff00000000, 0x0, 0x0) 05:56:35 executing program 4: socket$inet6_udp(0xa, 0x2, 0x0) socket$inet(0x2, 0xa, 0xff7ffffd) r0 = syz_io_uring_setup(0x3157, &(0x7f0000000140), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x95, 0x0, 0x0) 05:56:35 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x935b}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x2) 05:56:35 executing program 2: socket$inet6_udp(0xa, 0x2, 0x0) socket$inet(0x2, 0xa, 0x0) r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3157, &(0x7f0000000140), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000240), 0x10201, 0x0) connect$inet6(r4, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @local, 0x3}, 0x1c) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, 0x0, 0x3f996a72c62b6280}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = dup(r5) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="2804000006db278cdd129f003915b252db072bbb02c17720f3dde9458d", @ANYRES16=r7, @ANYBLOB="250300000000000000000100000008000100000000000c0099000000000000000000"], 0x28}}, 0x0) sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)={0x94, r7, 0x800, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_SSID={0x1d, 0x34, @random="2aaaafd466db0a9758d2b17209f23e548d3471a402f2177bbb"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_REASON_CODE={0x6}, @NL80211_ATTR_MAC={0xa, 0x6, @random="1fbc44b21ab2"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}]}, 0x94}, 0x1, 0x0, 0x0, 0x80}, 0x40) r8 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r8, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:56:35 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsetxattr$security_selinux(r3, &(0x7f0000000100), &(0x7f0000000340)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x12, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000000, 0x10010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r4, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x1f, 0x0, 0x0, 0x0, {0x204}}, 0x9) pipe(&(0x7f0000003fc0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r5, 0xc0045878, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) r7 = syz_open_dev$vcsn(&(0x7f0000000080), 0x5, 0x412100) openat$cgroup_ro(r7, &(0x7f0000000180)='freezer.parent_freezing\x00', 0x0, 0x0) r8 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsetxattr$security_selinux(r8, &(0x7f0000000100), &(0x7f0000000340)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x12, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0), 0x1, 0x1, 0x0, {0x0, r6}}, 0x401) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x8, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_ASYNC_CANCEL={0xe, 0x15144008a90c3ab1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r6}}, 0x4) r9 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x935b}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r9, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:56:35 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r1 = socket$inet(0x2, 0xa, 0xff7ffffd) ioctl$SNAPSHOT_UNFREEZE(r1, 0x3302) r2 = syz_io_uring_setup(0x3157, &(0x7f0000000140), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) syz_io_uring_submit(r5, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x95ffffffffffffff) 05:56:35 executing program 4: socket$inet6_udp(0xa, 0x2, 0x0) socket$inet(0x2, 0xa, 0xff7ffffd) r0 = syz_io_uring_setup(0x3157, &(0x7f0000000140), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x2000, 0x0, 0x0) 05:56:35 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000000040)={0x2, {0x2, 0x3, 0x7, 0x1, 0x3ff, 0x14}}) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x935b}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x500000000000000) 05:56:49 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 19) 05:56:49 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)=ANY=[@ANYBLOB="01f2ffff000000001800819b2bbac64e0000cc32a2a529d04c4825865d2279898447ec9eed69837c05ed8f676a209536be4696af9e08ee99bcae90efff2a3c917086136ce24d6e6a4f52dfc9dbbdb7e02850423c4a8debf779ddf3", @ANYRES32=r0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB='./file0\x00']) io_uring_enter(r4, 0xccb, 0xd8e0, 0x0, &(0x7f0000000080)={[0x1ff]}, 0x8) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x5631, &(0x7f0000000180)={0x0, 0xf178, 0x2, 0x3, 0x1f7, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000000c0)=0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(r8, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r9 = socket$inet(0x2, 0xa, 0xff7ffffd) ioctl$SNAPSHOT_UNFREEZE(r9, 0x3302) dup3(r9, r8, 0x0) syz_io_uring_submit(r5, r7, &(0x7f0000000340)=@IORING_OP_TEE={0x21, 0x1, 0x0, @fd_index=0x5, 0x0, 0x0, 0x573, 0x5, 0x1, {0x0, 0x0, r8}}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x935b}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:56:49 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000000040)={0x2, {0x2, 0x3, 0x7, 0x1, 0x3ff, 0x14}}) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x935b}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x800000000000000) 05:56:49 executing program 2: socket$inet6_udp(0xa, 0x2, 0x0) socket$inet(0x2, 0xa, 0x0) r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3157, &(0x7f0000000140), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0xa, &(0x7f0000000040)=0x3, 0x4) 05:56:49 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x935b}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x5) 05:56:49 executing program 4: socket$inet6_udp(0xa, 0x2, 0x0) socket$inet(0x2, 0xa, 0xff7ffffd) r0 = syz_io_uring_setup(0x3157, &(0x7f0000000140), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x4000, 0x0, 0x0) 05:56:49 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r1 = socket$inet(0x2, 0xa, 0xff7ffffd) ioctl$SNAPSHOT_UNFREEZE(r1, 0x3302) r2 = syz_io_uring_setup(0x3157, &(0x7f0000000140), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) syz_io_uring_submit(r5, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0xffffffff00000000) 05:56:49 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(r1, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r2 = socket$inet(0x2, 0xa, 0xff7ffffd) ioctl$SNAPSHOT_UNFREEZE(r2, 0x3302) dup3(r2, r1, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(r3, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r4 = socket$inet(0x2, 0xa, 0xff7ffffd) ioctl$SNAPSHOT_UNFREEZE(r4, 0x3302) r5 = dup3(r4, r3, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000040)={'ip_vti0\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB='erspan0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="07000008ffffc000000100014c2100b000640000000490787f000001ac1414bb8632000000000010de5671e7f0a3e8e0c97ad1cfbbe30511ac98a325ee80b15410b91a1cdcc6cdb32a443c2f830a010102000000010a01010200000008e000000100000001ac1e000100006a6bffffffff000000000a01010100000000ffff010001000100442c0300ac1414bb00000401ac141441000000800a01010100000005ac1414aafdfffffb0a0101020000060600"/188]}) ioctl$TUNSETIFINDEX(r3, 0x400454da, &(0x7f00000002c0)=r6) r7 = syz_io_uring_setup(0x3157, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x8006, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x40000000, 0x100000, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r10 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r7, 0x0) syz_io_uring_submit(r10, r9, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) ioctl$INCFS_IOC_PERMIT_FILL(r0, 0x40046721, &(0x7f0000000300)={r3}) io_uring_enter(r7, 0x3c6d, 0x0, 0x2, 0x0, 0x0) [ 2794.330294] FAULT_INJECTION: forcing a failure. [ 2794.330294] name failslab, interval 1, probability 0, space 0, times 0 [ 2794.332681] CPU: 0 PID: 15787 Comm: syz-executor.0 Not tainted 5.10.202 #1 [ 2794.334121] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2794.335876] Call Trace: [ 2794.336427] dump_stack+0x107/0x167 [ 2794.337178] should_fail.cold+0x5/0xa [ 2794.337968] should_failslab+0x5/0x20 [ 2794.338752] kmem_cache_alloc_bulk+0x4b/0x320 [ 2794.339742] io_submit_sqes+0x6f76/0x85c0 [ 2794.340624] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 2794.341631] __do_sys_io_uring_enter+0x6b5/0x1920 [ 2794.342618] ? lock_downgrade+0x6d0/0x6d0 [ 2794.343501] ? find_held_lock+0x2c/0x110 [ 2794.344336] ? io_submit_sqes+0x85c0/0x85c0 [ 2794.345223] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2794.346207] ? wait_for_completion_io+0x270/0x270 [ 2794.347209] ? rcu_read_lock_any_held+0x75/0xa0 [ 2794.348184] ? vfs_write+0x354/0xa70 [ 2794.348957] ? fput_many+0x2f/0x1a0 [ 2794.349704] ? ksys_write+0x1a9/0x260 [ 2794.350476] ? __ia32_sys_read+0xb0/0xb0 [ 2794.351367] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2794.352462] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2794.353520] do_syscall_64+0x33/0x40 [ 2794.354279] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2794.355334] RIP: 0033:0x7fb03d693b19 [ 2794.356094] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2794.359917] RSP: 002b:00007fb03ac09188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2794.361462] RAX: ffffffffffffffda RBX: 00007fb03d7a6f60 RCX: 00007fb03d693b19 [ 2794.362915] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2794.364423] RBP: 00007fb03ac091d0 R08: 0000000000000000 R09: 0000000000000000 [ 2794.365947] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2794.367396] R13: 00007ffe77755f3f R14: 00007fb03ac09300 R15: 0000000000022000 05:56:49 executing program 4: socket$inet6_udp(0xa, 0x2, 0x0) socket$inet(0x2, 0xa, 0xff7ffffd) r0 = syz_io_uring_setup(0x3157, &(0x7f0000000140), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x95ff, 0x0, 0x0) 05:56:49 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000000040)={0x2, {0x2, 0x3, 0x7, 0x1, 0x3ff, 0x14}}) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x935b}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x2000000000000000) 05:56:49 executing program 4: socket$inet6_udp(0xa, 0x2, 0x0) socket$inet(0x2, 0xa, 0xff7ffffd) r0 = syz_io_uring_setup(0x3157, &(0x7f0000000140), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0xff95, 0x0, 0x0) 05:56:49 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r1 = socket$inet(0x2, 0xa, 0xff7ffffd) ioctl$SNAPSHOT_UNFREEZE(r1, 0x3302) r2 = syz_io_uring_setup(0x3157, &(0x7f0000000140), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) syz_io_uring_submit(r5, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0xffffffffffffff95) 05:56:49 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 20) 05:56:49 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = dup(r0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="2804000006db278cdd129f003915b252db072bbb02c17720f3dde9458d", @ANYRES16=r2, @ANYBLOB="250300000000000000000100000008000100000000000c0099000000000000000000"], 0x28}}, 0x0) sendmsg$NL80211_CMD_GET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r2, 0x400, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x228d, 0x50}}}}, ["", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x8880}, 0x8054) r3 = socket$inet6_udp(0xa, 0x2, 0x0) tee(r3, r3, 0x3f4a, 0x1) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(r4, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r5 = socket$inet(0x2, 0xa, 0xff7ffffd) ioctl$SNAPSHOT_UNFREEZE(r5, 0x3302) r6 = dup3(r5, r4, 0x0) r7 = syz_io_uring_setup(0x3157, &(0x7f0000000140), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x8006, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_config_ext, 0x0, 0x40000000, 0x100000, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r10 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r7, 0x0) syz_io_uring_submit(r10, r9, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r6, 0x58ab, 0x2320, 0x2, 0x0, 0x0) [ 2794.789076] FAULT_INJECTION: forcing a failure. [ 2794.789076] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2794.791791] CPU: 1 PID: 15837 Comm: syz-executor.0 Not tainted 5.10.202 #1 [ 2794.793302] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2794.795132] Call Trace: [ 2794.795723] dump_stack+0x107/0x167 [ 2794.796529] should_fail.cold+0x5/0xa [ 2794.797378] __alloc_pages_nodemask+0x182/0x600 [ 2794.798424] ? __alloc_pages_slowpath.constprop.0+0x2130/0x2130 [ 2794.799785] alloc_pages_current+0x187/0x280 [ 2794.800746] allocate_slab+0x26f/0x380 [ 2794.801605] ___slab_alloc+0x470/0x700 [ 2794.802457] ? io_submit_sqes+0x6f76/0x85c0 [ 2794.803413] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2794.804552] ? trace_hardirqs_on+0x5b/0x180 [ 2794.805504] ? kmem_cache_alloc_bulk+0x1ec/0x320 [ 2794.806535] kmem_cache_alloc_bulk+0x1ec/0x320 [ 2794.807535] io_submit_sqes+0x6f76/0x85c0 [ 2794.808478] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 2794.809577] __do_sys_io_uring_enter+0x6b5/0x1920 [ 2794.810627] ? lock_downgrade+0x6d0/0x6d0 [ 2794.811539] ? find_held_lock+0x2c/0x110 [ 2794.812429] ? io_submit_sqes+0x85c0/0x85c0 [ 2794.813375] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2794.814422] ? wait_for_completion_io+0x270/0x270 [ 2794.815478] ? rcu_read_lock_any_held+0x75/0xa0 [ 2794.816482] ? vfs_write+0x354/0xa70 [ 2794.817294] ? fput_many+0x2f/0x1a0 [ 2794.818085] ? ksys_write+0x1a9/0x260 [ 2794.818909] ? __ia32_sys_read+0xb0/0xb0 [ 2794.819810] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2794.820940] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2794.822062] do_syscall_64+0x33/0x40 [ 2794.822871] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2794.823980] RIP: 0033:0x7fb03d693b19 [ 2794.824786] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2794.828752] RSP: 002b:00007fb03ac09188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2794.830391] RAX: ffffffffffffffda RBX: 00007fb03d7a6f60 RCX: 00007fb03d693b19 [ 2794.831948] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2794.833484] RBP: 00007fb03ac091d0 R08: 0000000000000000 R09: 0000000000000000 [ 2794.835022] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2794.836567] R13: 00007ffe77755f3f R14: 00007fb03ac09300 R15: 0000000000022000 05:56:49 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x935b}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000580)={r6, r5, "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", "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"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r4, 0xd000943e, &(0x7f0000000340)={r6, 0x0, "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", "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"}) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:56:49 executing program 2: socket$inet6_udp(0xa, 0x2, 0x0) socket$inet(0x2, 0xa, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r1 = socket$inet(0x2, 0xa, 0xff7ffffd) ioctl$SNAPSHOT_UNFREEZE(r1, 0x3302) dup3(r1, r0, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000300), 0xfffffffffffffffd, 0x420400) copy_file_range(r0, &(0x7f00000002c0)=0x4, r2, 0x0, 0x401, 0x0) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_io_uring_setup(0x3157, &(0x7f0000000140), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10005e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffc}, 0x0, 0x4000040000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) syz_io_uring_submit(r7, r6, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) perf_event_open(&(0x7f0000000240)={0x4, 0x80, 0xef, 0x7f, 0x4, 0x1, 0x0, 0x7fffffff, 0x409, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x9, 0x200}, 0x4050a, 0x87, 0xffff0001, 0x8, 0xe, 0x1, 0x3, 0x0, 0x7, 0x0, 0x9}, 0xffffffffffffffff, 0xc, r3, 0x8) io_uring_enter(r4, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:57:05 executing program 2: socket$inet6_udp(0xa, 0x2, 0x0) socket$inet(0x2, 0xa, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3157, &(0x7f0000000140), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) io_uring_enter(r0, 0x2a8b, 0x3e4a, 0x0, &(0x7f0000000040)={[0xc8]}, 0x8) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:57:05 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x935b}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x8) 05:57:05 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 21) 05:57:05 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x2, 0x0, 0x5}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000140)=0x0) r3 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x40, 0x40) syz_io_uring_submit(r1, r5, &(0x7f0000000180)=@IORING_OP_TEE={0x21, 0x1, 0x0, @fd_index=0x9, 0x0, 0x0, 0x7, 0x1, 0x0, {0x0, 0x0, r0}}, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_enter(r3, 0x6df8, 0x985e, 0x2, &(0x7f00000001c0)={[0x1]}, 0x8) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x935b}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r7, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) ioctl$BTRFS_IOC_TREE_SEARCH(r6, 0xd0009411, &(0x7f0000000340)={{0x0, 0x6, 0x3, 0x100000000, 0x1, 0x3, 0x8, 0x4, 0x8, 0x8000, 0x9, 0x80000000, 0x800, 0x8, 0xfff}}) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:57:05 executing program 3: socket$inet6_udp(0xa, 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r1 = socket$inet(0x2, 0xa, 0xff7ffffd) ioctl$SNAPSHOT_UNFREEZE(r1, 0x3302) dup3(r1, r0, 0x0) r2 = syz_io_uring_setup(0x3157, &(0x7f0000000140)={0x0, 0x0, 0x8}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x8006, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x40000000, 0x100000, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) syz_io_uring_submit(r5, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x8001) io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:57:05 executing program 4: socket$inet6_udp(0xa, 0x2, 0x0) socket$inet(0x2, 0xa, 0xff7ffffd) r0 = syz_io_uring_setup(0x3157, &(0x7f0000000140), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x400000, 0x0, 0x0) 05:57:05 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r1 = socket$inet(0x2, 0xa, 0xff7ffffd) ioctl$SNAPSHOT_UNFREEZE(r1, 0x3302) r2 = syz_io_uring_setup(0x3157, &(0x7f0000000140), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) syz_io_uring_submit(r5, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0xffffffffffffffff) 05:57:05 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000000040)={0x2, {0x2, 0x3, 0x7, 0x1, 0x3ff, 0x14}}) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x935b}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x3f00000000000000) [ 2811.087182] FAULT_INJECTION: forcing a failure. [ 2811.087182] name failslab, interval 1, probability 0, space 0, times 0 [ 2811.089792] CPU: 0 PID: 15866 Comm: syz-executor.0 Not tainted 5.10.202 #1 [ 2811.091343] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2811.093190] Call Trace: [ 2811.093788] dump_stack+0x107/0x167 [ 2811.094610] should_fail.cold+0x5/0xa [ 2811.095494] ? create_object.isra.0+0x3a/0xa20 [ 2811.096515] should_failslab+0x5/0x20 [ 2811.097363] kmem_cache_alloc+0x5b/0x310 [ 2811.098269] ? mark_held_locks+0x9e/0xe0 [ 2811.099178] create_object.isra.0+0x3a/0xa20 [ 2811.100160] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2811.101283] kmem_cache_alloc_bulk+0x168/0x320 [ 2811.102298] io_submit_sqes+0x6f76/0x85c0 [ 2811.103254] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 2811.104358] __do_sys_io_uring_enter+0x6b5/0x1920 [ 2811.105429] ? lock_downgrade+0x6d0/0x6d0 [ 2811.106338] ? find_held_lock+0x2c/0x110 [ 2811.107238] ? io_submit_sqes+0x85c0/0x85c0 [ 2811.108252] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2811.109317] ? wait_for_completion_io+0x270/0x270 [ 2811.110388] ? rcu_read_lock_any_held+0x75/0xa0 [ 2811.111417] ? vfs_write+0x354/0xa70 [ 2811.112252] ? fput_many+0x2f/0x1a0 [ 2811.113059] ? ksys_write+0x1a9/0x260 [ 2811.113908] ? __ia32_sys_read+0xb0/0xb0 [ 2811.114809] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2811.115979] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2811.117135] do_syscall_64+0x33/0x40 [ 2811.117961] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2811.119113] RIP: 0033:0x7fb03d693b19 [ 2811.119945] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2811.124027] RSP: 002b:00007fb03ac09188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2811.125688] RAX: ffffffffffffffda RBX: 00007fb03d7a6f60 RCX: 00007fb03d693b19 [ 2811.127266] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2811.128839] RBP: 00007fb03ac091d0 R08: 0000000000000000 R09: 0000000000000000 [ 2811.130391] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2811.131945] R13: 00007ffe77755f3f R14: 00007fb03ac09300 R15: 0000000000022000 05:57:06 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x3000000, 0x10, r0, 0x0) syz_io_uring_setup(0x7276, &(0x7f0000000040)={0x0, 0xe0b5, 0x1, 0x3, 0x112, 0x0, r0}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000180)=0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(r5, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r6 = socket$inet(0x2, 0xa, 0xff7ffffd) ioctl$SNAPSHOT_UNFREEZE(r6, 0x3302) dup3(r6, r5, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000001580)={&(0x7f0000000240)=@abs, 0x6e, &(0x7f00000001c0)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/231, 0xe7}, {&(0x7f0000001e00)=""/4096, 0x1000}], 0x3, &(0x7f0000001440)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x140}, 0xd31cd0ce626df1c2) syz_io_uring_submit(r3, r4, &(0x7f00000015c0)=@IORING_OP_SPLICE={0x1e, 0x2, 0x0, @fd=r6, 0xffffffff, {0x0, r7}, 0x7, 0x4, 0x1, {0x0, 0x0, r0}}, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) r8 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x935b}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r8, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:57:23 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x935b}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x425) 05:57:23 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000000040)={0x2, {0x2, 0x3, 0x7, 0x1, 0x3ff, 0x14}}) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x935b}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x4000000000000000) 05:57:23 executing program 3: socket$inet6_udp(0xa, 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r1 = syz_open_dev$vcsu(&(0x7f00000001c0), 0x1f, 0x8000) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='net/rfcomm\x00') dup3(r1, r2, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r3 = socket$inet(0x2, 0xa, 0xff7ffffd) ioctl$SNAPSHOT_UNFREEZE(r3, 0x3302) r4 = dup3(r3, r0, 0x0) r5 = syz_io_uring_setup(0x3157, &(0x7f0000000140)={0x0, 0xcaf7, 0x20}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x8006, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4030}, 0x0, 0x40000000, 0x100000, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r5, 0x0) syz_io_uring_submit(r8, r7, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) connect$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) io_uring_enter(r5, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:57:23 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000340)={0x0, 0x0, 0x4}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) r3 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x2, 0x2007, @fd=r0, 0x2, &(0x7f0000000500)=[{&(0x7f00000003c0)="117cfa8eb5dd73aa588078a01facee6b8fa857008621fce208ec0348", 0x1c}, {&(0x7f0000000400)="774fcf3267a1c5fbce1965993d25d7c04cd214211a1eaca274015317425b16fae796743a6bcae3e09205c366b0f8ae531b2c07c767a9d51626bd09301317e9f18d6939d5104ab2d659bb42ef8287af6e1bae13cb495dc136cc92185723983f3e025b03a90b55d1612f08242cf88e4ffdf81554a60f9bc77581ddb2d8f782fb240a5b2ce9e6a214e67d271d406e406dafb58fc8777d460f029d1a9061e3a00547c8349afaaa098c532e66", 0xaa}, {&(0x7f00000004c0)="e401f3a5173122c874a91cbab4cf4133b9cf0fb0395012657fb29a6e45eb7967dd9503af681e8059fd1eb3d44bba74013058e1e5a0e9dd", 0x37}], 0x3, 0x10, 0x0, {0x0, r6}}, 0x0) r7 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KIOCSOUND(r7, 0x4b2f, 0x1) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f00000005c0)={{0x1, 0x1, 0x18, r7, @out_args}, './file0\x00'}) r8 = syz_open_dev$vcsa(0x0, 0xe11, 0x4000) ioctl$ifreq_SIOCGIFINDEX_wireguard(r8, 0x8933, &(0x7f0000000240)={'wg2\x00'}) sendmsg$nl_generic(r8, &(0x7f0000001640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001600)={&(0x7f0000001e00)=ANY=[@ANYBLOB="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"], 0x101c}, 0x1, 0x0, 0x0, 0x4000000}, 0x24000094) r9 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000000, 0x13, r0, 0x10000000) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r9, &(0x7f0000000280)=@IORING_OP_WRITEV={0x2, 0x2, 0x2004, @fd, 0x80000000, &(0x7f0000000240)=[{&(0x7f0000000040)="1ccfcaec27d45edfa1ebd61433e18b341ffcde1c5c7a0ecb1c334103e0eaf3259d47d22ceeddde87cde04b42bd41453c09153f76528acb7dca313097d8313a9817ba7c1e07aa3ffcb0c20f46d106c716ddc03a599184619d6326eb61131ebcdcf1f3fc8f35a00305a05e2e1bdd69532c11500a1fca431c62f561e9dfb6cc661dcd3fd527f42e5c0cac931a3b708753b3d06b302a056d1b556c77fc4aa7ffe9a7c3d1664b3222e5f785d93aeec90bfde1", 0xb0}, {&(0x7f0000000180)="653ef1775f1969999b3712d3977a0830fa55eb16ef963be4accda0515228adbf5428943f36f5b2949ab9e92c01fc53c17273fee93f7cbab53cc94fc10c9b5dee817094d8b76f13633fa64409587ff467f614683fe272eba9b0fd5cee5cd2b6b993cd0bcd4a55eb872633cf2eb207c09b53c302b05585374fcea839d2f86d38c9", 0x80}], 0x2, 0x0, 0x0, {0x0, r10}}, 0x7) r11 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000000, 0x11, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x935b}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x5, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r11, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000540)={0x6, 'dummy0\x00', {0x4}, 0x100}) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:57:23 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 22) 05:57:23 executing program 2: socket$inet6_udp(0xa, 0x2, 0x0) socket$inet(0x2, 0xa, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3157, &(0x7f0000000140)={0x0, 0x3, 0x8, 0x0, 0xfffffffc}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:57:23 executing program 5: openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) r0 = syz_open_dev$vcsa(0x0, 0xe11, 0x4000) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000240)={'wg2\x00'}) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r1 = socket$inet(0x2, 0xa, 0xff7ffffd) ioctl$SNAPSHOT_UNFREEZE(r1, 0x3302) r2 = syz_io_uring_setup(0x3157, &(0x7f0000000140), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) syz_io_uring_submit(r5, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:57:23 executing program 4: socket$inet6_udp(0xa, 0x2, 0x0) socket$inet(0x2, 0xa, 0xff7ffffd) r0 = syz_io_uring_setup(0x3157, &(0x7f0000000140), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x1000000, 0x0, 0x0) [ 2828.583505] FAULT_INJECTION: forcing a failure. [ 2828.583505] name failslab, interval 1, probability 0, space 0, times 0 [ 2828.586024] CPU: 1 PID: 15923 Comm: syz-executor.0 Not tainted 5.10.202 #1 [ 2828.587416] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2828.589112] Call Trace: [ 2828.589649] dump_stack+0x107/0x167 [ 2828.590391] should_fail.cold+0x5/0xa [ 2828.591178] ? create_object.isra.0+0x3a/0xa20 [ 2828.592128] should_failslab+0x5/0x20 [ 2828.592905] kmem_cache_alloc+0x5b/0x310 [ 2828.593743] ? mark_held_locks+0x9e/0xe0 [ 2828.594578] create_object.isra.0+0x3a/0xa20 [ 2828.595479] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2828.596536] kmem_cache_alloc_bulk+0x168/0x320 [ 2828.597466] io_submit_sqes+0x6f76/0x85c0 [ 2828.598345] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 2828.599365] __do_sys_io_uring_enter+0x6b5/0x1920 [ 2828.600360] ? lock_downgrade+0x6d0/0x6d0 [ 2828.601206] ? find_held_lock+0x2c/0x110 [ 2828.602037] ? io_submit_sqes+0x85c0/0x85c0 [ 2828.602937] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2828.603945] ? wait_for_completion_io+0x270/0x270 [ 2828.604925] ? rcu_read_lock_any_held+0x75/0xa0 [ 2828.605878] ? vfs_write+0x354/0xa70 [ 2828.606640] ? fput_many+0x2f/0x1a0 [ 2828.607378] ? ksys_write+0x1a9/0x260 [ 2828.608167] ? __ia32_sys_read+0xb0/0xb0 [ 2828.609002] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2828.610070] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2828.611134] do_syscall_64+0x33/0x40 [ 2828.611901] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2828.612951] RIP: 0033:0x7fb03d693b19 [ 2828.613714] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2828.617474] RSP: 002b:00007fb03ac09188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2828.619027] RAX: ffffffffffffffda RBX: 00007fb03d7a6f60 RCX: 00007fb03d693b19 [ 2828.620486] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2828.621938] RBP: 00007fb03ac091d0 R08: 0000000000000000 R09: 0000000000000000 [ 2828.623387] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2828.624865] R13: 00007ffe77755f3f R14: 00007fb03ac09300 R15: 0000000000022000 05:57:23 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) socket$inet(0x2, 0xa, 0x0) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_io_uring_setup(0x3157, &(0x7f0000000140), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) ioctl$EXT4_IOC_CHECKPOINT(r2, 0x4004662b, &(0x7f0000000040)=0x2) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) syz_io_uring_submit(r5, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r1) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000140)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r7, 0x8918, &(0x7f0000000040)={@local, 0x0, r9}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000002c0)={'sit0\x00', &(0x7f0000000240)={'syztnl2\x00', 0x0, 0x2f, 0x4, 0x2, 0x7, 0xa, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, 0x10, 0x1, 0x9, 0x8}}) sendmsg$ETHTOOL_MSG_PAUSE_GET(r1, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)={0xdc, r6, 0x300, 0x70bd2d, 0x25dfdbff, {}, [@HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x40}, 0x10) io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:57:23 executing program 3: socket$inet6_udp(0xa, 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r1 = socket$inet(0x2, 0xa, 0xff7ffffd) ioctl$SNAPSHOT_UNFREEZE(r1, 0x3302) dup3(r1, r0, 0x0) r2 = syz_io_uring_setup(0x3157, &(0x7f0000000140), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x8006, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x40000000, 0x100000, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000040)={0x0, 0x9, [@multicast, @empty, @local, @empty, @remote, @remote, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2f}, @multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x31}]}) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) syz_io_uring_submit(r5, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:57:23 executing program 4: socket$inet6_udp(0xa, 0x2, 0x0) socket$inet(0x2, 0xa, 0xff7ffffd) r0 = syz_io_uring_setup(0x3157, &(0x7f0000000140), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x20000000, 0x0, 0x0) 05:57:23 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x35d}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x935b}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:57:23 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x935b}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x426) 05:57:23 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r1 = socket$inet(0x2, 0xa, 0xff7ffffd) ioctl$SNAPSHOT_UNFREEZE(r1, 0x3302) r2 = syz_io_uring_setup(0x3157, &(0x7f0000000140), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) syz_io_uring_submit(r5, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r6 = syz_open_dev$vcsn(&(0x7f0000000040), 0x9, 0x200440) ioctl$sock_inet_SIOCGIFNETMASK(r6, 0x891b, &(0x7f00000001c0)={'ipvlan1\x00', {0x2, 0x0, @multicast1}}) io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:57:23 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000000040)={0x2, {0x2, 0x3, 0x7, 0x1, 0x3ff, 0x14}}) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x935b}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xbd04000000000000) 05:57:23 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 23) [ 2829.059056] FAULT_INJECTION: forcing a failure. [ 2829.059056] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2829.061913] CPU: 1 PID: 15985 Comm: syz-executor.0 Not tainted 5.10.202 #1 [ 2829.063342] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2829.065038] Call Trace: [ 2829.065590] dump_stack+0x107/0x167 [ 2829.066346] should_fail.cold+0x5/0xa [ 2829.067161] __alloc_pages_nodemask+0x182/0x600 [ 2829.068163] ? __alloc_pages_slowpath.constprop.0+0x2130/0x2130 [ 2829.069435] alloc_pages_current+0x187/0x280 [ 2829.070351] allocate_slab+0x26f/0x380 [ 2829.071164] ___slab_alloc+0x470/0x700 [ 2829.071984] ? io_submit_sqes+0x6f76/0x85c0 [ 2829.072885] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2829.073959] ? trace_hardirqs_on+0x5b/0x180 [ 2829.074869] ? kmem_cache_alloc_bulk+0x1ec/0x320 [ 2829.075859] kmem_cache_alloc_bulk+0x1ec/0x320 [ 2829.076816] io_submit_sqes+0x6f76/0x85c0 [ 2829.077733] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 2829.078764] __do_sys_io_uring_enter+0x6b5/0x1920 [ 2829.079785] ? lock_downgrade+0x6d0/0x6d0 [ 2829.080638] ? find_held_lock+0x2c/0x110 [ 2829.081493] ? io_submit_sqes+0x85c0/0x85c0 [ 2829.082401] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2829.083395] ? wait_for_completion_io+0x270/0x270 [ 2829.084391] ? rcu_read_lock_any_held+0x75/0xa0 [ 2829.085342] ? vfs_write+0x354/0xa70 [ 2829.086116] ? fput_many+0x2f/0x1a0 [ 2829.086875] ? ksys_write+0x1a9/0x260 [ 2829.087676] ? __ia32_sys_read+0xb0/0xb0 [ 2829.088532] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2829.089624] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2829.090701] do_syscall_64+0x33/0x40 [ 2829.091480] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2829.092550] RIP: 0033:0x7fb03d693b19 [ 2829.093328] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2829.097122] RSP: 002b:00007fb03ac09188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2829.098674] RAX: ffffffffffffffda RBX: 00007fb03d7a6f60 RCX: 00007fb03d693b19 [ 2829.100151] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2829.101604] RBP: 00007fb03ac091d0 R08: 0000000000000000 R09: 0000000000000000 [ 2829.103054] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2829.104513] R13: 00007ffe77755f3f R14: 00007fb03ac09300 R15: 0000000000022000 05:57:39 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000000040)={0x2, {0x2, 0x3, 0x7, 0x1, 0x3ff, 0x14}}) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x935b}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xbe04000000000000) 05:57:39 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x935b}, 0x0, 0x0, 0x0, 0x2, 0x0, 0x42}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:57:39 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 24) 05:57:39 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x935b}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x427) 05:57:39 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r1 = socket$inet(0x2, 0xa, 0xff7ffffd) ioctl$SNAPSHOT_UNFREEZE(r1, 0x3302) r2 = syz_io_uring_setup(0x3157, &(0x7f0000000140), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) syz_io_uring_submit(r5, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0) stat(&(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) io_uring_enter(r6, 0x230a, 0x8547, 0x3, &(0x7f0000000280)={[0x69]}, 0x8) 05:57:39 executing program 3: socket$inet6_udp(0xa, 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) socket$inet(0x2, 0xa, 0xff7ffffd) syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN(0xffffffffffffffff, 0x4040942c, &(0x7f00000000c0)={0x0, 0x8, [0x5, 0x7, 0x0, 0xfffffffffffffffd, 0x0, 0x8]}) r1 = openat2$dir(0xffffffffffffff9c, &(0x7f0000001480)='./file0\x00', 0x0, 0x0) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) r3 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r4 = getegid() fchownat(r3, &(0x7f0000000200)='./file0\x00', 0x0, r4, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x2120, &(0x7f0000001980)) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001e00)=""/4112, 0x1000}, {&(0x7f00000011c0)=""/219, 0x129}, {&(0x7f00000017c0)=""/147, 0x8d}], 0x3, 0x400625, 0x0) socket$nl_audit(0x10, 0x3, 0x9) setsockopt$IP_VS_SO_SET_DEL(r2, 0x0, 0x484, &(0x7f0000000140)={0x0, @broadcast, 0x4e24, 0x2, 'rr\x00', 0x0, 0x2, 0x37}, 0x2c) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x401, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x5, 0xffffffffffffffff, 0x0) mount$bind(&(0x7f00000013c0)='./file0\x00', &(0x7f0000001400)='./file0\x00', &(0x7f0000001440), 0x100000, 0x0) umount2(&(0x7f0000000080)='./file0\x00', 0xb) mount$9p_tcp(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="7472616e733d7463702c706f72743dcf0d00000000000096ef5b01b56189c33212303030303030303030303030303030302c70726976706f72742c00e6b3d97ef0cbd3997d0f9e0fa6e9438feb468651aa32f3f615010069eb4b0ff68d77a0"]) 05:57:39 executing program 2: socket$inet6_udp(0xa, 0x2, 0x0) socket$inet(0x2, 0xa, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3157, &(0x7f0000000140), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x40, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:57:39 executing program 4: socket$inet6_udp(0xa, 0x2, 0x0) socket$inet(0x2, 0xa, 0xff7ffffd) r0 = syz_io_uring_setup(0x3157, &(0x7f0000000140), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x95ffffff, 0x0, 0x0) [ 2844.495442] FAULT_INJECTION: forcing a failure. [ 2844.495442] name failslab, interval 1, probability 0, space 0, times 0 [ 2844.497859] CPU: 1 PID: 15998 Comm: syz-executor.0 Not tainted 5.10.202 #1 [ 2844.499269] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2844.500984] Call Trace: [ 2844.501536] dump_stack+0x107/0x167 [ 2844.502285] should_fail.cold+0x5/0xa [ 2844.503060] ? create_object.isra.0+0x3a/0xa20 [ 2844.503997] should_failslab+0x5/0x20 [ 2844.504771] kmem_cache_alloc+0x5b/0x310 [ 2844.505589] ? mark_held_locks+0x9e/0xe0 [ 2844.506411] create_object.isra.0+0x3a/0xa20 [ 2844.507299] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2844.508349] kmem_cache_alloc_bulk+0x168/0x320 [ 2844.509278] io_submit_sqes+0x6f76/0x85c0 [ 2844.510168] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 2844.511173] __do_sys_io_uring_enter+0x6b5/0x1920 [ 2844.512180] ? lock_downgrade+0x6d0/0x6d0 [ 2844.513016] ? find_held_lock+0x2c/0x110 [ 2844.513851] ? io_submit_sqes+0x85c0/0x85c0 [ 2844.514750] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2844.515726] ? wait_for_completion_io+0x270/0x270 [ 2844.516716] ? rcu_read_lock_any_held+0x75/0xa0 [ 2844.517649] ? vfs_write+0x354/0xa70 [ 2844.518405] ? fput_many+0x2f/0x1a0 [ 2844.519143] ? ksys_write+0x1a9/0x260 [ 2844.519928] ? __ia32_sys_read+0xb0/0xb0 [ 2844.520755] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2844.521808] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2844.522859] do_syscall_64+0x33/0x40 [ 2844.523615] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2844.524653] RIP: 0033:0x7fb03d693b19 [ 2844.525406] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2844.529178] RSP: 002b:00007fb03ac09188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2844.530708] RAX: ffffffffffffffda RBX: 00007fb03d7a6f60 RCX: 00007fb03d693b19 [ 2844.532165] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2844.533599] RBP: 00007fb03ac091d0 R08: 0000000000000000 R09: 0000000000000000 [ 2844.535038] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2844.536480] R13: 00007ffe77755f3f R14: 00007fb03ac09300 R15: 0000000000022000 [ 2844.544528] 9pnet: p9_fd_create_tcp (16005): problem connecting socket to 127.0.0.1 05:57:39 executing program 4: socket$inet6_udp(0xa, 0x2, 0x0) socket$inet(0x2, 0xa, 0xff7ffffd) r0 = syz_io_uring_setup(0x3157, &(0x7f0000000140), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0xffffff95, 0x0, 0x0) [ 2844.643035] 9pnet: p9_fd_create_tcp (16005): problem connecting socket to 127.0.0.1 05:57:39 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x935b}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msync(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x6) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(0xffffffffffffff9c, 0x40106614, &(0x7f0000000040)) 05:57:39 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 25) 05:57:39 executing program 3: socket$inet6_udp(0xa, 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r1 = socket$inet(0x2, 0xa, 0xff7ffffd) ioctl$SNAPSHOT_UNFREEZE(r1, 0x3302) r2 = dup3(r1, r0, 0x0) r3 = syz_io_uring_setup(0x3157, &(0x7f0000000140), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x8006, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x40000000, 0x100000, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000400)={0x1008600, &(0x7f0000000200)=0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000280), {0x2}, &(0x7f00000002c0)=""/167, 0xa7, &(0x7f0000000380)=""/14, &(0x7f00000003c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3, {r2}}, 0x58) dup3(r3, r6, 0x80000) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) syz_io_uring_submit(r7, r5, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r8 = signalfd4(0xffffffffffffffff, &(0x7f0000000040)={[0x3]}, 0x8, 0x80400) ioctl$TUNSETVNETHDRSZ(r8, 0x400454d8, &(0x7f00000001c0)=0x1) io_uring_enter(r3, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:57:39 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r1 = socket$inet(0x2, 0xa, 0xff7ffffd) ioctl$SNAPSHOT_UNFREEZE(r1, 0x3302) r2 = syz_io_uring_setup(0x3157, &(0x7f0000000140), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) r5 = syz_open_dev$vcsa(0x0, 0xe11, 0x4000) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000240)={'wg2\x00'}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000040)={'wg0\x00'}) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) syz_io_uring_submit(r6, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2844.812731] FAULT_INJECTION: forcing a failure. [ 2844.812731] name failslab, interval 1, probability 0, space 0, times 0 [ 2844.815075] CPU: 1 PID: 16050 Comm: syz-executor.0 Not tainted 5.10.202 #1 [ 2844.816473] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2844.818130] Call Trace: [ 2844.818664] dump_stack+0x107/0x167 [ 2844.819402] should_fail.cold+0x5/0xa [ 2844.820200] should_failslab+0x5/0x20 [ 2844.820965] kmem_cache_alloc_bulk+0x4b/0x320 [ 2844.821870] io_submit_sqes+0x6f76/0x85c0 [ 2844.822738] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 2844.823764] __do_sys_io_uring_enter+0x6b5/0x1920 [ 2844.824757] ? lock_downgrade+0x6d0/0x6d0 [ 2844.825599] ? find_held_lock+0x2c/0x110 05:57:39 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000000040)={0x2, {0x2, 0x3, 0x7, 0x1, 0x3ff, 0x14}}) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x935b}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xd72f000000000000) [ 2844.826441] ? io_submit_sqes+0x85c0/0x85c0 [ 2844.827529] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2844.828531] ? wait_for_completion_io+0x270/0x270 [ 2844.829513] ? rcu_read_lock_any_held+0x75/0xa0 [ 2844.830450] ? vfs_write+0x354/0xa70 [ 2844.831201] ? fput_many+0x2f/0x1a0 [ 2844.831946] ? ksys_write+0x1a9/0x260 [ 2844.832715] ? __ia32_sys_read+0xb0/0xb0 [ 2844.833544] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2844.834609] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2844.835688] do_syscall_64+0x33/0x40 [ 2844.836459] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2844.837489] RIP: 0033:0x7fb03d693b19 [ 2844.838244] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2844.841967] RSP: 002b:00007fb03ac09188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2844.843485] RAX: ffffffffffffffda RBX: 00007fb03d7a6f60 RCX: 00007fb03d693b19 [ 2844.844925] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2844.846361] RBP: 00007fb03ac091d0 R08: 0000000000000000 R09: 0000000000000000 [ 2844.847804] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2844.849235] R13: 00007ffe77755f3f R14: 00007fb03ac09300 R15: 0000000000022000 05:57:39 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) socket$inet(0x2, 0xa, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3157, &(0x7f0000000140), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_setup(0x5042, &(0x7f00000001c0)={0x0, 0x91e6, 0x10, 0x3, 0xfc}, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff2000/0x2000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xab) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:57:39 executing program 4: socket$inet6_udp(0xa, 0x2, 0x0) socket$inet(0x2, 0xa, 0xff7ffffd) r0 = syz_io_uring_setup(0x3157, &(0x7f0000000140), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x7ffffffff000, 0x0, 0x0) 05:57:39 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x935b}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x428) 05:57:40 executing program 4: socket$inet6_udp(0xa, 0x2, 0x0) socket$inet(0x2, 0xa, 0xff7ffffd) r0 = syz_io_uring_setup(0x3157, &(0x7f0000000140), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x40000000000000, 0x0, 0x0) 05:57:40 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x935b}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = fspick(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_SETVERSION(r4, 0x40087602, &(0x7f0000000080)=0x2) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:57:40 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000000040)={0x2, {0x2, 0x3, 0x7, 0x1, 0x3ff, 0x14}}) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x935b}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xd82f000000000000) 05:57:40 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r1 = socket$inet(0x2, 0xa, 0xff7ffffd) ioctl$SNAPSHOT_UNFREEZE(r1, 0x3302) r2 = syz_io_uring_setup(0x3157, &(0x7f0000000140), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_setup(0xfb8, &(0x7f0000000300)={0x0, 0xc6ce, 0x0, 0x3, 0x36}, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000200)=ANY=[@ANYBLOB="0300b26493316b523dcf54f3cbade2fb966ac80801b75f389b7c0000", @ANYRES32=r0, @ANYBLOB="01000000000000002e2f66696c653000"]) ioctl$TUNSETCARRIER(r5, 0x400454e2, &(0x7f00000001c0)=0x1) r6 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) r7 = openat2(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x80, 0x50, 0x18}, 0x18) ioctl$AUTOFS_DEV_IOCTL_VERSION(r6, 0xc0189371, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r7}, './file0\x00'}) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) r8 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) syz_io_uring_submit(r8, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:57:40 executing program 2: socket$inet6_udp(0xa, 0x2, 0x0) socket$inet(0x2, 0xa, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3157, &(0x7f0000000140), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) r6 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KIOCSOUND(r6, 0x4b2f, 0x1) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(r7, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r8 = socket$inet(0x2, 0xa, 0xff7ffffd) ioctl$SNAPSHOT_UNFREEZE(r8, 0x3302) dup3(r8, r7, 0x0) r9 = syz_mount_image$nfs(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x9, 0x8, &(0x7f0000000800)=[{&(0x7f00000002c0)="c30d4a8b689d7b6d", 0x8, 0x845}, {&(0x7f0000000300)="b4f949d0e0acc6fdfa179b8f3cebf0edd0a7a93d49587f66af60c62b90ee9f64f1e6f88e12a15b88aba416ac95e6d7eb11a7d4f70d7fde9eda7f873c665eebd0d77df3509da0241baef92c8bd8b8ef816bb96da5f9b3faf2b7", 0x59}, {&(0x7f0000000380)="63d2abf0576a213d5f3c06b0a2473d01b85abfbe92dbaa12ace1573077fa0fcea349f0cbf1e5013bacf1c26417c0e5167a6511caa6567b8916d184e7339415410930b2100b0a424ac536dabed48e3a5e9b5bfd0a956b65fa7440d1ae7b9fb67710125dad8f88aaa9e59d13713947796cfffae22733cb58ac0f9c48e0ea7cd18b9b69867c5638ad1c8583d85d58cf08ad8e486cf953143155f09ed9b7356f3cab677bb27896eea03dcb3c7a3ce1197cd23b8aa9cac9da28b4e147c30d6c5ce5", 0xbf, 0x5}, {&(0x7f0000000440)="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", 0xfe, 0x9}, {&(0x7f0000000540)="33485fbef92d8dff8da2f4d6a10da2e564d8a4c7fd1c0eff4b84b7ab9f695d0142190430fffdad82796d8f392a1b4959311f2ce74d7489611c0e02ee70fc7010bc6208b0800d0fa9cea73ffc720da6ad6c9a63e69860eccfa21d1a51fe82b79929c09b8ab9488d7185cdd227982c70e80d660736edcb3ce825205b52db81472f32594feadfd2436b5a60a2297803b504a470425d16ca342b4a8cb576723e5fc2ca646259d6a661386c6d6845b217167404dcacc21a", 0xb5, 0x7fff}, {&(0x7f0000000600)="695f95028b35fcf7f527251f0a37fab513b9bfea39d0906bcb1527fcfc9ff1eb36fd5af3ef70cc6184f5ef433c7c44ceecafb29eb859e57870ba20974e04d4257aa3377533d1146f416c92576081754500bca0af1aea5963b30a55c54f115c24e6003e34e052564589085260b50c9b3d421437b255af987baf2619670ecc056795853b4a9cfe22d71e532bf736b6d0b8bf7d7d18476232d70e0630cc73ba9161dabcfada98d687c762ff", 0xaa, 0x3}, {&(0x7f00000006c0)="c7da4c750dcf9e468dd32c82743a002c83ec9bfe83757e079e24159740275c00be47f50ab5504b57922bf0234f09fade61c82618bc5157", 0x37, 0x1}, {&(0x7f0000000700)="39866a0b0311501fb02bf52c152e5ebe1e906af2f90bb2171b730e1d85f562040bbffe76a30bc258a2cf5de112938e3b0eeb5e9d3159cb5eeda96010fef803145223b2113b12463a16b32249723b885bcd4ca615fe04565d7cb6c0a908abcfa2bc4955f6c5b472ed0bfb403b440f46d256e02f3654045e7fa6c4aaf1046d9baa4bb45066e6d9419f61dfd43044269c7340151987bbc2a40cbeca735695333765c33f9f60115d6737a95cff5ce06ead6df3c5dcd64090c0d79ba925a214c834463f959fa296f396c7ae84d47e4ff54bf979e0", 0xd2, 0x401}], 0x0, &(0x7f00000008c0)={[{}, {'\x00'}, {'^\xe0&('}], [{@func={'func', 0x3d, 'BPRM_CHECK'}}, {@uid_lt}]}) syz_io_uring_submit(0x0, r5, &(0x7f0000000900)=@IORING_OP_SPLICE={0x1e, 0x2, 0x0, @fd=r6, 0x1ff, {0x0, r7}, 0xc3, 0x1, 0x1, {0x0, 0x0, r9}}, 0xffff) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:57:40 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 26) [ 2845.331406] FAULT_INJECTION: forcing a failure. [ 2845.331406] name failslab, interval 1, probability 0, space 0, times 0 [ 2845.333781] CPU: 1 PID: 16114 Comm: syz-executor.0 Not tainted 5.10.202 #1 [ 2845.335179] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2845.336870] Call Trace: [ 2845.337410] dump_stack+0x107/0x167 [ 2845.338158] should_fail.cold+0x5/0xa [ 2845.338935] ? create_object.isra.0+0x3a/0xa20 [ 2845.339879] should_failslab+0x5/0x20 [ 2845.340658] kmem_cache_alloc+0x5b/0x310 [ 2845.341480] ? mark_held_locks+0x9e/0xe0 [ 2845.342308] create_object.isra.0+0x3a/0xa20 [ 2845.343198] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2845.344249] kmem_cache_alloc_bulk+0x168/0x320 [ 2845.345186] io_submit_sqes+0x6f76/0x85c0 [ 2845.346067] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 2845.347073] __do_sys_io_uring_enter+0x6b5/0x1920 [ 2845.348065] ? lock_downgrade+0x6d0/0x6d0 [ 2845.348901] ? find_held_lock+0x2c/0x110 [ 2845.349730] ? io_submit_sqes+0x85c0/0x85c0 [ 2845.350619] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2845.351596] ? wait_for_completion_io+0x270/0x270 [ 2845.352581] ? rcu_read_lock_any_held+0x75/0xa0 [ 2845.353518] ? vfs_write+0x354/0xa70 [ 2845.354277] ? fput_many+0x2f/0x1a0 [ 2845.355014] ? ksys_write+0x1a9/0x260 [ 2845.355802] ? __ia32_sys_read+0xb0/0xb0 [ 2845.356633] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2845.357721] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2845.358778] do_syscall_64+0x33/0x40 [ 2845.359547] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2845.360600] RIP: 0033:0x7fb03d693b19 [ 2845.361357] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2845.365109] RSP: 002b:00007fb03ac09188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2845.366655] RAX: ffffffffffffffda RBX: 00007fb03d7a6f60 RCX: 00007fb03d693b19 [ 2845.368107] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2845.369544] RBP: 00007fb03ac091d0 R08: 0000000000000000 R09: 0000000000000000 [ 2845.370980] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2845.372432] R13: 00007ffe77755f3f R14: 00007fb03ac09300 R15: 0000000000022000 [ 2861.156423] FAULT_INJECTION: forcing a failure. [ 2861.156423] name failslab, interval 1, probability 0, space 0, times 0 [ 2861.158821] CPU: 0 PID: 16130 Comm: syz-executor.0 Not tainted 5.10.202 #1 [ 2861.160273] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2861.162008] Call Trace: [ 2861.162562] dump_stack+0x107/0x167 [ 2861.163324] should_fail.cold+0x5/0xa [ 2861.164142] ? create_object.isra.0+0x3a/0xa20 [ 2861.165093] should_failslab+0x5/0x20 [ 2861.165867] kmem_cache_alloc+0x5b/0x310 [ 2861.166690] ? mark_held_locks+0x9e/0xe0 [ 2861.167520] create_object.isra.0+0x3a/0xa20 [ 2861.168429] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2861.169464] kmem_cache_alloc_bulk+0x168/0x320 [ 2861.170413] io_submit_sqes+0x6f76/0x85c0 [ 2861.171302] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 2861.172342] __do_sys_io_uring_enter+0x6b5/0x1920 [ 2861.173321] ? lock_downgrade+0x6d0/0x6d0 [ 2861.174176] ? find_held_lock+0x2c/0x110 [ 2861.175044] ? io_submit_sqes+0x85c0/0x85c0 [ 2861.175955] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2861.176978] ? wait_for_completion_io+0x270/0x270 [ 2861.177995] ? rcu_read_lock_any_held+0x75/0xa0 [ 2861.178981] ? vfs_write+0x354/0xa70 [ 2861.179780] ? fput_many+0x2f/0x1a0 [ 2861.180557] ? ksys_write+0x1a9/0x260 [ 2861.181371] ? __ia32_sys_read+0xb0/0xb0 [ 2861.182223] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2861.183344] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2861.184469] do_syscall_64+0x33/0x40 [ 2861.185282] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2861.186375] RIP: 0033:0x7fb03d693b19 [ 2861.187177] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2861.190966] RSP: 002b:00007fb03ac09188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2861.192537] RAX: ffffffffffffffda RBX: 00007fb03d7a6f60 RCX: 00007fb03d693b19 [ 2861.193987] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2861.195437] RBP: 00007fb03ac091d0 R08: 0000000000000000 R09: 0000000000000000 [ 2861.196939] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2861.198386] R13: 00007ffe77755f3f R14: 00007fb03ac09300 R15: 0000000000022000 05:57:56 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x935b}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) setxattr$incfs_size(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080), &(0x7f00000000c0)=0x100000000, 0x8, 0x2) 05:57:56 executing program 3: socket$inet6_udp(0xa, 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r1 = socket$inet(0x2, 0xa, 0xff7ffffd) ioctl$SNAPSHOT_UNFREEZE(r1, 0x3302) dup3(r1, r0, 0x0) r2 = syz_io_uring_setup(0x3157, &(0x7f0000000140), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x8006, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x40000000, 0x100000, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) syz_io_uring_submit(r5, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x20080, 0x0) r7 = syz_open_dev$usbmon(&(0x7f00000001c0), 0x5d8b, 0x101000) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r6, 0xc018937d, &(0x7f0000000200)={{0x1, 0x1, 0x18, r7, {0x2}}, './file0\x00'}) 05:57:56 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 27) 05:57:56 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r1 = socket$inet(0x2, 0xa, 0xff7ffffd) ioctl$SNAPSHOT_UNFREEZE(r1, 0x3302) r2 = syz_io_uring_setup(0x3157, &(0x7f0000000140), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsetxattr$security_selinux(r5, &(0x7f0000000100), &(0x7f0000000340)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x12, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x1f, 0x0, 0x0, 0x0, {0x204}}, 0x9) sync_file_range(0xffffffffffffffff, 0x0, 0xb1, 0x1) pipe(&(0x7f0000003fc0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r6, 0xc0045878, 0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r7}}, 0x800) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r8}}, 0x800) syz_io_uring_submit(0x0, 0x0, &(0x7f00000029c0)=@IORING_OP_SENDMSG={0x9, 0x5, 0x0, r1, 0x0, &(0x7f00000006c0)={&(0x7f00000001c0)=@llc={0x1a, 0x311, 0x1f, 0x0, 0x3, 0x1, @broadcast}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000240)="d7f64ead483fe2efb8e710dbc674afa9da97e435f9ef904e3d3d4eab3288da0d9439628a22b140f46b9acd08d6b211", 0x2f}, {&(0x7f0000000380)="c1354c76856baff22de1686b9ad330c4d3339a5235319dce2e8efb0df91842c4616aeb98f00cf1d35ca8161b61c82a828060f6dfa79721a74c543649a302034bccf0ddf814e7f819d48920c3c66fc4d2e59c0f17692d393c089c250baf59295f487083a77c79411f86be604bc7e958db660e55de21f41e232c8330917036a25ed20b2ae6eb6d6a1913c62906e5f4b79a350fa130f4e657bb8d75d25b1b79c1381cda228506ffa0d0c6fc83915298886508a24c6ba2361032934fc3a8e3f11f4981f2a326771d77960adaf73f9708ad6de88bf1ff538da1cd5b2b", 0xda}, {&(0x7f0000000480)="c1e620bc4a41e308cf9c43f87bce283c68dc3d0eb66c2d8f922a98c85e00c7f904d3c5c0beea75cffcdd1ad87ccf1c317b3592cf040f0c1f77032e55b2d34315720de6cb11fc355139de781a06fc571375068c9deca4eaeacd7519d6b05e808f59ec846d1c05b882ce49e7d67b368cc471026ccb5e720f7db345c4e4f4d641762c1348185794d20a878114368b3d466208a41c9a3f18e8f62e1ec5052e3b45d974976fd9d4a81a88b78a59c3b1ddd31b590264b2dd846beb6e8dc170531245aeed8a4f3973b8c5e7dadc5d47dadec69ecf", 0xd1}, {&(0x7f0000000280)="9ce28a7ec1ac940659e2ca649e26ac66cd4d5cbd88980486cb8289d275e3419ef9b4098ee1c82058e51e46707517ce47c9e22f81e87f692be2d612e8628861b717b13a5509acdb26e470f29ca00bef764945f761bc8a93bf330b35237c2833b4b28b5a7908e2469e2ba54dc9655779b92d87d4e52153deb1f9b34473ec695b931350df250920ee53e17bab01ed0cebc196dc3538270bc3c5083838", 0x9b}, {&(0x7f0000000740)="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", 0x1000}, {&(0x7f0000000580)="235607b31de2d73da7fefd46961b9981b00a7a4905d3fefbfc50cc0dd0724f51ceba616bf69b7e85712bd0fdfab9861edce03c7a5971e9396b74333f065ef71ab0414debde6199b71aef14ddc018496142093cb0d392467f8f55bd3348c98d04129df85d4137a8ab24bd66a5992a549c9382e622ca2297f1943499bd7475e80f47ed9c70c8da555c6ea42dc05ce62dd0701bfec70403cd0d2eb829b4194e1a124a8c487a701b0c22780695c3203189b907ec0f6f4cada10f581db978f3", 0xbd}], 0x6, &(0x7f0000001740)=[{0x80, 0x119, 0x0, "23c98fa5f283633496ffe5ffd2dcd907db2486f4ee85f570fc2cdc1cc862bac6e8aa6a79acc1262fd6f805fde7a250948160289a731088fb01b45c5357cfcf356e0b9d2d7f9ce32108a461c9c3fcdf1ed3400f7229212c2ab64b7b6fe6d9240b4a35b1d9017979d86f44839244f166"}, {0x70, 0x3a, 0x7, "bb5ad86a2d8f7572be8662e96ca1e1279db8759d7ff7d8040a95059bcc3f0c2fde5d75d3a1517818ab3b7d92dd1bd2b3306150b483ab57cac2460d630885ffb11c31c3678cfbb575d0ad87bc2b76507cab7d493caedef35c5615484c4cfe66bc"}, {0x90, 0x10e, 0x2, "20afa4b273a40375cf1abad79c58c843bafa1740b7d3906a58048218aff34d72b20015ebd54891556a775037ee16c83bccc28ee5e1bda71442bfe51ea0c25af2c3955fe11097fac91ede8e308644b9ada12554f08ae78eeab22a3196db602e7913fe1836bec8d075b724fd9503fb805a87e6dd7e9fe232ad64e96800cd56e623"}, {0x10, 0x110, 0x1}, {0x40, 0xff, 0x800, "56a9041ba5f9e6c89d3f3af57d1eb87ba5b1596424df6de918200cc2a995458090b3447ef51e9a262f87"}, {0x1010, 0x110, 0x6, "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"}, {0x80, 0x10f, 0x2, "e846bdcc9a7e1332e29b8ccdf173b7d55a3d7ae8df81b4d6254cef659189700165b874bb229f0bbf7c7e9ac8cc3d9fb71284d05a3f11091219d6638114237fd8e6bdb31dcb6517700f5a5007cfa283572fb520a5ebd898d61245b842c72fc80cf9152d7649d24bb5ca00f070bb"}], 0x1260}, 0x0, 0x40c5, 0x1, {0x0, r8}}, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x1, 0x0, @fd_index=0x8, 0x1, 0x0, 0x8, 0x0, 0x0, {0x0, r7}}, 0x0) r9 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) syz_io_uring_submit(r9, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:57:56 executing program 4: socket$inet6_udp(0xa, 0x2, 0x0) socket$inet(0x2, 0xa, 0xff7ffffd) r0 = syz_io_uring_setup(0x3157, &(0x7f0000000140), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0xf0ffffff7f0000, 0x0, 0x0) 05:57:56 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x935b}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x500) 05:57:56 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000000040)={0x2, {0x2, 0x3, 0x7, 0x1, 0x3ff, 0x14}}) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x935b}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xe4ffffff00000000) 05:57:56 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet(0x2, 0xa, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_io_uring_setup(0x3157, &(0x7f0000000140), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ff3000/0x1000)=nil, 0x1000, 0x1000000, 0x1010, r2, 0x10000000) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001b80)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001bc0)={0xffffffffffffffff}) r8 = syz_open_dev$vcsa(0x0, 0xe11, 0x4000) ioctl$ifreq_SIOCGIFINDEX_wireguard(r8, 0x8933, &(0x7f0000000240)={'wg2\x00'}) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(r10, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r11 = socket$inet(0x2, 0xa, 0xff7ffffd) ioctl$SNAPSHOT_UNFREEZE(r11, 0x3302) syz_io_uring_submit(r3, r5, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x5, 0x0, 0x0, 0x7, &(0x7f0000001c00)=[r2, r6, r1, r7, r8, r9, r10, r0, r1], 0x9}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r1, &(0x7f00000015c0)=[{&(0x7f00000001c0)=""/232, 0xe8}, {&(0x7f00000002c0)=""/126, 0x7e}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/138, 0x8a}, {&(0x7f0000001400)=""/95, 0x5f}, {&(0x7f0000001480)=""/104, 0x68}, {&(0x7f0000001500)=""/159, 0x9f}], 0x7, 0x6, 0x6) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:58:13 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000000040)={0x2, {0x2, 0x3, 0x7, 0x1, 0x3ff, 0x14}}) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x935b}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xffffffff00000000) 05:58:13 executing program 4: socket$inet6_udp(0xa, 0x2, 0x0) socket$inet(0x2, 0xa, 0xff7ffffd) r0 = syz_io_uring_setup(0x3157, &(0x7f0000000140), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x100000000000000, 0x0, 0x0) 05:58:13 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x935b}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x62e) 05:58:13 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000040)=0x7, 0x4) r2 = dup3(r1, r0, 0x80000) getsockname$packet(0xffffffffffffffff, &(0x7f0000000800)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000840)=0x14) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000003640)={'gre0\x00', &(0x7f0000003600)={'syztnl1\x00', 0x0, 0x7810, 0x40, 0x5, 0xfffffffd, {{0x6, 0x4, 0x0, 0x2, 0x18, 0x65, 0x0, 0x9a, 0x2f, 0x0, @private=0xa010101, @broadcast, {[@noop]}}}}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000003b80)={'batadv_slave_1\x00', 0x0}) sendmmsg$inet6(r2, &(0x7f0000003d00)=[{{&(0x7f00000001c0)={0xa, 0x4e20, 0x6, @ipv4={'\x00', '\xff\xff', @loopback}, 0xfff}, 0x1c, &(0x7f0000000480)=[{&(0x7f0000000200)="c6250c782b5a6353f24609e3321dfd92e4ee0fa4522c8cb05633a1c2c8f4aa45bff21733d59bb7dd553f3986faa1fd7d67b7abb2409e1cd2ee679509b9274bab45b44ac6eabe463503e16372ad5eb55d6f1538a8f1c19d926e770a8c7573026e00bda879c36d4764f41b8df90d94c4a4860c48f578af11908dce4a8775ff858d82e0b51558cf73855bb11fc7e5fcc070d4b3", 0x92}, {&(0x7f00000002c0)="50c80893c626c6fe0adf95ab798efcfa184a62bdb50099384f8dbaeb449433885c7fc1de72cd3eb8a931ec1f0f06db72b641e9a6", 0x34}, {&(0x7f0000000300)="ae9a3b1aa8a6c908975f36305c0df3a56d8461bff0f04d1df3a73f1e1a970fb92f70df6c8fa67a8bdfb9589fd36a197feab66d4322ce199ced49e4173030ddc924d2ce06e341837881f9614099987e29dfdfca6f22d0f2ad5423d8c0a850c6f3dba7b783a9b3f797c418753e93f40389561edb2d1f4d894d2d473f04fca978b3373bfe1e9cad7dd60fe6863d3894eb824f283cd58ed4ef7334e76508219fcc9b1e32f45b9077c76c77e3b186fc14b71debd74bc8aa5bfeb052f86dc24fc2377b1e13f6ddf0cdc2985f9f7837a6ffdc8627a545c3b98a5ba0d86f39b339bd1bdb97e43e4d3dc5019c", 0xe8}, {&(0x7f0000000400)="96ded7018f6a569ee8a25df5e7d2703ba95022be2ca96889df496ba3530ecfadc915d05e62c03d11a4200f465cd54342284797a68cc031de34ec81d08881c36964614a5db76b9220412a7575", 0x4c}], 0x4, &(0x7f00000004c0)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x40}}, @hoplimit={{0x14, 0x29, 0x34, 0x11ec7e9f}}, @rthdr={{0x38, 0x29, 0x39, {0x2, 0x4, 0x2, 0x1, 0x0, [@local, @private1={0xfc, 0x1, '\x00', 0x1}]}}}], 0x68}}, {{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000540)="59f4e22a90bdf12e0acbf137df5b83fe9d2b4443e4257f1a84221516033b0462fa67184697f59b440a", 0x29}, {&(0x7f0000000580)="43a826a8317339788342781e9f4cba20c39e78419fc197bb3cc3629590c877b44da8aa9c072fc106c5369ab2bee955b27f550e3e4f6eca5b2ae5ccf0a369be3c923a93ad56a6d57c1909728ae5dc03b5d8f2334d627601a82b444a914e9a533f0ae63fc409cd0e41b26bd00e232ffb25f5eb536e97e300c8779aaa332c2ff50cc0fe80fc238255087a3597445f80ade657e6187bac9d4bd6ef6e5da5969fc78aae7a7dcba0cb26261962e39506f94d0c86bfa9fefebc801fa6e97b716f8b930fa455bc2b95", 0xc5}, {&(0x7f0000000740)="50cc7b3349d7df3a4e0bcff7a4184b8bb77ffd31dab28edbe5a7dbaad19813fdc19f76219fea3880dd59e763b8f6cb18adfea469d1f16638e41dd7f2abdf7f487674bfc016d82ab106c621a7a292b3d311026b57fe69bcdcf0b64ccd6578823f0c02b73e3d474c2068443f6fb57d6e54fac8c0f1d1991675ff08a33b868f72c704a398032ca187", 0x87}, {&(0x7f0000000680)="11a393dde40d10048cc1b221b2928a", 0xf}], 0x4, &(0x7f0000000880)=[@rthdr={{0x18, 0x29, 0x39, {0x2c, 0x0, 0x0, 0xfb}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x1}}, @rthdr={{0x48, 0x29, 0x39, {0x5c, 0x6, 0x0, 0x1, 0x0, [@empty, @empty, @loopback]}}}, @pktinfo={{0x24, 0x29, 0x32, {@dev={0xfe, 0x80, '\x00', 0x30}, r3}}}, @dstopts_2292={{0x58, 0x29, 0x4, {0x21, 0x7, '\x00', [@ra={0x5, 0x2, 0x401}, @jumbo={0xc2, 0x4, 0x200}, @pad1, @jumbo={0xc2, 0x4, 0x9}, @jumbo={0xc2, 0x4, 0x5}, @jumbo={0xc2, 0x4, 0x3ff}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x10, {0x2, 0x2, 0x2, 0x6, [0x3]}}, @pad1]}}}], 0xf8}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000980)="a43ae64093225e0bbd62b8e67a5db52f5d6e3afc74471e56e2b4bf2b63f552fb2421f929e75466c4fe10c187b5199cfc8bc48cc95edbfb235b85a9806c78650b02c3d03c3f2bd458bb26e95e169aa8dfa5c248a212fcfd31c20a2e7e2b7ceb43dd9bfac152797a", 0x67}], 0x1, &(0x7f0000000a40)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x4}}, @dstopts_2292={{0x1a0, 0x29, 0x4, {0x2f, 0x30, '\x00', [@enc_lim, @hao={0xc9, 0x10, @mcast1}, @generic={0x3, 0x68, "4f88232b0d6d417530020a0629cb83bae7aa8c70313bf7438c616e5ae669c21941f01c46a53c2176fb8f32ec14315fd13558a0b932065f9e206d2fee877018d2057ae2a29bed5a1c5aa400e967ec8e7dc9de9c9890dc14f6ea8e7421d0832e1370ce2a157de7cad7"}, @ra={0x5, 0x2, 0x6}, @hao={0xc9, 0x10, @empty}, @ra={0x5, 0x2, 0x8}, @generic={0x4, 0xcc, "4d504b3907eff38ebb1f41d3e56210144286bc2f017f03a25d294295f5da80cf28946116d72ab35ddb01ccb2229f50fae1a219d0d0cfd73389a3d12c0bd5c791807f13192a562e6c3364e4ce78475daf1a0f5bf4be2806326db4c544bd7653b13dd54564b2731ed0ac42af5c85644efcd366126f511ee4b4367a1f953689f6167c22e74c7f7c60fe7b52ab6d9124b85bd4c9a1676abbe02195c949322c7cd06f7eab0b8fbd9ee8cab77d5b5f88cbd024d854bebce101e1eee0bbb2207f9ecab97b87f86374cd5bcc5ab96149"}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x18}}, @jumbo={0xc2, 0x4, 0x8}, @jumbo={0xc2, 0x4, 0xfffffff9}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0xff}}, @hopopts_2292={{0x28, 0x29, 0x36, {0x87, 0x1, '\x00', [@enc_lim={0x4, 0x1, 0x7}, @pad1, @jumbo={0xc2, 0x4, 0x8}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, @dstopts={{0x70, 0x29, 0x37, {0x2b, 0xa, '\x00', [@calipso={0x7, 0x48, {0x0, 0x10, 0x1a, 0x9, [0x205, 0x1, 0xfffffffffffff862, 0x7fff, 0x1000, 0x1, 0x1000, 0x6]}}, @jumbo={0xc2, 0x4, 0x2}, @pad1]}}}, @hopopts_2292={{0x20, 0x29, 0x36, {0x29, 0x0, '\x00', [@pad1]}}}, @rthdrdstopts={{0x38, 0x29, 0x37, {0x84, 0x3, '\x00', [@ra={0x5, 0x2, 0xfffe}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}}}], 0x2e8}}, {{0x0, 0x0, &(0x7f0000000d40), 0x0, &(0x7f0000000d80)=[@dontfrag={{0x14, 0x29, 0x3e, 0x9c}}, @dstopts_2292={{0x48, 0x29, 0x4, {0x2c, 0x5, '\x00', [@pad1, @pad1, @generic={0xfb, 0x1d, "f576bd3038323315baa34681c347a2d7e5a8fbbe23d39d277c2b1108cc"}, @jumbo={0xc2, 0x4, 0x6407}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x1}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x880}}], 0x90}}, {{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000e40)="1e99a73837c446f5d590d56325ea3b6e585091b6035c6f83c6c184655a6774269121d3ceb0fbbc4a0205c3b0e7efc6360035a1f680011a789bd2c94c2c37982c879f3dd0739a3f2f4da5ec88dbfc637783a1d6f4e62d3ae7e6c4ffd74ddc60645080da51ce73664aca8d1c", 0x6b}, {&(0x7f0000000ec0)="56bae78811d62ed7e2056a8b401821ba2fad7aea9e0a2c5bdef787ce94ccf31907792d3724df48cd284982321e5a48b982ef122078595abbe74dbf0882499073f42e1e538aa4fd566c43932eea25fc7bbcfd564d5022b7366730d45d8ac944007b6a130fcd1e37ad48a79847ea3c0efac5963ab760ab19760e0a498cc9366b304d418c8705c7f5", 0x87}, {&(0x7f0000000f80)="bbd1389d5b2dbd5f68fd85717babbf0d35a7932e3c99c77cd23108f8571c797c6ff4260ced1c01b8903f9d1032635bead5712f168a13c249f033883e89901d51144c37f02db75f45e20bc55e9468ccd2f5f7325118fd5b7080455c1fd2548820eb00c56b26a5b6dfff7c054bc142fa95a1470eae095da02bcfcea9b2e20a0829984a7101a163bc07a0f65e86807538be8b2a55085567d70cd2096e1c02b66c626c14195e44576b497fecc5b260fdad8daa3811cccc2599ebf65e73091d09981a4d46bb09b5e36eefc22ba4c5ee72e3e38cc1c13032da717987f0ab82eb31d66aedc593b9", 0xe4}, {&(0x7f0000001080)="afb1866b02042c5f759b18945ef1b0bc9ad58c222805ab16d6b9adbb2d1656c8e39c2f055791dbabe139ebf333892fefa99ab28a087bd07e50e5db4d43afc50abd792098dd0e7411ef3aa02d583f02d7a5fe1203e4b30a4803e6949502b3b190ee5af9ffc40100972846f43112fc4f4a1766a013524df55bc4089ecf7d1dc1697a09287e93e418495db1c064eb5662140e30903208a831c5c05725ad69157e84314ca39d59ad9f550b2e5cfb58f16899bd3d41ecde879aedd49054768240ed", 0xbf}, {&(0x7f0000001140)="0fd9e1b742e6ba07589cf45ba8ceeeeb56e0acdf9be49352aa105fa82c89ea6cd1af427c835363a8692712910b9e5578d301d29dd1774d6ecdd9e2ea6188eb6426fad8ddc9285e38829287d39ad8ede6d665b4cf2d75e2a7ba73dd18749fcfba4ee57de4edf8d5df3cf64ba00b84e63727d302adfe1e3f0f2410f0ae462c45f7ead4423ee20152ad70a491442a301dcc473fcf8b571ca93724dc3b520499125c5ebd1d5bc214928fb0ca00", 0xab}, {&(0x7f0000001200)="1c765fc0f507f7e553f97e918d3fbaafb215ec128efe0d03906c9ccc0c17e53e3bab1121d5af5d95b952d7cc5107581aa54ecda1646c031c9b32863c377dd8c87564d5e126eacaf16957664c281050ad7bc802a08147536ce3cbc3a68f7f9b5e14a4072fac363f62d1bbcdc4c39a1188ce6af0a2a2eeda3185db615819bc495859b91583924c85adebae196bc9754e133f4bd6598148d58f0377c4d62f4ac26d5af5d243fd8f4a2c947352e1d7de3fe458daab89c6b17dba1f1ab9864002b15f962e2d5702867c07461c9a46ac2f0ffb4711dbecc27591e1ab00d15443ca1fbfb435a26cc074154cef18412937f003d9e2a438", 0xf3}, {&(0x7f0000001300)="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", 0xfb}], 0x7, &(0x7f0000001480)=[@rthdrdstopts={{0x108, 0x29, 0x37, {0x2b, 0x1d, '\x00', [@generic={0x22, 0xec, "197170cd737335a89b428bdf59bd84fc6bb0c147780b36967eeddce21bb71e7e6550eff2e8434fde6061e9745b333ae3336f61d00b58104b23a6013f6fff9c137b86666a84f435bb8111eef05978756e0d16834796b3fac8bcf0dc2a3c822f5aa1d90bd6edb6ef16b803270e7e012e6a54fb7a3385114ea758a98e24c1795ef84b715a39f0ea5e70c07340546e850001654df050cd0fe8c0484660b6df7ade7c59fb230be84294d283aedf8ad35421bafd35891975e4fe7dc6b27bf3c620997be93aa247c002b1d3e24e087b98c0515d4642921ceb6f2144d578c5e555e1eb71bc5a33c58fc91b0c2226cc0c"}]}}}, @rthdrdstopts={{0x30, 0x29, 0x37, {0x87, 0x2, '\x00', [@generic={0x0, 0x12, "ad00f51f2c0b95b631e6d85381a73cb621cb"}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x3}}], 0x150}}, {{&(0x7f0000001600)={0xa, 0x4e23, 0x1, @mcast2, 0x6}, 0x1c, &(0x7f0000001680)=[{&(0x7f0000001e00)="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", 0x1000}, {&(0x7f0000001640)="ccb8e478c9c52e27b578a4963f203d0a7bbb862b59f298c135b32308e1c3eb64", 0x20}], 0x2, &(0x7f00000016c0)=[@hoplimit={{0x14, 0x29, 0x34, 0x8001}}, @pktinfo={{0x24, 0x29, 0x32, {@dev={0xfe, 0x80, '\x00', 0x35}}}}, @pktinfo={{0x24, 0x29, 0x32, {@private2={0xfc, 0x2, '\x00', 0x1}}}}], 0x68}}, {{&(0x7f0000001740)={0xa, 0x4e20, 0x198, @mcast1, 0x813}, 0x1c, &(0x7f0000001c40)=[{&(0x7f0000001780)="4e906b11dd0d9ce9356cd0aa0fcfe812a53163fb49c5539ad992f25e0b4065146d810832b315b0c57a5d41f2d89b27976742f8513e1744bfdd70129ae54f41761e15882c42e140d02fb1ab11d3979ca0e4dad1409689874abf185a62277d197466e047ecedf85e007c975e8f18e19e9c6a60339d9d9510a39b39ff6295240d3cc79840e63618d942826f167c5618746a09", 0x91}, {&(0x7f0000001840)="407e5adeba5df6b5509acfd688af1053a66b251aa8e4188c948a7f4390868ca83b89cbf87b9e6c328cf7a25b79a36068baa60f892a37e4cde66ebf6565e63a9d5af67bbfd776520598b5afd0975823fc65e12128d0db70784cc11f5b6816487ed6f34bc7bb4bf0484e1e2e341d72301bbe35e809b627faefc781c72d5c36973b86ec8022aebe477d17c31bb9463014c709bfe81853cd56b9ce2836a78055fa59", 0xa0}, {&(0x7f0000001900)="17eb580bf4881d91a098cd35a7e8d801984537b8162e5990a9c50e3b798793bb7761e3d4874fdde5e79a86502a10d44efecf620d0d9753d2e224c6177195ee15fbdc23e3657f30fedc6236229a0201f0a9b2d89e74dd335fe5cc77013b7805a90104be8741ca42b678c26b193391b723167160d7f264a0175cc78d4f0326e1bf0eb221d5c870b28b0deee37ea4f80f4f642ac00628dffbc0b8192d674b0c731b04118bef0b7f50643f98e8cca16c0a22594eab768f9e8979c84307122365a9d07df0f0a8285cc58be4898fcbc1236d326b04c6c6abcf797720ccdea7e43fc717abf51a4ea16b813c72", 0xe9}, {&(0x7f0000001a00)="19ac12e425f25fb90c12da5b1568d3db0577d3723e9191cc8ba66744fecde8b4f0e8175e1e3d94d37e4b392906074409c3289890bfaa3d8dc504ebebdf3a30201886247df1e4318ee45638f08a18fd8199f0636e2890c1c0194efc6840642df8ca8645b490591d15bc01a6c7651e5a8760b247c0ce1ac57384c41ea97dfb54a4441db8d5d9b3b0d05ad967e39a5294acafbd1901e32fcc", 0x97}, {&(0x7f0000001ac0)="7d157e3c0f7a3cfc85e23ba611b0eda90e4ef66d21801c3a08b3eb9d2a239c4ded37875059149d64e5b59d7327084624f3bb6e7199890c1fc6e8dcb74561c6296d5f0177545ab98f8ac47962097c3cb3db081c6b1537074bef65ae0971f853a372d5f0c32d47628a4f5042e3d9e73410", 0x70}, {&(0x7f0000001b40)="58981df10f27d1bb9c456451c2c2abf26e8cd041e799fb421a0109184cc5c2ad1416678be333df1a6a2edc229c7a6d46783860c7f910a247e6a42d5446cb184716d16ba60507462baf2baea6a871f136bb2dc58b59d87cc1f5e67a8f4184a4e9965e869d21705c9fe864129ed99247603353017038b3e00606d2dba2de55c86f8c36cd2cd7d83037bd87371f38be4e7d21a3bfbc830b17d0453dda595142603a44", 0xa1}, {&(0x7f0000001c00)="2b1181bf5f89762f1ea7eab12d8fbc", 0xf}], 0x7, &(0x7f0000001cc0)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x2}}, @pktinfo={{0x24, 0x29, 0x32, {@private0}}}, @tclass={{0x14, 0x29, 0x43, 0x7}}], 0x58}}, {{&(0x7f0000001d40)={0xa, 0x4e23, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x452}, 0x1c, &(0x7f0000002f40)=[{&(0x7f0000002e00)="f6ffeab930169a53906e1099d84f642aee1e2b7853d5a65361cdd2e56785756a7f8a253a89fc3181206612d402da3c8aeef980b036ebb717ec33c22a66ddd8aa4c3ce0d88bf9169fe4e131daac9b139b3a25201d9f8f10bb9862344698d6833e77c6adeb18b9e92c398a6838c18104865a0997323d5fcb160d53c17120f7868372d14b4e6fb5808f9933bce35dd703994fa43c172908c9728a439398e08dc93503a0ac4f545054ca14684b6b8e572848677ba33daf1ff234a79206562856ba83c4673d1e0854dfa2dadc744578d6e60d090bb5ef6ecaddf9cc2b37c1631f7a2ace58a496b24578e7", 0xe8}, {&(0x7f0000002f00)="55413a6d75be12863a8a34c5270c26fe8ca7427cc00636090253077d8a3f884b257bfb3d3556188006f338ca", 0x2c}], 0x2, &(0x7f0000002f80)=[@dstopts_2292={{0x20, 0x29, 0x4, {0x11, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x1}]}}}, @dstopts_2292={{0x120, 0x29, 0x4, {0x1d, 0x20, '\x00', [@padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0x8}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x18, {0x3, 0x4, 0x1, 0x5, [0x8, 0x1]}}, @hao={0xc9, 0x10, @private0}, @jumbo={0xc2, 0x4, 0x1}, @generic={0x4, 0xa7, "eedf539f714a6956c3bd24960fe39ffa408aa4c87eefb9fb832cf7f4e7dad81ad65b0e300f5cdabee6ba33988838d631a3949bf9c810de7fd7444912870504103aab11592f70e7dfaca6104bd50c53555c9680794017f214ff495e0494412f96879bb3298e0c9697adfaa31922eedb4078b07f8a3fee131f0b1d46405d0d252822abe3ff9e07d99fb9e7e9b60526d06e8b75afa421a24c8d0089ea9761d142be964b966d490058"}, @hao={0xc9, 0x10, @empty}, @enc_lim={0x4, 0x1, 0x4}]}}}, @rthdr_2292={{0x68, 0x29, 0x39, {0x33, 0xa, 0x0, 0x8, 0x0, [@mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @dev={0xfe, 0x80, '\x00', 0x20}, @loopback, @rand_addr=' \x01\x00']}}}, @rthdr_2292={{0x78, 0x29, 0x39, {0x29, 0xc, 0x2, 0x5, 0x0, [@loopback, @empty, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x32}, @mcast2, @empty]}}}, @rthdr={{0xb8, 0x29, 0x39, {0x0, 0x14, 0x2, 0x9, 0x0, [@local, @ipv4={'\x00', '\xff\xff', @multicast2}, @ipv4={'\x00', '\xff\xff', @loopback}, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast1, @empty, @mcast1, @mcast1, @mcast2, @empty]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x401}}, @flowinfo={{0x14, 0x29, 0xb, 0x4}}, @tclass={{0x14, 0x29, 0x43, 0x80}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x8000}}], 0x338}}, {{0x0, 0x0, &(0x7f0000003580)=[{&(0x7f00000032c0)="a49321f643738d7509be62ea1dd7f9c0240c3e89d00be278d8731886a4689bc77e8e629ea906eb002d8d1e316d7464715d90c0084ab347224cea23a46ceb7d74372ef29435279337e76768eeea8962547b20c3558918ef8d31a4b649f0663a9e8062b0caf328749f29ae986e671e4279c06e0d0862195e0f77512a30effa17d544cf0118b65c80eebdb1f7be68e38f648f04e3d1bab1cb1733e30f5985d142a17163bbc5", 0xa4}, {&(0x7f0000003380)="5445cfbc003f97d7caeede52199aaf17d742982a5280f674060fddc843bfa9c466d6795bcec3a75553bcf9e49108cbf78b600b30af0957c2eea4bd813afb10d3b35161cd750f5e45af", 0x49}, {&(0x7f0000003400)="03673df1f118059f8ca668e55f843e2e0cebce56b020dbea98d2e6dbb64c92727495b5bdf7cccc7c87802cba99bb6596e3524efa9b745b9f0f7b8b4274e155ea71cfb963c6bf134752c9f5ad3ba300245c0212c425a2242f6db7f4f0818471d903ed64987b16930d783abf95b5aad7b743cfc92f", 0x74}, {&(0x7f0000003480)="ed144d85a8693508fe64f482350a37d6a93c878a0c1db9381f8d92a108712f826e70714c073cfd667ae51855635a8e77", 0x30}, {&(0x7f00000034c0)="6d0a5fd21b799375dc5417a5346dfaf0e6a2855f07af52338366a132307273049a4ff0f954668f0263af911b657e18b566cb79292ec7f98ced0357e36a12e6ba918414bea6192a31cabda02d44d2ef6b703ef1e442eac085c2ad5ff3919a2d42d7f91c84652c9ccf19058ede35307c80a6838a5e", 0x74}, {&(0x7f0000003540)="3fa5be098402244aba5dc59b0e9ad4b496070c6ee798fab9363c762835", 0x1d}], 0x6, &(0x7f0000003680)=[@dstopts_2292={{0x88, 0x29, 0x4, {0x5c, 0xd, '\x00', [@ra={0x5, 0x2, 0x907}, @pad1, @ra={0x5, 0x2, 0xb028}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @pad1, @ra={0x5, 0x2, 0x8}, @calipso={0x7, 0x50, {0x1, 0x12, 0x48, 0x20, [0xf830000000000, 0x2b, 0x81, 0x8001, 0x9, 0x5, 0x7, 0xb9, 0x100]}}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@mcast2, r4}}}, @rthdr_2292={{0x48, 0x29, 0x39, {0x3a, 0x6, 0x0, 0x0, 0x0, [@loopback, @ipv4={'\x00', '\xff\xff', @loopback}, @mcast2]}}}, @flowinfo={{0x14, 0x29, 0xb, 0xffff}}, @hopopts={{0xb0, 0x29, 0x36, {0x33, 0x12, '\x00', [@generic={0xff, 0x93, "672684cbc7040b9482e0d1e8f10fb08194f32cdd7f8d926c7a18470411f82b1be5b6222351c1e1f34cfc21781946a0f925acb7aa6fa5b30b2b1ee24ab6a8a2dbaf39f82f6b2fddd55c8ace6a94b7a0e627871bfdd23473a66eb5fffe570acd3b2058ccb3d5494db762f5c9321dbf5c2e7ce2097661cea64276dfa8d10c5e289e6bd2d6437c04ff65788cbfdecf4d6f45b144f3"}]}}}], 0x1c0}}, {{&(0x7f0000003840)={0xa, 0x4e23, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}, 0x20}, 0x1c, &(0x7f0000003b00)=[{&(0x7f0000003880)="b15b66f90726649f65cd487d94ee6ab0d3a2a951b607b91a093876c20f5ed3b8676a38a1bc9de8d5aac82f9234eeb12f158725f1378d3e633470b603f23ba98c714923a1249675130a9b3b6166812afb780bada5213d173e6ed5c22e1f11b9ca5befff95c68c7975246e28ae1d5da73c2ebfb04c07b3744fe90f5dd076a8e5ff21d484e72a634f1262255f514886c3753392415c9b63f03a32001cbb5737d4293962d881d489c75a53af81fc3bb104df", 0xb0}, {&(0x7f0000003940)="686f353bce3202224799bae077347d63cbb0c9233f1394e2bf14bc3855f425991a2e6b1362cf338aaf70af7032859e9b103a9cc969e284eb19616a64ed465f", 0x3f}, {&(0x7f0000003980)="bed4c4bb4f55bfbe28f110e19dc66c3bedb230308c53d28edfa6a81349b26e0fb8125f09134789e7d4c82e042ff5d12d13f67a59742871711c0a600229609e252774ab5b2a5fa096df541bb4d1e2a24f98b8c3861c8188a66ee2cd1cc115c17bb6dd882269a2972a0ee29d225b5144123309524eb60008ac751e958b63ca271091d66f893c10a182f85a892eb2fc4ea3c86285fe3eaf65f59c78fcf2518515c1ee7df1f95dfcdd18956db4bd5a9bc90c0e589cce9926a1871e3bdfbebc42aa69c69977dce7a2add9bb3f964b1d73866d802d66e917b8456aea7cc16a817a8443ca0fc3393841996a8461ec6120437c65e513b53e7f6d82dedb", 0xf9}, {&(0x7f0000003a80)="e2296a7ace54694f", 0x8}, {&(0x7f0000003ac0)="16349ed894b4", 0x6}], 0x5, &(0x7f0000003bc0)=[@pktinfo={{0x24, 0x29, 0x32, {@local, r5}}}, @rthdrdstopts={{0xa0, 0x29, 0x37, {0x3c, 0x10, '\x00', [@enc_lim={0x4, 0x1, 0x2}, @generic={0x40, 0x1c, "173afe75e61ecc64d8c8947dbbb5b0fd6065bf0bb91c5a85c13003e0"}, @generic={0x9f, 0x61, "39e063ba9c286a7a536c33a14d7eb202f54fcb1f942883bb1de7e05643566be6368694beb540cbad084bcc4e138bc4790f67802d86ffc40587c4f9668038b8cf448f3428701053a434dbe22b96f6b542a2a09e29e94615f3a9ac3602878c35be62"}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x1ff}}, @rthdr_2292={{0x38, 0x29, 0x39, {0x1cb, 0x4, 0x2, 0x3, 0x0, [@dev={0xfe, 0x80, '\x00', 0x44}, @mcast2]}}}], 0x118}}], 0xa, 0x10) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(r6, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r7 = socket$inet(0x2, 0xa, 0xff7ffffd) ioctl$SNAPSHOT_UNFREEZE(r7, 0x3302) dup3(r7, r6, 0x0) r8 = syz_io_uring_setup(0x3157, &(0x7f0000000140), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x8006, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x40000000, 0x100000, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r11 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r8, 0x0) syz_io_uring_submit(r11, r10, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r8, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2878.778509] FAULT_INJECTION: forcing a failure. [ 2878.778509] name failslab, interval 1, probability 0, space 0, times 0 [ 2878.780845] CPU: 0 PID: 16193 Comm: syz-executor.0 Not tainted 5.10.202 #1 [ 2878.782262] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2878.783885] Call Trace: [ 2878.784436] dump_stack+0x107/0x167 [ 2878.785176] should_fail.cold+0x5/0xa [ 2878.785950] should_failslab+0x5/0x20 [ 2878.786719] kmem_cache_alloc_bulk+0x4b/0x320 [ 2878.787622] io_submit_sqes+0x6f76/0x85c0 [ 2878.788495] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 2878.789483] __do_sys_io_uring_enter+0x6b5/0x1920 [ 2878.790430] ? lock_downgrade+0x6d0/0x6d0 [ 2878.791237] ? find_held_lock+0x2c/0x110 [ 2878.792051] ? io_submit_sqes+0x85c0/0x85c0 [ 2878.792925] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2878.793882] ? wait_for_completion_io+0x270/0x270 [ 2878.794840] ? rcu_read_lock_any_held+0x75/0xa0 [ 2878.795740] ? vfs_write+0x354/0xa70 [ 2878.796497] ? fput_many+0x2f/0x1a0 [ 2878.797216] ? ksys_write+0x1a9/0x260 [ 2878.797952] ? __ia32_sys_read+0xb0/0xb0 [ 2878.798755] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2878.799783] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2878.800819] do_syscall_64+0x33/0x40 [ 2878.801556] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2878.802572] RIP: 0033:0x7fb03d693b19 [ 2878.803309] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2878.806907] RSP: 002b:00007fb03ac09188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2878.808409] RAX: ffffffffffffffda RBX: 00007fb03d7a6f60 RCX: 00007fb03d693b19 [ 2878.809814] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2878.811229] RBP: 00007fb03ac091d0 R08: 0000000000000000 R09: 0000000000000000 [ 2878.812634] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2878.814038] R13: 00007ffe77755f3f R14: 00007fb03ac09300 R15: 0000000000022000 05:58:13 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x935b}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000180)=0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0xff, 0x85, 0x40, 0x7b, 0x0, 0x4, 0x604, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x9, 0x2, @perf_bp={&(0x7f0000000040), 0x6}, 0x2000, 0x8000, 0x80000001, 0x8, 0x185f5873, 0xffffffff, 0x1f, 0x0, 0x6, 0x0, 0xff}, r5, 0x4, r4, 0x3) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:58:13 executing program 2: socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$inet(0x2, 0xa, 0x0) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_io_uring_setup(0x3157, &(0x7f0000000140)={0x0, 0x0, 0x16}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x87ad) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) syz_io_uring_submit(r5, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_setup(0x4d4f, &(0x7f0000000240)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) r8 = mmap$IORING_OFF_SQES(&(0x7f0000ff4000/0x9000)=nil, 0x9000, 0x2000005, 0x50, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(r6, r8, &(0x7f0000000040)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x3, 0x0, 0x0, 0x0, 0x23456}, 0x8b9) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f0000000400)=ANY=[@ANYBLOB="5753b2c2a0010000000100000018590000", @ANYRES32=r0, @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00./file0\x00']) ioctl$sock_inet6_udp_SIOCINQ(r9, 0x541b, &(0x7f00000002c0)) r10 = accept4$inet(r0, &(0x7f0000000300)={0x2, 0x0, @loopback}, &(0x7f0000000340)=0x10, 0x800) syz_io_uring_submit(r6, r7, &(0x7f00000003c0)=@IORING_OP_FILES_UPDATE={0x14, 0x3, 0x0, 0x0, 0xffffffff, &(0x7f0000000380)=[r10], 0x1, 0x0, 0x1}, 0x85) ioctl$SNAPSHOT_UNFREEZE(0xffffffffffffffff, 0x3302) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f00000001c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x16163, 0x1, {0x3}}, 0x2) io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:58:13 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 28) 05:58:13 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r1 = socket$inet(0x2, 0xa, 0xff7ffffd) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000001c0)=0x8) ioctl$SNAPSHOT_UNFREEZE(r1, 0x3302) r3 = syz_io_uring_setup(0x3157, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r4, 0x0, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r0, 0x3, 0x0, 0x0, 0x0, 0x1}, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000240)={[0x3]}, 0x8, 0x80000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsetxattr$security_selinux(r6, &(0x7f0000000100), &(0x7f0000000340)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x12, 0x0) r7 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000000, 0x10010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r7, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x1f, 0x0, 0x0, 0x0, {0x204}}, 0x9) pipe(&(0x7f0000003fc0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r8, 0xc0045878, 0x0) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r7, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r9}}, 0x800) syz_io_uring_submit(r4, r5, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r9}}, 0x8001) io_uring_enter(r3, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:58:13 executing program 6: syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r3 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000100)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) io_uring_enter(r3, 0x8058a9, 0x0, 0x0, 0x0, 0x0) fchown(r3, 0x0, 0xffffffffffffffff) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP_SET_OP_VERSION(r2, 0x1, 0x53, &(0x7f00000000c0), &(0x7f0000000100)=0x8) sendmmsg$inet6(r2, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000001c0)="4bc702854e3954b59347985ccc868289d3fe483d2c0900a2a1d12e33a66529e1f276fef452632dfa3c004ce3be84a5f66c29cd4ec39ae5206562fbc9ea3c0dbbebc22e628e147b0e9631f19b0ce0a48e0e675b2da3442226b898f1ddf8eabf133ab4a9cb0999c2ee1d3bd36d089b0d8e97ea00d4c5f6ad14dce058d595aacba2d587ff5eacd81b71a73f53ed276d1f3b3384bb2bfba4e0f37302e690df9e7024378ac754ac0576f996f3ee53d1034c7720767ddf2625817532f7ae89103367b73a36152b84c38bc227ba9e9ff48bcfe027585cf14bff37a888", 0xff41}], 0x1}}], 0x1, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f0000000480)={@private2}, 0x14) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r5 = creat(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r4, 0xc0189375, &(0x7f0000000500)={{0x1, 0x1, 0x18, r5}, './file1\x00'}) connect$inet6(r6, &(0x7f0000000540)={0xa, 0x4e24, 0x9, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8}, 0x1c) ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000180)={0x0, r5}) sendmmsg$inet6(r4, &(0x7f0000000440)=[{{&(0x7f0000000040)={0xa, 0x4e21, 0xff, @private0, 0x400}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000002c0)="11ae27dc599ef5df2eec6d8143887e63a88946e66aaac276cf1161424b2e449e8f99cfd08347a4bea64580483cb31a62d2309674fcc4af0cba314f455e6d819024eb20df72f16adfa1d700ebc209085c802be56b5e1b0cea23dd5c11eb9ead273af0b9e460701e04aa08cf6bcb714008fe12cdb9c15f4b6065ffeab76da73e2a19a4442ffa1aaabae6b4465affad459f636b5f741d44bb46e22bfd8618eda6dc12e555bb561060aa1dc7db67aa3fc2b30358c786ed964057c8f1c5", 0xbb}, {&(0x7f0000000140)="97b22dcd4d5f5ad4c130174b7def9e8cf6f45e1c5d8619b6ebcbbf5918f422691f97cec86eee5c2be44e34ad47cc0afe01f9c405432fc707a6e851538f7999517c6fc443", 0x44}], 0x2, &(0x7f00000003c0)=[@dstopts={{0x20, 0x29, 0x37, {0x2f, 0x0, '\x00', [@ra={0x5, 0x2, 0x7}, @enc_lim]}}}, @dstopts={{0x58, 0x29, 0x37, {0x4, 0x7, '\x00', [@calipso={0x7, 0x38, {0x2, 0xc, 0x8, 0x2, [0x2, 0x2, 0x3, 0x7, 0x4, 0x5]}}]}}}], 0x78}}], 0x1, 0x4000010) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r4, 0x800c6613, &(0x7f0000000580)=@v1={0x0, @aes128, 0x3, @desc4}) syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) 05:58:13 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r1 = socket$inet(0x2, 0xa, 0xff7ffffd) ioctl$SNAPSHOT_UNFREEZE(r1, 0x3302) r2 = syz_io_uring_setup(0x3157, &(0x7f0000000140), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x6bee, &(0x7f00000001c0)={0x0, 0xc6a8, 0x20, 0x3, 0x2eb}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000000240)) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) syz_io_uring_submit(r5, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:58:13 executing program 2: r0 = shmget(0x2, 0x3000, 0x40, &(0x7f0000ff6000/0x3000)=nil) shmctl$SHM_UNLOCK(r0, 0xc) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet(0x2, 0xa, 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f00000001c0)={{0x2, 0x4e24, @multicast2}, {0x1, @random="7f27412673f1"}, 0x10, {0x2, 0x4e23, @multicast2}, 'veth1_vlan\x00'}) r3 = syz_io_uring_setup(0x3157, &(0x7f0000000140), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) r6 = epoll_create1(0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd=r6, 0x0, 0x0, 0x4, 0x1, 0x1}, 0x8) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000280), 0x403, 0x0) r7 = fsmount(r2, 0x1, 0x3) sendmsg$IPSET_CMD_FLUSH(r7, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, 0x4, 0x6, 0x3, 0x0, 0x0, {0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40040) linkat(r2, &(0x7f0000000040)='./file0\x00', r2, &(0x7f0000000240)='./file0\x00', 0x400) r8 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) syz_io_uring_submit(r8, r5, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r3, 0x58ab, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x10) 05:58:14 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = dup(r4) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="2804000006db278cdd129f003915b252db072bbb02c17720f3dde9458d", @ANYRES16=r6, @ANYBLOB="250300000000000000000100000008000100000000000c0099000000000000000000"], 0x28}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="050000000000000000000200000008000300", @ANYRES32=r9, @ANYBLOB="080002"], 0x24}}, 0x0) sendmsg$NL80211_CMD_REGISTER_BEACONS(r3, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x24, r6, 0x4, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x7f}, @val={0x8, 0x3, r9}, @void}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x24000000}, 0x20008000) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000000040)={0x2, {0x2, 0x3, 0x7, 0x1, 0x3ff, 0x14}}) r10 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) dup(r0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x935b}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r10, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:58:14 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 29) 05:58:14 executing program 4: socket$inet6_udp(0xa, 0x2, 0x0) socket$inet(0x2, 0xa, 0xff7ffffd) r0 = syz_io_uring_setup(0x3157, &(0x7f0000000140), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x2000000000000000, 0x0, 0x0) 05:58:14 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x935b}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x72e) [ 2879.225877] FAULT_INJECTION: forcing a failure. [ 2879.225877] name failslab, interval 1, probability 0, space 0, times 0 [ 2879.227732] CPU: 0 PID: 16240 Comm: syz-executor.0 Not tainted 5.10.202 #1 [ 2879.228856] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2879.230173] Call Trace: [ 2879.230595] dump_stack+0x107/0x167 [ 2879.231185] should_fail.cold+0x5/0xa [ 2879.231788] ? create_object.isra.0+0x3a/0xa20 [ 2879.232554] should_failslab+0x5/0x20 [ 2879.233177] kmem_cache_alloc+0x5b/0x310 [ 2879.233823] ? mark_held_locks+0x9e/0xe0 [ 2879.234506] create_object.isra.0+0x3a/0xa20 [ 2879.235234] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2879.236041] kmem_cache_alloc_bulk+0x168/0x320 [ 2879.236778] io_submit_sqes+0x6f76/0x85c0 [ 2879.237448] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 2879.238274] __do_sys_io_uring_enter+0x6b5/0x1920 [ 2879.239025] ? lock_downgrade+0x6d0/0x6d0 [ 2879.239681] ? find_held_lock+0x2c/0x110 [ 2879.240363] ? io_submit_sqes+0x85c0/0x85c0 [ 2879.241039] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2879.241772] ? wait_for_completion_io+0x270/0x270 [ 2879.242535] ? rcu_read_lock_any_held+0x75/0xa0 [ 2879.243244] ? vfs_write+0x354/0xa70 [ 2879.243837] ? fput_many+0x2f/0x1a0 [ 2879.244411] ? ksys_write+0x1a9/0x260 [ 2879.245019] ? __ia32_sys_read+0xb0/0xb0 [ 2879.245645] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2879.246448] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2879.247270] do_syscall_64+0x33/0x40 [ 2879.247839] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2879.248628] RIP: 0033:0x7fb03d693b19 [ 2879.249214] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2879.252100] RSP: 002b:00007fb03ac09188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2879.253296] RAX: ffffffffffffffda RBX: 00007fb03d7a6f60 RCX: 00007fb03d693b19 [ 2879.254426] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2879.255582] RBP: 00007fb03ac091d0 R08: 0000000000000000 R09: 0000000000000000 [ 2879.256725] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2879.257836] R13: 00007ffe77755f3f R14: 00007fb03ac09300 R15: 0000000000022000 05:58:14 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x935b}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0xbe1, &(0x7f0000000040)={0x0, 0x87ca, 0x20, 0x3, 0x308, 0x0, r0}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x4, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0xffffffff) r5 = syz_open_dev$vcsa(0x0, 0xe11, 0x4000) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000240)={'wg2\x00'}) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_GET(r5, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x3c, r6, 0x300, 0x70bd29, 0x25dfdbfb, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x40) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:58:14 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r1 = socket$inet(0x2, 0xa, 0xff7ffffd) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000040)={'ip6gre0\x00'}) ioctl$SNAPSHOT_UNFREEZE(r1, 0x3302) r2 = syz_io_uring_setup(0x3157, &(0x7f0000000140), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) syz_io_uring_submit(r5, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:58:14 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(r1, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r2 = socket$inet(0x2, 0xa, 0xff7ffffd) ioctl$SNAPSHOT_UNFREEZE(r2, 0x3302) r3 = dup3(r2, r1, 0x0) r4 = syz_io_uring_setup(0x3157, &(0x7f0000000140), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) io_uring_enter(r4, 0x58ab, 0x0, 0x0, 0x0, 0x0) r5 = socket$inet(0x2, 0xa, 0xff7ffffd) ioctl$SNAPSHOT_UNFREEZE(r5, 0x3302) dup3(r5, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$vcsa(0x0, 0xe11, 0x4000) ioctl$ifreq_SIOCGIFINDEX_wireguard(r6, 0x8933, &(0x7f0000000240)={'wg2\x00'}) r7 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KIOCSOUND(r7, 0x4b2f, 0x1) r8 = syz_open_dev$char_usb(0xc, 0xb4, 0x6) io_submit(0x0, 0x7, &(0x7f0000000640)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x8, 0x7ff, 0xffffffffffffffff, &(0x7f00000001c0)="fc1df5e9b5521eabcf1f17e01a17628c7c34994e3db1d818eb6ab8948a189511a7d3bf29018e6c70b6b5dbfb9c40d7202948f5311638d826b17673bfa26e79bcce684187227e5b9caab5cee5bfbc9675012572696e43", 0x56, 0x7e, 0x0, 0x1}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x6, 0xffffffffffffffff, &(0x7f0000000240)="69bfc522", 0x4, 0x12, 0x0, 0x1}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0xffe1, 0xffffffffffffffff, &(0x7f0000000340)="ecacc015e15e4eab62eaa22c7efb5117163c4851d08cd8292049be6c92dfad3dab6e426e829ebb564bbb1c1c046c03d2f15233e529ce7bf2dcc320a0a5dfe461771c422aefdf64544b7a300eeb38b9bb7f2a2a95ff83e40693c8706a2721bca088747d2b023e6e76c81bdf30809691a40a92e344ebe7b938d592c0976a7704004636b21e0ad4af449d", 0x89, 0x25, 0x0, 0x2}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x8, 0x8, r5, &(0x7f0000000740)="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", 0x1000, 0x1, 0x0, 0x2, r6}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x52a0, r7, &(0x7f0000001e00)="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", 0x1000, 0x0, 0x0, 0x3, r3}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x8, 0x7, r8, &(0x7f0000000500)="9221ebd969305596e2de3493a94a172dd81e31cd6bb9c06cc25a1a673ae11369ed13b0aed3d082a4", 0x28, 0x8a, 0x0, 0x3, r2}, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x7, 0x0, r0, &(0x7f0000000580)="b643860be4118b643c936919a4b6ca48cc71a177d48b0db22cde39a5e0e84f462266821f8c4dad70ab62ce186ecfeab991ca9a938a5817989d313dd5985fdca621b88b5ad24d723f645d3df0f99163b1", 0x50, 0x6, 0x0, 0x1, r3}]) 05:58:14 executing program 2: r0 = shmget(0x2, 0x3000, 0x40, &(0x7f0000ff6000/0x3000)=nil) shmctl$SHM_UNLOCK(r0, 0xc) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet(0x2, 0xa, 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f00000001c0)={{0x2, 0x4e24, @multicast2}, {0x1, @random="7f27412673f1"}, 0x10, {0x2, 0x4e23, @multicast2}, 'veth1_vlan\x00'}) r3 = syz_io_uring_setup(0x3157, &(0x7f0000000140), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) r6 = epoll_create1(0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd=r6, 0x0, 0x0, 0x4, 0x1, 0x1}, 0x8) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000280), 0x403, 0x0) r7 = fsmount(r2, 0x1, 0x3) sendmsg$IPSET_CMD_FLUSH(r7, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, 0x4, 0x6, 0x3, 0x0, 0x0, {0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40040) linkat(r2, &(0x7f0000000040)='./file0\x00', r2, &(0x7f0000000240)='./file0\x00', 0x400) r8 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) syz_io_uring_submit(r8, r5, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r3, 0x58ab, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x10) 05:58:14 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000700), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x11, 0x8, &(0x7f0000000600)=[{&(0x7f0000000180)="99a57d8d3ac5525c9b8b1eccfd1f3c8e5d316b60eea8c2ecb7866ee87acd108e56c87b69d0fe9c8874dab325cd57b690f6d23eab6fa5bcad5df06fea3edc7a643deb11da070d5a557afb1b05", 0x4c}, {&(0x7f0000000240)="f631729b87e8ed21ba0c73495f32e65193c5698931def3d110169f120d62408063231668517c01bf73f7b9a4be7daa6d38264a59c19c011c9a17b69b55de3163dd3a69bf46ac3cf740883ca67446a6b9f5521feef3aa69852a8d62225519f7a74b823175d667420e28d75e145e4d6fc995266127ff73db9465fed67b", 0x7c, 0x5}, {&(0x7f0000000340)="1c5c7e1ee020ac5ea824c4dfb954a18100caae9d4ac8c7821628e38afa9615a9cbe09a586205dcfead98d100586a172a0cbc093c29460567b350e9608e20e3764306800f04061cebcea01dbde3e6a944a170a7b27c0b14ff303f8dcbb114cbbb5b51c1a9593e346284ed00546e09ed3e8d39cc029b35a3d2a2c340f9b846531135", 0x81, 0x10000}, {&(0x7f0000000400)="d6993ab9c8daf7c80e3e48551924fe2257a22a6fafecad7bf55e3b611cf34b809a02470f65cfb44d1b", 0x29, 0x1a7}, {&(0x7f0000000440)="3e76daa3a4af8b157ff691a38343119824184c88bd5bc282cad1d997165ac0331bc0864ad624ca11085443c502157af94aeffa186a0c618ff876ed035aadc7ac0da15061d2d166c5d0825cbc6e180e3fd3dc6f6c1445a9425ef02a749acae0190e5c19042ca7b66de83c58eda1273cc71e948a70e957356f646c0d202c1b4d8c197b695ae2131770705ac6ea1ec97ef513d06a95ddf575583cea4a67b90b9546", 0xa0, 0x3}, {&(0x7f0000000500), 0x0, 0x2}, {&(0x7f0000000540)="c02e52c8ac33b3ddbb11c4bcd2836dbccc06f3e71f6f5861b74e0b5e931e3b69bd86f20ca56dd1730888dcc3c043505b41", 0x31, 0x5}, {&(0x7f0000000580)="7c26c2232ab254ead20cfb6e4c742155a88309b9d2834252d9adb6b4217d113d8b62aa520ff46c090618a74bd0301ea0ca91d0e603cac695c008c997b4d370aa7d7d8f3e1b39c9fcab53f8844ab8", 0x4e, 0xfffffffffffffffd}], 0x1808, &(0x7f00000006c0)=ANY=[@ANYBLOB="757365725f78617474722c70726a71756f9daa2c00"]) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000000040)={0x2, {0x2, 0x3, 0x7, 0x1, 0x3ff, 0x14}}) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x935b}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) r7 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsetxattr$security_selinux(r7, &(0x7f0000000100), &(0x7f0000000340)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x12, 0x0) r8 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000000, 0x10010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r8, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x1f, 0x0, 0x0, 0x0, {0x204}}, 0x9) pipe(&(0x7f0000003fc0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r9, 0xc0045878, 0x0) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r8, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x0, 0x0, r9, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r10}}, 0x800) syz_io_uring_submit(0x0, r6, &(0x7f00000002c0)=@IORING_OP_CLOSE={0x13, 0x5, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r10}}, 0xffffffff) 05:58:14 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x935b}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x92e) 05:58:31 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 30) 05:58:31 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000000040)={0x2, {0x2, 0x3, 0x7, 0x1, 0x3ff, 0x14}}) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x935b}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) r5 = syz_open_dev$vcsa(0x0, 0xe11, 0x4000) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000240)={'wg2\x00'}) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000080)=[r5], 0x1) 05:58:31 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x935b}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msync(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x6) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(0xffffffffffffff9c, 0x40106614, &(0x7f0000000040)) 05:58:31 executing program 3: socket$inet6_udp(0xa, 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r1 = socket$inet(0x2, 0x800, 0xffc) dup3(r1, r0, 0x0) r2 = syz_io_uring_setup(0x3157, &(0x7f0000000140), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x8006, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x40000000, 0x100000, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) syz_io_uring_submit(r5, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:58:31 executing program 4: socket$inet6_udp(0xa, 0x2, 0x0) socket$inet(0x2, 0xa, 0xff7ffffd) r0 = syz_io_uring_setup(0x3157, &(0x7f0000000140), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x95ffffffffffffff, 0x0, 0x0) 05:58:31 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x8}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x935b}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:58:31 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x935b}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xa2e) 05:58:31 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000200)={'veth0_to_bond\x00'}) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r1 = socket$inet(0x2, 0xa, 0xff7ffffd) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10000, 0x4) ioctl$TUNGETFILTER(r2, 0x801054db, &(0x7f00000001c0)=""/53) ioctl$SNAPSHOT_UNFREEZE(r1, 0x3302) r3 = syz_io_uring_setup(0x3157, &(0x7f0000000140), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) r6 = syz_open_dev$vcsu(&(0x7f0000000240), 0x1, 0x50840) ioctl$TUNSETQUEUE(r6, 0x400454d9, &(0x7f0000000280)={'netpci0\x00'}) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) r8 = signalfd4(r2, &(0x7f00000002c0)={[0x100000001]}, 0x8, 0x80800) ioctl$EXT4_IOC_GET_ES_CACHE(r8, 0xc020662a, &(0x7f0000000300)={0x0, 0x80000000, 0x1, 0x8000, 0xa, [{0x0, 0x62, 0x2, '\x00', 0x1000}, {0x0, 0x0, 0x2, '\x00', 0x2002}, {0x3ff, 0x4, 0x7, '\x00', 0x2201}, {0x7f880006, 0xa03, 0x7ff, '\x00', 0x4}, {0x1, 0xff, 0x2, '\x00', 0x884}, {0x800, 0x7, 0x861, '\x00', 0x108}, {0x2, 0x6f4, 0x16, '\x00', 0x3001}, {0x3, 0x0, 0x40, '\x00', 0x80}, {0x7, 0x7, 0x10001, '\x00', 0x2200}, {0x10000, 0x2, 0x0, '\x00', 0x900}]}) syz_io_uring_submit(r7, r5, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r3, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2896.678723] FAULT_INJECTION: forcing a failure. [ 2896.678723] name failslab, interval 1, probability 0, space 0, times 0 [ 2896.681350] CPU: 1 PID: 16331 Comm: syz-executor.0 Not tainted 5.10.202 #1 [ 2896.682872] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2896.684685] Call Trace: [ 2896.685270] dump_stack+0x107/0x167 [ 2896.686082] should_fail.cold+0x5/0xa [ 2896.686918] ? create_object.isra.0+0x3a/0xa20 [ 2896.687921] should_failslab+0x5/0x20 [ 2896.688767] kmem_cache_alloc+0x5b/0x310 [ 2896.689647] ? mark_held_locks+0x9e/0xe0 [ 2896.690531] create_object.isra.0+0x3a/0xa20 [ 2896.691484] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2896.692602] kmem_cache_alloc_bulk+0x168/0x320 [ 2896.693606] io_submit_sqes+0x6f76/0x85c0 [ 2896.694546] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 2896.695623] __do_sys_io_uring_enter+0x6b5/0x1920 [ 2896.696677] ? lock_downgrade+0x6d0/0x6d0 [ 2896.697574] ? find_held_lock+0x2c/0x110 [ 2896.698467] ? io_submit_sqes+0x85c0/0x85c0 [ 2896.699414] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2896.700483] ? wait_for_completion_io+0x270/0x270 [ 2896.701746] ? rcu_read_lock_any_held+0x75/0xa0 [ 2896.702751] ? vfs_write+0x354/0xa70 [ 2896.703560] ? fput_many+0x2f/0x1a0 [ 2896.704350] ? ksys_write+0x1a9/0x260 [ 2896.705187] ? __ia32_sys_read+0xb0/0xb0 [ 2896.706073] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2896.707202] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2896.708318] do_syscall_64+0x33/0x40 [ 2896.709145] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2896.710247] RIP: 0033:0x7fb03d693b19 05:58:31 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x53d5, 0x10}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x935b}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r5, 0xc0189372, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000f100000018000000", @ANYRES32=r4, @ANYBLOB="06000000000000002e2f66696c653000"]) r6 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x480, 0x20) r7 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000080), 0x18}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r8) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r7, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r8, 0xc0c89425, &(0x7f0000000840)={"e8ecc6af8a337a43ee4693fb9717f9c6", r9, 0x0, {0x1ff, 0x6}, {0x7, 0xffff}, 0x0, [0x6, 0x4, 0x100000000, 0xe1, 0xf8, 0x3, 0x3a, 0x101, 0xffff, 0x9, 0x0, 0x401, 0x7ff, 0x9, 0x101, 0x4]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r6, 0xc0c89425, &(0x7f0000000340)={"da308439b40a416dfbcfa3f3ec1bf4d6", 0x0, r9, {0xfffffffffffffff8, 0x3}, {0x7ff, 0xffffffff}, 0x1, [0xb833, 0x1, 0x662500a6, 0x5, 0x7, 0x8000, 0x2, 0x0, 0x4a, 0x5, 0x5, 0x1, 0x2f, 0x7fffffff, 0x3, 0x4]}) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000640)={0x134, 0x14, 0x10, 0x70bd2c, 0x25dfdbff, {}, [@generic="df1b87e398d35018f36a4c8870f2f95f62d4c29b8f8988244f6dc98ff340753b88dedafeea9100fb83e0a5a2d61ee60f4eac233187df628a58e4303956f1c97bb06f6984a41f798f54e876aa339da624b1069a819cb49253f45a1a41b4daa8c47f721d6eefd53f2b6e4a4161ba359e854d6f217660dbe2b302a30ecc6b830dee5004d711752f19c91341b6e063fec168ddeeae2d3503989d3acd77b687edb09b46d64f5efd6a8ff8d8ca865b3e854fa45b4e5ef53c0019880633be8a09047b94b2798333a8b4aec417bc5b34b5d8b9f52299f0974784d733c654c9a4f1865a34aaae957eab281218a90b04c6f99e51cd283b61de44842e1bda", @nested={0x22, 0x26, 0x0, 0x1, [@generic="69b003fa36288ec24ba7b57c3206de01b7bb79603cc2fb5896f6a9163747"]}]}, 0x134}}, 0x4000040) [ 2896.711054] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2896.715234] RSP: 002b:00007fb03ac09188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2896.716892] RAX: ffffffffffffffda RBX: 00007fb03d7a6f60 RCX: 00007fb03d693b19 [ 2896.718420] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2896.719949] RBP: 00007fb03ac091d0 R08: 0000000000000000 R09: 0000000000000000 [ 2896.721490] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2896.723019] R13: 00007ffe77755f3f R14: 00007fb03ac09300 R15: 0000000000022000 05:58:46 executing program 4: socket$inet6_udp(0xa, 0x2, 0x0) socket$inet(0x2, 0xa, 0xff7ffffd) r0 = syz_io_uring_setup(0x3157, &(0x7f0000000140), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0xffffffffffffff95, 0x0, 0x0) 05:58:46 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r1 = socket$inet(0x2, 0xa, 0xff7ffffd) ioctl$SNAPSHOT_UNFREEZE(r1, 0x3302) r2 = syz_io_uring_setup(0x3157, &(0x7f0000000140)={0x0, 0x0, 0x20}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff6000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) syz_io_uring_submit(r5, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:58:46 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000000040)={0x2, {0x2, 0x3, 0x7, 0x1, 0x3ff, 0x14}}) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x935b}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4024, &(0x7f0000000080)={0x0, 0xb955, 0x0, 0x3, 0x3c8, 0x0, r0}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000180), &(0x7f00000001c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000240)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x4, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r6 = getpid() perf_event_open(&(0x7f0000000340)={0x4, 0x80, 0x7, 0xa1, 0x89, 0x6, 0x0, 0x80000000, 0x601a, 0x7, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0xd0, 0x4, @perf_bp={&(0x7f0000000280)}, 0xa81, 0x8001, 0x8, 0x9, 0x6, 0xfffffe00, 0xff81, 0x0, 0x5, 0x0, 0x100}, r6, 0x8, 0xffffffffffffffff, 0x1) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:58:46 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 31) 05:58:46 executing program 6: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r1 = socket$inet(0x2, 0xa, 0xff7ffffd) ioctl$SNAPSHOT_UNFREEZE(r1, 0x3302) dup3(r1, r0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x935b}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r5, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:58:46 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x935b}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x2000) 05:58:46 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x935b}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 1) 05:58:46 executing program 3: r0 = syz_open_dev$vcsa(0x0, 0xe11, 0x4000) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000240)={'wg2\x00'}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000200)={0x0, @multicast2}, &(0x7f0000000240)=0xc) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x40, 0x0, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@ETHTOOL_A_FEATURES_WANTED={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_FEATURES_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x20008891}, 0x4020000) socket$inet6_udp(0xa, 0x2, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(r2, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r3 = socket$inet(0x2, 0xa, 0xff7ffffd) ioctl$SNAPSHOT_UNFREEZE(r3, 0x3302) dup3(r3, r2, 0x0) r4 = syz_io_uring_setup(0x3157, &(0x7f0000000140), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000040)={'hsr0\x00'}) perf_event_open(&(0x7f0000001d80)={0x5, 0xe1, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x5e, 0x48056, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2200, 0x80000000, 0x100000, 0x0, 0x0, 0x7, 0x40}, 0x0, 0xf, 0xffffffffffffffff, 0x0) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) syz_io_uring_submit(r7, r6, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r4, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2911.681554] FAULT_INJECTION: forcing a failure. [ 2911.681554] name failslab, interval 1, probability 0, space 0, times 0 [ 2911.682867] CPU: 1 PID: 16374 Comm: syz-executor.0 Not tainted 5.10.202 #1 [ 2911.683850] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2911.685032] Call Trace: [ 2911.685412] dump_stack+0x107/0x167 [ 2911.685937] should_fail.cold+0x5/0xa [ 2911.686480] ? create_object.isra.0+0x3a/0xa20 [ 2911.687133] should_failslab+0x5/0x20 [ 2911.687670] kmem_cache_alloc+0x5b/0x310 [ 2911.688246] ? mark_held_locks+0x9e/0xe0 [ 2911.688833] create_object.isra.0+0x3a/0xa20 [ 2911.689323] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2911.690050] kmem_cache_alloc_bulk+0x168/0x320 [ 2911.690563] io_submit_sqes+0x6f76/0x85c0 [ 2911.691176] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 2911.691877] __do_sys_io_uring_enter+0x6b5/0x1920 [ 2911.692408] ? lock_downgrade+0x6d0/0x6d0 [ 2911.693009] ? find_held_lock+0x2c/0x110 [ 2911.693583] ? io_submit_sqes+0x85c0/0x85c0 [ 2911.694067] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2911.694755] ? wait_for_completion_io+0x270/0x270 [ 2911.695435] ? rcu_read_lock_any_held+0x75/0xa0 [ 2911.695940] ? vfs_write+0x354/0xa70 [ 2911.696467] ? fput_many+0x2f/0x1a0 [ 2911.696880] ? ksys_write+0x1a9/0x260 [ 2911.697417] ? __ia32_sys_read+0xb0/0xb0 [ 2911.697865] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2911.698599] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2911.699167] do_syscall_64+0x33/0x40 [ 2911.699692] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2911.700209] FAULT_INJECTION: forcing a failure. [ 2911.700209] name failslab, interval 1, probability 0, space 0, times 0 [ 2911.700246] RIP: 0033:0x7fb03d693b19 [ 2911.700265] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2911.705165] RSP: 002b:00007fb03ac09188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2911.706235] RAX: ffffffffffffffda RBX: 00007fb03d7a6f60 RCX: 00007fb03d693b19 [ 2911.707239] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2911.708241] RBP: 00007fb03ac091d0 R08: 0000000000000000 R09: 0000000000000000 [ 2911.709204] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2911.710069] R13: 00007ffe77755f3f R14: 00007fb03ac09300 R15: 0000000000022000 [ 2911.710962] CPU: 0 PID: 16384 Comm: syz-executor.2 Not tainted 5.10.202 #1 [ 2911.712359] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2911.714212] Call Trace: [ 2911.714742] dump_stack+0x107/0x167 [ 2911.715477] should_fail.cold+0x5/0xa [ 2911.716247] should_failslab+0x5/0x20 [ 2911.717027] kmem_cache_alloc_bulk+0x4b/0x320 [ 2911.717934] io_submit_sqes+0x6f76/0x85c0 [ 2911.718780] ? percpu_ref_tryget_many+0x166/0x2d0 [ 2911.719778] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 2911.720788] __do_sys_io_uring_enter+0x6b5/0x1920 [ 2911.721762] ? lock_downgrade+0x6d0/0x6d0 [ 2911.722597] ? find_held_lock+0x2c/0x110 [ 2911.723423] ? io_submit_sqes+0x85c0/0x85c0 [ 2911.724307] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2911.725290] ? wait_for_completion_io+0x270/0x270 [ 2911.726262] ? rcu_read_lock_any_held+0x75/0xa0 [ 2911.727193] ? vfs_write+0x354/0xa70 [ 2911.727947] ? fput_many+0x2f/0x1a0 [ 2911.728693] ? ksys_write+0x1a9/0x260 [ 2911.729456] ? __ia32_sys_read+0xb0/0xb0 [ 2911.730273] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2911.731313] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2911.732348] do_syscall_64+0x33/0x40 [ 2911.733100] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2911.734124] RIP: 0033:0x7f68039deb19 [ 2911.734867] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2911.738516] RSP: 002b:00007f6800f54188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2911.740032] RAX: ffffffffffffffda RBX: 00007f6803af1f60 RCX: 00007f68039deb19 [ 2911.741480] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2911.742894] RBP: 00007f6800f541d0 R08: 0000000000000000 R09: 0000000000000000 05:58:46 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000000040)={0x2, {0x2, 0x3, 0x1f, 0x0, 0x400, 0x14}}) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x935b}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r5 = syz_open_dev$vcsa(0x0, 0xe11, 0x4000) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000240)={'wg2\x00'}) inotify_rm_watch(r5, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2911.744309] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2911.745831] R13: 00007ffddf06260f R14: 00007f6800f54300 R15: 0000000000022000 05:58:46 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r1 = socket$inet(0x2, 0xa, 0xff7ffffd) connect$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) r2 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000240)={0x0, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x4e22, @loopback}, {0x2, 0x4e22, @remote}, 0x24e, 0x0, 0x0, 0x0, 0xd7ca, 0x0, 0x3, 0x7, 0x9}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(r3, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r4 = socket$inet(0x2, 0xa, 0xff7ffffd) ioctl$SNAPSHOT_UNFREEZE(r4, 0x3302) dup3(r4, r3, 0x0) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f00000001c0)={0x0, {0x2, 0x4e20, @remote}, {0x2, 0x4e23, @multicast2}, {0x2, 0x4e21, @private=0xa010101}, 0x100, 0x0, 0x0, 0x0, 0xfff, &(0x7f0000000040)='macsec0\x00', 0xffffffffffff0001, 0x3, 0x9}) ioctl$SNAPSHOT_UNFREEZE(r1, 0x3302) r5 = syz_io_uring_setup(0x3157, &(0x7f0000000140), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) r8 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r5, 0x0) syz_io_uring_submit(r8, r7, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r5, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:58:46 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 32) 05:58:46 executing program 4: socket$inet6_udp(0xa, 0x2, 0x0) socket$inet(0x2, 0xa, 0xff7ffffd) r0 = syz_io_uring_setup(0x3157, &(0x7f0000000140), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0xffffffffffffffff, 0x0, 0x0) [ 2911.893201] FAULT_INJECTION: forcing a failure. [ 2911.893201] name failslab, interval 1, probability 0, space 0, times 0 [ 2911.894523] CPU: 1 PID: 16411 Comm: syz-executor.0 Not tainted 5.10.202 #1 [ 2911.895267] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2911.896201] Call Trace: [ 2911.896492] dump_stack+0x107/0x167 [ 2911.896877] should_fail.cold+0x5/0xa [ 2911.897299] ? memcg_alloc_page_obj_cgroups+0x73/0x100 [ 2911.897846] should_failslab+0x5/0x20 [ 2911.898266] __kmalloc_node+0x76/0x420 [ 2911.898675] memcg_alloc_page_obj_cgroups+0x73/0x100 [ 2911.899233] memcg_slab_post_alloc_hook+0x1f0/0x430 [ 2911.899749] kmem_cache_alloc_bulk+0x182/0x320 [ 2911.900255] io_submit_sqes+0x6f76/0x85c0 [ 2911.900715] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 2911.901257] __do_sys_io_uring_enter+0x6b5/0x1920 [ 2911.901760] ? lock_downgrade+0x6d0/0x6d0 [ 2911.902213] ? find_held_lock+0x2c/0x110 [ 2911.902637] ? io_submit_sqes+0x85c0/0x85c0 [ 2911.903123] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2911.903624] ? wait_for_completion_io+0x270/0x270 [ 2911.904172] ? rcu_read_lock_any_held+0x75/0xa0 [ 2911.904655] ? vfs_write+0x354/0xa70 [ 2911.905088] ? fput_many+0x2f/0x1a0 [ 2911.905471] ? ksys_write+0x1a9/0x260 [ 2911.905907] ? __ia32_sys_read+0xb0/0xb0 [ 2911.906358] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2911.906930] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2911.907510] do_syscall_64+0x33/0x40 [ 2911.907922] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2911.908487] RIP: 0033:0x7fb03d693b19 [ 2911.908902] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2911.910924] RSP: 002b:00007fb03ac09188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2911.911750] RAX: ffffffffffffffda RBX: 00007fb03d7a6f60 RCX: 00007fb03d693b19 [ 2911.912539] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2911.913335] RBP: 00007fb03ac091d0 R08: 0000000000000000 R09: 0000000000000000 [ 2911.914118] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2911.914903] R13: 00007ffe77755f3f R14: 00007fb03ac09300 R15: 0000000000022000 05:58:46 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) r3 = syz_open_dev$vcsa(0x0, 0xe11, 0x4000) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000240)={'wg2\x00'}) sendmsg$nl_generic(r3, &(0x7f0000001100)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000010c0)={&(0x7f0000000b40)={0x574, 0x3a, 0x10, 0x70bd29, 0x25dfdbfe, {0x1c}, [@nested={0x14a, 0x81, 0x0, 0x1, [@typed={0x2c, 0x40, 0x0, 0x0, @binary="843ee68fff60529dc796efd1ff58f36c544798ec9841d4538c7fbc068ecdf660d24b7e80cca58861"}, @generic="3b683b6ba604a165b24a85de64b6e87b5bacb653ba0b70949f34682fc93d92f269ec8f4e2fb39ea65e57d874b59fa983f0842d310b1294877ce5317a988af2b8c64021a6a52f2aab8a808ba153fb83d59bbc1b1e687b31f94c73683dab21e5cdd40c323cebfc16cd03ad45131622a75f854712bfa9ac5378d79df3d12bab13bc92e4d3aca4d85850e5d14e07f404b6d7c5be80a9c623cd5160f3328fd10044c0b7a7e1daa3a24e22670c4882505db9c4003378549ce7ad7918d815f3cfd171fd96a005c71ee4ecc4de0b991e87f680b43f6cc03262b76482b31621560eb48782ab4f54", @typed={0x4, 0x6e}, @typed={0x4, 0x23}, @generic="d4faafde233e22ffeb86fcbb8a2c8ba652bdefb390c96fc009d2731f473eca6e9658ecd792a72058446bf0aad47561"]}, @nested={0x179, 0x39, 0x0, 0x1, [@generic="cd27405b4b4d0bc3e50858dc6893171ad42e8f4352fb614d8a137d42260ec479331acf1ee9ee82f2ef2c3ba96efff111a29fe1633bec2a4db91a005050e330c1ad563d42fed0892142326f8a08d3286cf9f9b4aa0079aeda00def0c8821371ecac0badf9f8cfa2079da31c63e3368ca9d1b6cc1e1c915317a042e60983b199d0c07e7ea6cd1b9777b6b7b224542d55", @generic="7deb3658bbe4d05966eb83ed3fe7c519c98c445961373a8985de016c6dfcc89c38f38898583a941eb0640732f40e03e15df162d6723fa816ec8b16a304345e300459d0e71ba9bade7df0511e39495049cbd434b8cad520a256e6aad63663cd664fac7de8eb37e544e7ee343df002c7e2b6ec00e6b4cedd54a378069846b1862df98bdacb1ab14b47f96f59a0a1fb563d6afbe9579dc7ffd4985ca7dcf640d5dfd023d9f45e179223946b73ac91e47b8f2f3093ef8ad1ab10f37505ef8db3b232846e4d106411", @typed={0x8, 0x2a, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x3e}}, @typed={0x8, 0x74, 0x0, 0x0, @uid=0xffffffffffffffff}, @typed={0x8, 0x43, 0x0, 0x0, @str='&$)%'}, @typed={0x8, 0x27, 0x0, 0x0, @pid}]}, @nested={0x1f5, 0x42, 0x0, 0x1, [@generic="14b002b12eb46f7d13962be67aa1a06733b564ecb80f375ab28d4983ec58802bdf5be71502caff36cb77b4d4e088c5779c77489fee88bd09fd36eb1c4d8836c3acf45f5db80e1dbba9d7376e3646dd9fb530c1ee6e1bb3536f0f8454bc5cf540646e2563b80db601f43ab8ef58d44b32806c142acd86fc8f28ea9de86736c0de6bcfc624340b43762910b0870637ea67005c1d80074520f7294d20f88ce7a45b852de97f5adaf28dcfbc59d34a19f604cc7d3bad9a0fc37c6e56b07c", @generic="c3919fe1f7cb60578810bae366efc78fbb79590117bef9604124f43466603c1b9dd8dd5066074f944a8f0ed99ab142bedeb357796c3a0b4be09aa33ee8b1ebba6a2b81517350225a7d9242f46fc455b4929f4a3dac82e4808e9aa4ea4286bd88a9eae44e35ac378edd27cd25c13aa30aa5800db1ec66c948ea6c243399a439eeb1fb8ab730650751494d56972357d70d15c518625c25544710444130710254f741a7e824d0f24f79a4b54581c4fdd348815607735ac2e8110fd2db5662a936513c849fa55d7b1652d0c4e0b57208098ca688410529f29a5aeff311fce86d4a1ed9", @generic="2048e9fc0df71002eed6e18a1d621d739a0587d37d679bd60a1f9213655d6d1e3603d77abe66c5f3777c02063e6a6e9621ccab317b610519fbf8135cfb2e26ebe5924e2891d4137f0512712f", @typed={0x5, 0x1e, 0x0, 0x0, @str='\x00'}]}, @generic="7426a630ca47984c32564c86a91998fbba4926de054390c3d6610fa1a566972b60cd8898b44c0b5dd34582c9903e478cb5c8cc2ea13c35108e4e8ef67f4fc3849d63727a7ad43f6346e15c91822dcedde9a2c49bb67d49bb869322c5c8c9911095d25aa66f27ab13a2bb2af60bd4dddf2aaa2b32ffc86e1c7eff28dd3e1d7525c11edd8786af36ea6faeeeb4cd3e94e5381f4f07affd02fb3fcd399be89fbe"]}, 0x574}, 0x1, 0x0, 0x0, 0x2004c095}, 0x4080) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = fsmount(0xffffffffffffffff, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) r6 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x935b}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) recvmmsg$unix(r5, &(0x7f0000000a00)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/214, 0xd6}, {&(0x7f0000000440)=""/144, 0x90}, {&(0x7f0000000500)=""/198, 0xc6}, {&(0x7f0000000600)=""/202, 0xca}, {&(0x7f0000000180)=""/80, 0x50}], 0x5, &(0x7f0000000700)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}], 0x80}}, {{&(0x7f0000000780), 0x6e, &(0x7f0000000880)=[{&(0x7f0000000800)=""/115, 0x73}], 0x1, &(0x7f00000008c0)=[@cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x120}}], 0x2, 0x0, &(0x7f0000000a80)) r8 = creat(&(0x7f0000000ac0)='./file0\x00', 0x48) io_uring_register$IORING_REGISTER_PERSONALITY(r8, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x4, 0x80, 0x62, 0x3, 0x6, 0xc0, 0x0, 0x9, 0x20, 0xc, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8aef, 0x4, @perf_bp={&(0x7f0000000040), 0x9}, 0x104, 0x800, 0x4, 0x2, 0x3, 0x4000000, 0x701c, 0x0, 0x3ff, 0x0, 0x2}, r7, 0x1, r6, 0x3) pipe(&(0x7f0000003fc0)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x0, 0x0, r9, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r10}}, 0x800) syz_io_uring_submit(0x0, r2, &(0x7f00000011c0)=@IORING_OP_WRITE={0x17, 0x0, 0x2004, @fd, 0x20, &(0x7f0000001140)="2c5c145620d4b0a52ba7c13aaf0cdc19b771c3a99509cefe005d849a1146a3355a910836dda0583422d84689b99343cfe313636905bc47113aaae76f67bec03d48ddd25c786867d54bf5b9f30ce3f427a00197b089994f96", 0x58, 0xf, 0x0, {0x0, r10}}, 0x3) 05:58:46 executing program 4: socket$inet6_udp(0xa, 0x2, 0x0) socket$inet(0x2, 0xa, 0xff7ffffd) r0 = syz_io_uring_setup(0x3157, &(0x7f0000000140), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x95) 05:58:46 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) socket$inet(0x2, 0xa, 0xff7ffffd) ioctl$SNAPSHOT_UNFREEZE(0xffffffffffffffff, 0x3302) r1 = syz_io_uring_setup(0x3157, &(0x7f0000000140), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r5 = io_uring_setup(0x31e3, &(0x7f00000001c0)={0x0, 0x9a6b, 0x10, 0x0, 0x32c, 0x0, r1}) io_uring_enter(r5, 0x5dbb, 0x6ab6, 0x1, &(0x7f0000000240)={[0x6]}, 0x8) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x400}, 0x8001) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r1, 0x27ef, 0x1bf4, 0x1, &(0x7f0000000040)={[0x8]}, 0x8) 05:58:46 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(r1, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r2 = socket$inet(0x2, 0xc, 0xff7ffffd) ioctl$SNAPSHOT_UNFREEZE(r2, 0x3302) dup3(r2, r1, 0x0) r3 = syz_io_uring_setup(0x3157, &(0x7f0000000140), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) r6 = syz_open_dev$vcsa(0x0, 0xe11, 0x4000) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000200)={'ip_vti0\x00', &(0x7f00000001c0)=@ethtool_wolinfo={0x6, 0x6, 0x4, "77fb7fcbe3eb"}}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r6, 0x8933, &(0x7f0000000240)={'wg0\x00'}) bind$inet(r6, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x8006, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x40000000, 0x100000, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) syz_io_uring_submit(r7, r5, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r3, 0x58ad, 0x0, 0x0, 0x0, 0x0) 05:58:46 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 33) [ 2912.118556] FAULT_INJECTION: forcing a failure. [ 2912.118556] name failslab, interval 1, probability 0, space 0, times 0 [ 2912.119821] CPU: 1 PID: 16440 Comm: syz-executor.0 Not tainted 5.10.202 #1 [ 2912.120524] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2912.121391] Call Trace: [ 2912.121674] dump_stack+0x107/0x167 [ 2912.122056] should_fail.cold+0x5/0xa [ 2912.122457] ? create_object.isra.0+0x3a/0xa20 [ 2912.122932] should_failslab+0x5/0x20 [ 2912.123322] kmem_cache_alloc+0x5b/0x310 [ 2912.123749] create_object.isra.0+0x3a/0xa20 [ 2912.124196] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2912.124728] kmem_cache_alloc_bulk+0x168/0x320 [ 2912.125199] io_submit_sqes+0x6f76/0x85c0 [ 2912.125643] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 2912.126156] __do_sys_io_uring_enter+0x6b5/0x1920 [ 2912.126652] ? lock_downgrade+0x6d0/0x6d0 [ 2912.127072] ? find_held_lock+0x2c/0x110 [ 2912.127497] ? io_submit_sqes+0x85c0/0x85c0 [ 2912.127952] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2912.128479] ? wait_for_completion_io+0x270/0x270 [ 2912.129030] ? rcu_read_lock_any_held+0x75/0xa0 [ 2912.129539] ? vfs_write+0x354/0xa70 [ 2912.129947] ? fput_many+0x2f/0x1a0 [ 2912.130343] ? ksys_write+0x1a9/0x260 [ 2912.130759] ? __ia32_sys_read+0xb0/0xb0 [ 2912.131214] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2912.131808] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2912.132376] do_syscall_64+0x33/0x40 [ 2912.132774] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2912.133327] RIP: 0033:0x7fb03d693b19 [ 2912.133732] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2912.135716] RSP: 002b:00007fb03ac09188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2912.136547] RAX: ffffffffffffffda RBX: 00007fb03d7a6f60 RCX: 00007fb03d693b19 [ 2912.137358] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2912.138138] RBP: 00007fb03ac091d0 R08: 0000000000000000 R09: 0000000000000000 [ 2912.138916] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2912.139699] R13: 00007ffe77755f3f R14: 00007fb03ac09300 R15: 0000000000022000 05:58:47 executing program 4: socket$inet6_udp(0xa, 0x2, 0x0) socket$inet(0x2, 0xa, 0xff7ffffd) r0 = syz_io_uring_setup(0x3157, &(0x7f0000000140), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x2000) 05:58:47 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x935b}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r5 = pidfd_getfd(0xffffffffffffffff, r4, 0x0) setsockopt$inet_mreqn(r5, 0x0, 0x0, &(0x7f0000000040)={@broadcast, @empty}, 0xc) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:59:03 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0) syz_io_uring_setup(0x5031, &(0x7f0000000040)={0x0, 0x990f, 0x20, 0x0, 0x18e, 0x0, r0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fef000/0x11000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000180)) r5 = syz_open_dev$vcsa(0x0, 0xe11, 0x4000) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000240)={'wg2\x00'}) io_uring_register$IORING_UNREGISTER_BUFFERS(r5, 0x1, 0x0, 0x0) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsetxattr$security_selinux(r6, &(0x7f0000000100), &(0x7f0000000340)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x12, 0x0) r7 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000000, 0x10010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r7, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x1f, 0x0, 0x0, 0x0, {0x204}}, 0x9) pipe(&(0x7f0000003fc0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r8, 0xc0045878, 0x0) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r7, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r9}}, 0x800) syz_io_uring_submit(r4, r2, &(0x7f00000001c0)=@IORING_OP_MADVISE={0x19, 0x2, 0x0, 0x0, 0x0, &(0x7f0000ff6000/0x2000)=nil, 0x2000, 0x17, 0x0, {0x0, r9}}, 0x8) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x50, r0, 0x8000000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x935b}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x800}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:59:03 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000000040)={0x2, {0x2, 0x3, 0x7, 0x1, 0x3ff, 0x14}}) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x935b}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) ioctl$BTRFS_IOC_START_SYNC(r5, 0x80089418, &(0x7f0000000080)) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:59:03 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r1 = socket$inet(0x2, 0xa, 0xff7ffffd) ioctl$SNAPSHOT_UNFREEZE(r1, 0x3302) r2 = syz_io_uring_setup(0x7a11, &(0x7f0000000140), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) syz_io_uring_submit(r5, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:59:03 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x935b}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 2) 05:59:03 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 34) 05:59:03 executing program 4: socket$inet6_udp(0xa, 0x2, 0x0) socket$inet(0x2, 0xa, 0xff7ffffd) r0 = syz_io_uring_setup(0x3157, &(0x7f0000000140), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x4000) 05:59:03 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x935b}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x2504) 05:59:03 executing program 3: socket$inet6_udp(0xa, 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r1 = socket$inet(0x2, 0xa, 0xff7ffffd) ioctl$SNAPSHOT_UNFREEZE(r1, 0x3302) dup3(r1, r0, 0x0) r2 = syz_io_uring_setup(0x3153, &(0x7f0000000140)={0x0, 0x9834, 0x0, 0xfffffffe, 0xfffffffe}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x8006, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x40000000, 0x100000, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) r6 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, @fixed}, &(0x7f00000001c0)=0xe, 0x80000) r7 = openat$sr(0xffffffffffffff9c, &(0x7f0000000200), 0x113001, 0x0) syz_io_uring_submit(r5, r4, &(0x7f0000000280)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x1, &(0x7f0000000240)=[r0, r6, r7], 0x3}, 0x8) syz_io_uring_submit(r5, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2928.231098] FAULT_INJECTION: forcing a failure. [ 2928.231098] name failslab, interval 1, probability 0, space 0, times 0 [ 2928.233618] CPU: 0 PID: 16483 Comm: syz-executor.2 Not tainted 5.10.202 #1 [ 2928.235034] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2928.236719] Call Trace: [ 2928.237051] FAULT_INJECTION: forcing a failure. [ 2928.237051] name failslab, interval 1, probability 0, space 0, times 0 [ 2928.237289] dump_stack+0x107/0x167 [ 2928.240251] should_fail.cold+0x5/0xa [ 2928.241044] ? create_object.isra.0+0x3a/0xa20 [ 2928.241977] should_failslab+0x5/0x20 [ 2928.242755] kmem_cache_alloc+0x5b/0x310 [ 2928.243594] create_object.isra.0+0x3a/0xa20 [ 2928.244490] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2928.245539] kmem_cache_alloc_bulk+0x168/0x320 [ 2928.246485] io_submit_sqes+0x6f76/0x85c0 [ 2928.247337] ? percpu_ref_tryget_many+0x166/0x2d0 [ 2928.248348] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 2928.249378] __do_sys_io_uring_enter+0x6b5/0x1920 [ 2928.250364] ? lock_downgrade+0x6d0/0x6d0 [ 2928.251205] ? find_held_lock+0x2c/0x110 [ 2928.252039] ? io_submit_sqes+0x85c0/0x85c0 [ 2928.252932] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2928.253916] ? wait_for_completion_io+0x270/0x270 [ 2928.254893] ? rcu_read_lock_any_held+0x75/0xa0 [ 2928.255840] ? vfs_write+0x354/0xa70 [ 2928.256622] ? fput_many+0x2f/0x1a0 [ 2928.257385] ? ksys_write+0x1a9/0x260 [ 2928.258158] ? __ia32_sys_read+0xb0/0xb0 [ 2928.258999] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2928.260072] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2928.261137] do_syscall_64+0x33/0x40 [ 2928.261896] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2928.262937] RIP: 0033:0x7f68039deb19 [ 2928.263700] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2928.267475] RSP: 002b:00007f6800f54188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2928.269036] RAX: ffffffffffffffda RBX: 00007f6803af1f60 RCX: 00007f68039deb19 [ 2928.270491] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2928.271949] RBP: 00007f6800f541d0 R08: 0000000000000000 R09: 0000000000000000 [ 2928.273408] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2928.274861] R13: 00007ffddf06260f R14: 00007f6800f54300 R15: 0000000000022000 [ 2928.276349] CPU: 1 PID: 16482 Comm: syz-executor.0 Not tainted 5.10.202 #1 [ 2928.277791] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2928.279483] Call Trace: [ 2928.280021] dump_stack+0x107/0x167 [ 2928.280777] should_fail.cold+0x5/0xa [ 2928.281578] ? create_object.isra.0+0x3a/0xa20 [ 2928.282515] should_failslab+0x5/0x20 [ 2928.283286] kmem_cache_alloc+0x5b/0x310 [ 2928.284114] ? mark_held_locks+0x9e/0xe0 [ 2928.284974] create_object.isra.0+0x3a/0xa20 [ 2928.285875] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2928.286916] kmem_cache_alloc_bulk+0x168/0x320 [ 2928.287850] io_submit_sqes+0x6f76/0x85c0 [ 2928.288743] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 2928.289801] __do_sys_io_uring_enter+0x6b5/0x1920 [ 2928.290789] ? lock_downgrade+0x6d0/0x6d0 [ 2928.291659] ? find_held_lock+0x2c/0x110 [ 2928.292489] ? io_submit_sqes+0x85c0/0x85c0 [ 2928.293395] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2928.294381] ? wait_for_completion_io+0x270/0x270 [ 2928.295377] ? rcu_read_lock_any_held+0x75/0xa0 [ 2928.296321] ? vfs_write+0x354/0xa70 [ 2928.297103] ? fput_many+0x2f/0x1a0 [ 2928.297848] ? ksys_write+0x1a9/0x260 [ 2928.298631] ? __ia32_sys_read+0xb0/0xb0 [ 2928.299461] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2928.300534] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2928.301602] do_syscall_64+0x33/0x40 [ 2928.302372] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2928.303428] RIP: 0033:0x7fb03d693b19 [ 2928.304189] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2928.307945] RSP: 002b:00007fb03ac09188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2928.309502] RAX: ffffffffffffffda RBX: 00007fb03d7a6f60 RCX: 00007fb03d693b19 [ 2928.310957] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2928.312407] RBP: 00007fb03ac091d0 R08: 0000000000000000 R09: 0000000000000000 [ 2928.314183] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2928.315889] R13: 00007ffe77755f3f R14: 00007fb03ac09300 R15: 0000000000022000 05:59:03 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) pipe(&(0x7f0000001600)) recvfrom(0xffffffffffffffff, &(0x7f0000001640)=""/62, 0x3e, 0x40000061, &(0x7f0000001680)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x1, 0x1, 0x2, 0x4, {0xa, 0x4e23, 0xfffffff8, @dev={0xfe, 0x80, '\x00', 0x35}, 0x8}}}, 0x80) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x935a}, 0x820, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x118f, &(0x7f0000000040)={0x0, 0x63e7, 0x12, 0x3, 0x37d}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r4, r2, &(0x7f0000000280)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x2, 0xfffffffffffff001, &(0x7f0000001580)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/29, 0x1d}, {&(0x7f0000001340)=""/164, 0xa4}, {&(0x7f0000000240)=""/27, 0x1b}, {&(0x7f0000001400)=""/115, 0x73}, {&(0x7f0000001480)=""/207, 0xcf}, {&(0x7f0000001e00)=""/4096, 0x1000}], 0x7, 0x7}, 0x9) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsetxattr$security_selinux(r5, &(0x7f0000000100), &(0x7f0000000340)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x12, 0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000000, 0x10010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r6, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x1f, 0x0, 0x0, 0x0, {0x204}}, 0x9) pipe(&(0x7f0000003fc0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r7, 0xc0045878, 0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r8}}, 0x800) syz_io_uring_submit(r3, r2, &(0x7f00000018c0)=@IORING_OP_WRITE={0x17, 0x3, 0x2007, @fd_index, 0x1, &(0x7f0000001800)="f73037a2fea9fcbd6a12349c787be08262eebdb045c99f72b35652c8b6f1255c88904e3af2457d7b9f48d67256bf6e3e050bcfdb81ef330fb66f67d3d1f5208cdb63bc6801b76a7231043c6dfb6b4fc7c87b2006d38650eb0141c5069841d7a89071cf297c8b4c05839c6f697fb04d8f04113f8c1455fae69d57fc9d1e24db4d800e9c123e4c944a3c614a1af0f94f89713e58d21867b104131adcd895f7f980045bb573c1b99edeae46bf55ea1800db67fcb9d3f83e4035f7935f05676eeb7b", 0xc0, 0x8, 0x0, {0x0, r8}}, 0x8a0) pread64(0xffffffffffffffff, &(0x7f0000001700)=""/241, 0xf1, 0xfff) 05:59:03 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KIOCSOUND(r4, 0x4b2f, 0x1) fcntl$dupfd(r4, 0x406, r3) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000000040)={0x2, {0x2, 0x3, 0x7, 0x1, 0x3ff, 0x14}}) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x935b}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:59:03 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x935b}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x2604) 05:59:03 executing program 4: socket$inet6_udp(0xa, 0x2, 0x0) socket$inet(0x2, 0xa, 0xff7ffffd) r0 = syz_io_uring_setup(0x3157, &(0x7f0000000140), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x95ff) 05:59:03 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(r1, 0x400454ca, &(0x7f0000000000)={'veth1_to_bond\x00'}) r2 = socket$inet(0x2, 0xa, 0xff7ffffd) ioctl$SNAPSHOT_UNFREEZE(r2, 0x3302) dup3(r0, r1, 0x0) ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f0000000200)) r3 = socket$inet(0x2, 0xa, 0xff7ffffd) ioctl$SNAPSHOT_UNFREEZE(r3, 0x3302) r4 = syz_io_uring_setup(0x3157, &(0x7f0000000140), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) syz_io_uring_setup(0x36fc, &(0x7f0000000240)={0x0, 0x563f, 0x8, 0x0, 0x228}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f00000002c0), &(0x7f0000000300)) syz_io_uring_submit(r7, r6, &(0x7f0000000100)=@IORING_OP_NOP={0x0, 0x3}, 0x8001) getsockopt$inet_int(r3, 0x0, 0xd, &(0x7f0000000040), &(0x7f00000001c0)=0x4) r8 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KIOCSOUND(r8, 0x4b2f, 0x1) dup2(r8, 0xffffffffffffffff) io_uring_enter(r4, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:59:03 executing program 3: socket$inet6_udp(0xa, 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r1 = socket$inet(0x2, 0xa, 0xff7ffffd) ioctl$SNAPSHOT_UNFREEZE(r1, 0x3302) dup3(r1, r0, 0x0) r2 = syz_io_uring_setup(0x3157, &(0x7f0000000140), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x8006, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x40000000, 0x100000, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) syz_io_uring_submit(r5, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r6 = memfd_create(&(0x7f0000000040)='.].,\'@^{\xb9\x00', 0x4) fsetxattr$trusted_overlay_nlink(r6, &(0x7f00000001c0), &(0x7f0000000200)={'U-', 0x1f}, 0x16, 0x3) io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:59:03 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x935b}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 3) 05:59:03 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 35) [ 2928.868336] FAULT_INJECTION: forcing a failure. [ 2928.868336] name failslab, interval 1, probability 0, space 0, times 0 [ 2928.870977] CPU: 0 PID: 16539 Comm: syz-executor.2 Not tainted 5.10.202 #1 [ 2928.872370] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2928.874085] Call Trace: [ 2928.874620] dump_stack+0x107/0x167 [ 2928.875387] should_fail.cold+0x5/0xa [ 2928.876166] ? create_object.isra.0+0x3a/0xa20 [ 2928.877134] should_failslab+0x5/0x20 [ 2928.877910] kmem_cache_alloc+0x5b/0x310 [ 2928.878744] ? mark_held_locks+0x9e/0xe0 [ 2928.879568] create_object.isra.0+0x3a/0xa20 [ 2928.880479] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2928.881550] kmem_cache_alloc_bulk+0x168/0x320 [ 2928.882496] io_submit_sqes+0x6f76/0x85c0 [ 2928.883369] ? percpu_ref_tryget_many+0x166/0x2d0 [ 2928.884392] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 2928.885404] __do_sys_io_uring_enter+0x6b5/0x1920 [ 2928.886399] ? lock_downgrade+0x6d0/0x6d0 [ 2928.887231] ? find_held_lock+0x2c/0x110 [ 2928.888059] ? io_submit_sqes+0x85c0/0x85c0 [ 2928.888965] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2928.889938] ? wait_for_completion_io+0x270/0x270 [ 2928.890935] ? rcu_read_lock_any_held+0x75/0xa0 [ 2928.891873] ? vfs_write+0x354/0xa70 [ 2928.892660] ? fput_many+0x2f/0x1a0 [ 2928.892682] ? ksys_write+0x1a9/0x260 [ 2928.892702] ? __ia32_sys_read+0xb0/0xb0 [ 2928.892727] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2928.892745] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2928.892773] do_syscall_64+0x33/0x40 [ 2928.892795] entry_SYSCALL_64_after_hwframe+0x62/0xc7 05:59:03 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r1 = socket$inet(0x2, 0xa, 0xff7ffffd) ioctl$SNAPSHOT_UNFREEZE(r1, 0x3302) r2 = syz_io_uring_setup(0x3157, &(0x7f0000000140), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) syz_io_uring_submit(r5, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000500)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$SNAPSHOT_UNFREEZE(r6, 0x3302) [ 2928.892808] RIP: 0033:0x7f68039deb19 [ 2928.892829] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 05:59:03 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x935b}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x2704) [ 2928.892849] RSP: 002b:00007f6800f54188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2928.892870] RAX: ffffffffffffffda RBX: 00007f6803af1f60 RCX: 00007f68039deb19 [ 2928.892882] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2928.892893] RBP: 00007f6800f541d0 R08: 0000000000000000 R09: 0000000000000000 [ 2928.892905] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2928.892917] R13: 00007ffddf06260f R14: 00007f6800f54300 R15: 0000000000022000 [ 2928.959415] FAULT_INJECTION: forcing a failure. [ 2928.959415] name failslab, interval 1, probability 0, space 0, times 0 [ 2928.959438] CPU: 1 PID: 16548 Comm: syz-executor.0 Not tainted 5.10.202 #1 [ 2928.959449] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2928.959456] Call Trace: [ 2928.959480] dump_stack+0x107/0x167 [ 2928.959506] should_fail.cold+0x5/0xa [ 2928.959533] ? create_object.isra.0+0x3a/0xa20 [ 2928.959556] should_failslab+0x5/0x20 [ 2928.959575] kmem_cache_alloc+0x5b/0x310 [ 2928.959595] ? mark_held_locks+0x9e/0xe0 [ 2928.959618] create_object.isra.0+0x3a/0xa20 [ 2928.959639] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2928.959665] kmem_cache_alloc_bulk+0x168/0x320 [ 2928.959693] io_submit_sqes+0x6f76/0x85c0 [ 2928.959748] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 2928.959767] __do_sys_io_uring_enter+0x6b5/0x1920 [ 2928.959791] ? lock_downgrade+0x6d0/0x6d0 [ 2928.959808] ? find_held_lock+0x2c/0x110 [ 2928.959833] ? io_submit_sqes+0x85c0/0x85c0 [ 2928.959864] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2928.959889] ? wait_for_completion_io+0x270/0x270 [ 2928.959913] ? rcu_read_lock_any_held+0x75/0xa0 [ 2928.959930] ? vfs_write+0x354/0xa70 [ 2928.959953] ? fput_many+0x2f/0x1a0 [ 2928.959974] ? ksys_write+0x1a9/0x260 [ 2928.959994] ? __ia32_sys_read+0xb0/0xb0 [ 2928.960018] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2928.960037] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2928.960064] do_syscall_64+0x33/0x40 [ 2928.960086] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2928.960099] RIP: 0033:0x7fb03d693b19 [ 2928.960120] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2928.960131] RSP: 002b:00007fb03ac09188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2928.960153] RAX: ffffffffffffffda RBX: 00007fb03d7a6f60 RCX: 00007fb03d693b19 [ 2928.960164] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2928.960175] RBP: 00007fb03ac091d0 R08: 0000000000000000 R09: 0000000000000000 [ 2928.960186] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2928.960198] R13: 00007ffe77755f3f R14: 00007fb03ac09300 R15: 0000000000022000 [ 2942.955072] FAULT_INJECTION: forcing a failure. [ 2942.955072] name failslab, interval 1, probability 0, space 0, times 0 [ 2942.956378] CPU: 1 PID: 16588 Comm: syz-executor.0 Not tainted 5.10.202 #1 [ 2942.957171] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2942.958063] Call Trace: [ 2942.958347] dump_stack+0x107/0x167 [ 2942.958738] should_fail.cold+0x5/0xa [ 2942.959163] ? create_object.isra.0+0x3a/0xa20 [ 2942.959648] should_failslab+0x5/0x20 [ 2942.960056] kmem_cache_alloc+0x5b/0x310 [ 2942.960491] ? mark_held_locks+0x9e/0xe0 [ 2942.960931] create_object.isra.0+0x3a/0xa20 [ 2942.961418] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2942.961963] kmem_cache_alloc_bulk+0x168/0x320 [ 2942.962455] io_submit_sqes+0x6f76/0x85c0 [ 2942.962920] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 2942.963452] __do_sys_io_uring_enter+0x6b5/0x1920 [ 2942.963974] ? lock_downgrade+0x6d0/0x6d0 [ 2942.964410] ? find_held_lock+0x2c/0x110 [ 2942.964848] ? io_submit_sqes+0x85c0/0x85c0 [ 2942.965337] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2942.965872] ? wait_for_completion_io+0x270/0x270 [ 2942.966409] ? rcu_read_lock_any_held+0x75/0xa0 [ 2942.966925] ? vfs_write+0x354/0xa70 [ 2942.967342] ? fput_many+0x2f/0x1a0 [ 2942.967748] ? ksys_write+0x1a9/0x260 [ 2942.968176] ? __ia32_sys_read+0xb0/0xb0 [ 2942.968626] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2942.969224] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2942.969822] do_syscall_64+0x33/0x40 [ 2942.970248] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2942.970834] RIP: 0033:0x7fb03d693b19 [ 2942.971249] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2942.973302] RSP: 002b:00007fb03ac09188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2942.974144] RAX: ffffffffffffffda RBX: 00007fb03d7a6f60 RCX: 00007fb03d693b19 [ 2942.974928] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2942.975709] RBP: 00007fb03ac091d0 R08: 0000000000000000 R09: 0000000000000000 [ 2942.976499] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2942.977321] R13: 00007ffe77755f3f R14: 00007fb03ac09300 R15: 0000000000022000 05:59:17 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x935b}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x2804) 05:59:17 executing program 4: socket$inet6_udp(0xa, 0x2, 0x0) socket$inet(0x2, 0xa, 0xff7ffffd) r0 = syz_io_uring_setup(0x3157, &(0x7f0000000140), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xff95) 05:59:17 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000000040)={0x2, {0x2, 0x3, 0x7, 0x1, 0x3ff, 0x14}}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x3938700}, 0x1, 0x0, 0x1}, 0x4) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000240)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x77359400}}, 0x5) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x935b}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r6, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) openat$full(0xffffffffffffff9c, &(0x7f0000000180), 0x151000, 0x0) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:59:17 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x935b}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 4) 05:59:17 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_setup(0x9dc, &(0x7f0000000040)={0x0, 0x21a9, 0x10, 0x3, 0xd7, 0x0, r0}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000180)=0x0) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000440), 0x6000, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x779d9cbc6a2260cd, 0x4040051, r4, 0x0) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0xab, 0x1, 0x3, 0x4, 0x0, 0x8, 0x1040, 0xa, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x80000000, 0x0, @perf_bp={&(0x7f0000000280), 0x5}, 0x198, 0x9, 0x8, 0x0, 0x6, 0x3, 0x4, 0x0, 0x1000, 0x0, 0x40}, 0x0, 0x6, 0xffffffffffffffff, 0x0) fsetxattr$security_selinux(r4, &(0x7f0000000100), &(0x7f0000000340)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x12, 0x0) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000000, 0x10010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r5, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x3, 0x0, @fd_index=0x1f, 0x0, 0x0, 0x0, {0x204}}, 0x9) pipe(&(0x7f0000003fc0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r6, 0xc0045878, 0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r5, &(0x7f0000000040)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000400)=0x80, &(0x7f0000000480)=@rc, 0x0, 0x0, 0x1}, 0x800) syz_io_uring_submit(r1, r3, &(0x7f00000001c0)=@IORING_OP_FADVISE={0x18, 0x1, 0x0, @fd=r0, 0x3, 0x0, 0x10001, 0x5, 0x0, {0x0, r7}}, 0x1f) r8 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000c, 0x20010, r0, 0x0) r9 = syz_open_dev$vcsa(0x0, 0xe11, 0x4000) ioctl$ifreq_SIOCGIFINDEX_wireguard(r9, 0x8933, &(0x7f0000000240)={'wg2\x00'}) io_uring_enter(r9, 0x4b13, 0x8dbc, 0x0, &(0x7f0000000240), 0x8) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10000, 0x935b}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r8, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) 05:59:17 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 36) 05:59:17 executing program 3: socket$inet6_udp(0xa, 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) socket$inet(0x2, 0xa, 0xff7ffffd) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x58, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x2800018, &(0x7f0000000240)=ANY=[]) r1 = socket$unix(0x1, 0x0, 0x0) bind$unix(r1, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x40086602, 0xfffffffffffffffd) chdir(&(0x7f0000000040)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/4\x00') r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) openat(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', 0x200000, 0x8) lseek(r4, 0x0, 0x3) getsockopt$netlink(r3, 0x10e, 0xb, 0x0, &(0x7f0000001140)) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r3) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) 05:59:17 executing program 5: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/power/pm_trace_dev_match', 0x4e2dc1, 0xc8) ioctl$VT_OPENQRY(r0, 0x5600, &(0x7f0000000200)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(r1, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r2 = socket$inet(0x2, 0xa, 0xff7ffffd) ioctl$SNAPSHOT_UNFREEZE(r2, 0x3302) r3 = syz_io_uring_setup(0x3157, &(0x7f0000000140)={0x0, 0x0, 0x9}, &(0x7f0000fef000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000001740), 0x20000, 0x0) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff6000/0x3000)=nil, 0x3000, 0x800012, 0x100010, r6, 0x0) pipe2$9p(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}, 0x100800) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r8, 0xf507, 0x0) r9 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KIOCSOUND(r9, 0x4b2f, 0x1) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000080)=[r9, r2], 0x2) syz_io_uring_submit(r7, r5, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r10 = syz_open_dev$vcsa(0x0, 0xe11, 0x4000) ioctl$ifreq_SIOCGIFINDEX_wireguard(r10, 0x8933, &(0x7f0000000240)={'wg2\x00'}) syz_io_uring_submit(r7, r5, &(0x7f0000000640)=@IORING_OP_RECVMSG={0xa, 0x7, 0x0, r10, 0x0, &(0x7f0000000600)={&(0x7f00000002c0)=@phonet, 0x80, &(0x7f0000000580)=[{&(0x7f0000000340)=""/100, 0x64}, {&(0x7f00000003c0)=""/184, 0xb8}, {&(0x7f00000001c0)=""/51, 0x33}, {&(0x7f0000000480)=""/64, 0x40}, {&(0x7f00000004c0)=""/54, 0x36}, {&(0x7f0000000740)=""/4096, 0x1000}, {&(0x7f0000000500)=""/73, 0x49}], 0x7}, 0x0, 0x100, 0x1}, 0x7ff) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x1) [ 2943.018285] FAULT_INJECTION: forcing a failure. [ 2943.018285] name failslab, interval 1, probability 0, space 0, times 0 [ 2943.020991] CPU: 0 PID: 16592 Comm: syz-executor.2 Not tainted 5.10.202 #1 [ 2943.022418] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2943.024120] Call Trace: [ 2943.024663] dump_stack+0x107/0x167 [ 2943.025427] should_fail.cold+0x5/0xa [ 2943.026209] ? create_object.isra.0+0x3a/0xa20 [ 2943.027159] should_failslab+0x5/0x20 [ 2943.027939] kmem_cache_alloc+0x5b/0x310 [ 2943.028771] ? mark_held_locks+0x9e/0xe0 [ 2943.029633] create_object.isra.0+0x3a/0xa20 [ 2943.030537] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2943.031594] kmem_cache_alloc_bulk+0x168/0x320 [ 2943.032545] io_submit_sqes+0x6f76/0x85c0 [ 2943.033402] ? percpu_ref_tryget_many+0x166/0x2d0 [ 2943.034421] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 2943.035448] __do_sys_io_uring_enter+0x6b5/0x1920 [ 2943.036452] ? lock_downgrade+0x6d0/0x6d0 [ 2943.037317] ? find_held_lock+0x2c/0x110 [ 2943.038169] ? io_submit_sqes+0x85c0/0x85c0 [ 2943.039060] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2943.040044] ? wait_for_completion_io+0x270/0x270 [ 2943.041039] ? rcu_read_lock_any_held+0x75/0xa0 [ 2943.041991] ? vfs_write+0x354/0xa70 [ 2943.042759] ? fput_many+0x2f/0x1a0 [ 2943.043505] ? ksys_write+0x1a9/0x260 [ 2943.044284] ? __ia32_sys_read+0xb0/0xb0 [ 2943.045131] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2943.046215] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2943.047274] do_syscall_64+0x33/0x40 [ 2943.048045] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2943.049096] RIP: 0033:0x7f68039deb19 [ 2943.049860] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2943.053597] RSP: 002b:00007f6800f54188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2943.055153] RAX: ffffffffffffffda RBX: 00007f6803af1f60 RCX: 00007f68039deb19 [ 2943.056614] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2943.058091] RBP: 00007f6800f541d0 R08: 0000000000000000 R09: 0000000000000000 [ 2943.059549] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2943.061014] R13: 00007ffddf06260f R14: 00007f6800f54300 R15: 0000000000022000 05:59:17 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 37) 05:59:18 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x935b}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x2e06) 05:59:18 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(r1, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r2 = socket$inet(0x2, 0xa, 0xff7ffffd) ioctl$SNAPSHOT_UNFREEZE(r2, 0x3302) dup3(r2, r1, 0x0) r3 = syz_io_uring_setup(0x3157, &(0x7f0000000140)={0x0, 0x539f}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f00000001c0)=0x3) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x8006, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x40000000, 0x100000, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNGETIFF(r1, 0x800454d2, &(0x7f0000000040)={'syzkaller1\x00'}) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) syz_io_uring_submit(r6, r5, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r3, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:59:18 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r1 = socket$inet(0x2, 0xa, 0xff7ffffd) ioctl$SNAPSHOT_UNFREEZE(r1, 0x3302) r2 = syz_io_uring_setup(0x3157, &(0x7f0000000140), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) syz_io_uring_submit(r5, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000040)={'veth0_to_bridge\x00'}) [ 2943.123958] FAULT_INJECTION: forcing a failure. [ 2943.123958] name failslab, interval 1, probability 0, space 0, times 0 [ 2943.126329] CPU: 0 PID: 16610 Comm: syz-executor.0 Not tainted 5.10.202 #1 [ 2943.127756] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2943.129482] Call Trace: [ 2943.130034] dump_stack+0x107/0x167 [ 2943.130797] should_fail.cold+0x5/0xa [ 2943.131579] ? create_object.isra.0+0x3a/0xa20 [ 2943.132521] should_failslab+0x5/0x20 [ 2943.133321] kmem_cache_alloc+0x5b/0x310 [ 2943.134158] ? mark_held_locks+0x9e/0xe0 [ 2943.134995] create_object.isra.0+0x3a/0xa20 [ 2943.135897] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2943.136951] kmem_cache_alloc_bulk+0x168/0x320 [ 2943.137909] io_submit_sqes+0x6f76/0x85c0 [ 2943.138813] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 2943.139834] __do_sys_io_uring_enter+0x6b5/0x1920 [ 2943.140837] ? lock_downgrade+0x6d0/0x6d0 [ 2943.141701] ? find_held_lock+0x2c/0x110 [ 2943.142546] ? io_submit_sqes+0x85c0/0x85c0 [ 2943.143439] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2943.144452] ? wait_for_completion_io+0x270/0x270 [ 2943.145452] ? rcu_read_lock_any_held+0x75/0xa0 [ 2943.146394] ? vfs_write+0x354/0xa70 [ 2943.147164] ? fput_many+0x2f/0x1a0 [ 2943.147907] ? ksys_write+0x1a9/0x260 [ 2943.148692] ? __ia32_sys_read+0xb0/0xb0 [ 2943.149538] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2943.150611] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2943.151666] do_syscall_64+0x33/0x40 [ 2943.152444] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2943.153527] RIP: 0033:0x7fb03d693b19 [ 2943.154304] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2943.158075] RSP: 002b:00007fb03ac09188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2943.159649] RAX: ffffffffffffffda RBX: 00007fb03d7a6f60 RCX: 00007fb03d693b19 [ 2943.161134] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2943.162599] RBP: 00007fb03ac091d0 R08: 0000000000000000 R09: 0000000000000000 [ 2943.164062] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2943.165530] R13: 00007ffe77755f3f R14: 00007fb03ac09300 R15: 0000000000022000 05:59:18 executing program 6: syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) r0 = socket$inet(0x2, 0xa, 0xff7ffffd) ioctl$SNAPSHOT_UNFREEZE(r0, 0x3302) dup3(r0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000440)=@IORING_OP_TEE={0x21, 0x5, 0x0, @fd, 0x0, 0x0, 0x7, 0x4, 0x0, {0x0, 0x0, r0}}, 0x8) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x935b}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x3, 0x0, 0x93, 0x800, &(0x7f0000000340)="636471ccf667fb218d154a2545d9cffbf5c88c371382fa1b533b55ce128340c2bf7027792cdc3f174b5d7cebe644142d773bbb5af59fee376b73d29fa9a869f3b99a6468a1de29b1c09329b862a74caae279e619b8353c8b51735c7908f0cdaee0668d647314364f45fd85fcab0e6b42361ce72cce66ad4f3046e5af0f55f320d266bca27755f0ab23a6200de4217cfcdc15e179773dc2020426e37ef82d2fdd1caf7ec39b", 0x83, 0x0, 0x1, {0x2}}, 0x8001) syz_io_uring_setup(0x10bd, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x387}, &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x2004, @fd_index=0x3, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x1f69, &(0x7f0000000040)={0x0, 0x82d1, 0x8, 0x3, 0x34c}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000180)=0x0) open_tree(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x800) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(r5, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r6 = socket$inet(0x2, 0xa, 0xff7ffffd) ioctl$SNAPSHOT_UNFREEZE(r6, 0x3302) dup3(r6, r5, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000280)=@IORING_OP_READ_FIXED={0x4, 0x5, 0x4000, @fd=r6, 0x0, 0xd4b0, 0xf8000004, 0x15, 0x1, {0x1}}, 0xfffc) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:59:18 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x935b}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 5) 05:59:18 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KIOCSOUND(r4, 0x4b2f, 0x1) dup2(0xffffffffffffffff, r4) r5 = syz_open_dev$vcsa(0x0, 0xe11, 0x4000) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000240)={'wg2\x00'}) sendmsg$IPCTNL_MSG_EXP_NEW(r5, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x17c}, 0x1, 0x0, 0x0, 0x8041}, 0x23a4ef3f621b65e1) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000000040)={0x2, {0x2, 0x3, 0x7, 0x1, 0x3ff, 0x14}}) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x1) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x935b}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_ASYNC_CANCEL={0xe, 0x2, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1, {0x0, r7}}, 0x0) syz_io_uring_submit(r6, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) r8 = openat$bsg(0xffffffffffffff9c, &(0x7f00000001c0), 0x301000, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r8, 0x9, 0x0, 0x0) [ 2943.302372] FAULT_INJECTION: forcing a failure. [ 2943.302372] name failslab, interval 1, probability 0, space 0, times 0 [ 2943.303743] CPU: 1 PID: 16632 Comm: syz-executor.2 Not tainted 5.10.202 #1 [ 2943.304503] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2943.305413] Call Trace: [ 2943.305707] dump_stack+0x107/0x167 [ 2943.306105] should_fail.cold+0x5/0xa [ 2943.306520] ? create_object.isra.0+0x3a/0xa20 [ 2943.307022] should_failslab+0x5/0x20 [ 2943.307426] kmem_cache_alloc+0x5b/0x310 [ 2943.307866] ? mark_held_locks+0x9e/0xe0 [ 2943.308311] create_object.isra.0+0x3a/0xa20 [ 2943.308798] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2943.309350] kmem_cache_alloc_bulk+0x168/0x320 [ 2943.309847] io_submit_sqes+0x6f76/0x85c0 [ 2943.310303] ? percpu_ref_tryget_many+0x166/0x2d0 [ 2943.310845] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 2943.311374] __do_sys_io_uring_enter+0x6b5/0x1920 [ 2943.311891] ? lock_downgrade+0x6d0/0x6d0 [ 2943.312336] ? find_held_lock+0x2c/0x110 [ 2943.312781] ? io_submit_sqes+0x85c0/0x85c0 [ 2943.313295] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2943.313824] ? wait_for_completion_io+0x270/0x270 [ 2943.314362] ? rcu_read_lock_any_held+0x75/0xa0 [ 2943.314890] ? vfs_write+0x354/0xa70 [ 2943.315306] ? fput_many+0x2f/0x1a0 [ 2943.315713] ? ksys_write+0x1a9/0x260 [ 2943.316133] ? __ia32_sys_read+0xb0/0xb0 [ 2943.316584] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2943.317177] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2943.317757] do_syscall_64+0x33/0x40 [ 2943.318173] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2943.318750] RIP: 0033:0x7f68039deb19 [ 2943.319167] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2943.321205] RSP: 002b:00007f6800f54188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2943.322055] RAX: ffffffffffffffda RBX: 00007f6803af1f60 RCX: 00007f68039deb19 [ 2943.322844] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2943.323648] RBP: 00007f6800f541d0 R08: 0000000000000000 R09: 0000000000000000 [ 2943.324452] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2943.325271] R13: 00007ffddf06260f R14: 00007f6800f54300 R15: 0000000000022000 05:59:18 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(r1, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r2 = socket$inet(0x2, 0xa, 0xff7ffffd) ioctl$SNAPSHOT_UNFREEZE(r2, 0x3302) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) syz_io_uring_submit(r3, r6, &(0x7f0000000200)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x77359400}, 0x1, 0x1}, 0xe85) dup3(r2, r1, 0x0) r7 = syz_io_uring_setup(0x3157, &(0x7f0000000140), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) sendfile(r7, r0, &(0x7f0000000040)=0x3, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x8006, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x40000000, 0x100000, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r10 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r7, 0x0) syz_io_uring_submit(r10, r9, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r7, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:59:18 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsetxattr$security_selinux(r5, &(0x7f0000000100), &(0x7f0000000340)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x12, 0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000000, 0x10010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r6, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x1f, 0x0, 0x0, 0x0, {0x204}}, 0x9) pipe(&(0x7f0000003fc0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r7, 0xc0045878, 0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r8}}, 0x800) syz_io_uring_submit(r3, r2, &(0x7f0000000080)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0x7, &(0x7f0000000040)={0x77359400}, 0x1, 0x1, 0x0, {0x0, r8}}, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) r9 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x935b}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r9, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:59:18 executing program 4: socket$inet6_udp(0xa, 0x2, 0x0) socket$inet(0x2, 0xa, 0xff7ffffd) r0 = syz_io_uring_setup(0x3157, &(0x7f0000000140), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x400000) 05:59:33 executing program 4: socket$inet6_udp(0xa, 0x2, 0x0) socket$inet(0x2, 0xa, 0xff7ffffd) r0 = syz_io_uring_setup(0x3157, &(0x7f0000000140), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x1000000) 05:59:33 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(r1, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r2 = socket$inet(0x2, 0xa, 0xff7ffffd) ioctl$SNAPSHOT_UNFREEZE(r2, 0x3302) dup3(r2, r1, 0x0) creat(&(0x7f00000001c0)='./file0\x00', 0x40) r3 = syz_io_uring_setup(0x3157, &(0x7f0000000140), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x8a06, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x6201, 0x40000000, 0x100000, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) syz_io_uring_submit(r6, r5, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f0000000040)={'gretap0\x00', {0x2, 0x0, @remote}}) io_uring_enter(r3, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:59:33 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x935b}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 6) 05:59:33 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x2}, 0x4017c, 0x6, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x20, 0x9a, 0x4, 0x5c, 0x0, 0x3, 0x2025, 0x5, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x4, @perf_config_ext={0x8001, 0x9}, 0x0, 0x0, 0x7, 0x1, 0x4, 0x3ff, 0xe169, 0x0, 0x10000, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000340)=0x0) r5 = syz_open_dev$vcsa(0x0, 0xe11, 0x4000) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000240)={'wg2\x00'}) perf_event_open(&(0x7f0000000240)={0x5, 0x80, 0x9, 0x4, 0x20, 0x0, 0x0, 0x9, 0x802, 0xc, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x432, 0x5, @perf_bp={&(0x7f00000001c0), 0x1}, 0xa00, 0xd2e, 0x6, 0x6, 0x10001, 0x5, 0x7fff, 0x0, 0x6, 0x0, 0x8}, r4, 0x7, r5, 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x2000000, 0x100010, r0, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x6014, 0xb61c, 0x0, &(0x7f0000000180)={[0x18f]}, 0x8) 05:59:33 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000000040)={0x2, {0x2, 0x3, 0x7, 0x1, 0x3ff, 0x14}}) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x410c374b66567499, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x352b0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x0, 0x935b}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) 05:59:33 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 38) 05:59:33 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r1 = socket$inet(0x2, 0xa, 0xff7ffffd) ioctl$SNAPSHOT_UNFREEZE(r1, 0x3302) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(r2, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r3 = socket$inet(0x2, 0xa, 0xff7ffffd) ioctl$SNAPSHOT_UNFREEZE(r3, 0x3302) dup3(r3, r2, 0x0) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000040)={'tunl0\x00'}) r4 = syz_io_uring_setup(0x3157, &(0x7f0000000140), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) syz_io_uring_submit(r7, r6, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r4, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:59:33 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x935b}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x2e07) [ 2958.969514] FAULT_INJECTION: forcing a failure. [ 2958.969514] name failslab, interval 1, probability 0, space 0, times 0 [ 2958.971292] CPU: 0 PID: 16680 Comm: syz-executor.2 Not tainted 5.10.202 #1 [ 2958.972197] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2958.973270] Call Trace: [ 2958.973622] dump_stack+0x107/0x167 [ 2958.974096] should_fail.cold+0x5/0xa [ 2958.974582] ? create_object.isra.0+0x3a/0xa20 [ 2958.975168] should_failslab+0x5/0x20 [ 2958.975652] kmem_cache_alloc+0x5b/0x310 [ 2958.976168] ? mark_held_locks+0x9e/0xe0 [ 2958.976696] create_object.isra.0+0x3a/0xa20 [ 2958.977265] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2958.977939] kmem_cache_alloc_bulk+0x168/0x320 [ 2958.978531] io_submit_sqes+0x6f76/0x85c0 [ 2958.979069] ? percpu_ref_tryget_many+0x166/0x2d0 [ 2958.979708] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 2958.980348] __do_sys_io_uring_enter+0x6b5/0x1920 [ 2958.980967] ? lock_downgrade+0x6d0/0x6d0 [ 2958.981506] ? find_held_lock+0x2c/0x110 [ 2958.982036] ? io_submit_sqes+0x85c0/0x85c0 [ 2958.982641] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2958.983330] ? wait_for_completion_io+0x270/0x270 [ 2958.984021] ? rcu_read_lock_any_held+0x75/0xa0 [ 2958.984615] ? vfs_write+0x354/0xa70 [ 2958.985147] ? fput_many+0x2f/0x1a0 [ 2958.985680] ? ksys_write+0x1a9/0x260 [ 2958.986218] ? __ia32_sys_read+0xb0/0xb0 [ 2958.986798] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2958.987538] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2958.988267] do_syscall_64+0x33/0x40 [ 2958.988793] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2958.989532] RIP: 0033:0x7f68039deb19 [ 2958.990056] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2958.992383] RSP: 002b:00007f6800f54188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2958.993352] RAX: ffffffffffffffda RBX: 00007f6803af1f60 RCX: 00007f68039deb19 [ 2958.994238] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2958.995130] RBP: 00007f6800f541d0 R08: 0000000000000000 R09: 0000000000000000 [ 2958.996024] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2958.996913] R13: 00007ffddf06260f R14: 00007f6800f54300 R15: 0000000000022000 [ 2959.003001] FAULT_INJECTION: forcing a failure. [ 2959.003001] name failslab, interval 1, probability 0, space 0, times 0 [ 2959.004444] CPU: 0 PID: 16683 Comm: syz-executor.0 Not tainted 5.10.202 #1 [ 2959.005336] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2959.006394] Call Trace: [ 2959.006730] dump_stack+0x107/0x167 [ 2959.007203] should_fail.cold+0x5/0xa [ 2959.007696] ? create_object.isra.0+0x3a/0xa20 [ 2959.008291] should_failslab+0x5/0x20 [ 2959.008781] kmem_cache_alloc+0x5b/0x310 [ 2959.009356] create_object.isra.0+0x3a/0xa20 [ 2959.009925] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2959.010591] kmem_cache_alloc_node_trace+0x16d/0x340 [ 2959.011252] create_io_worker+0xe8/0x620 [ 2959.011775] io_wqe_enqueue+0x69e/0xbe0 [ 2959.012291] ? create_worker_cb+0x260/0x260 [ 2959.012852] ? io_prep_async_work+0x340/0x540 [ 2959.013449] io_queue_async_work+0x26b/0x4f0 [ 2959.014001] __io_queue_sqe+0x5cc/0x9d0 [ 2959.014523] ? io_issue_sqe+0x7700/0x7700 [ 2959.015068] io_submit_sqes+0x4461/0x85c0 [ 2959.015628] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 2959.016266] __do_sys_io_uring_enter+0x6b5/0x1920 [ 2959.016890] ? lock_downgrade+0x6d0/0x6d0 [ 2959.017430] ? find_held_lock+0x2c/0x110 [ 2959.017973] ? io_submit_sqes+0x85c0/0x85c0 [ 2959.018535] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2959.019160] ? wait_for_completion_io+0x270/0x270 [ 2959.019768] ? rcu_read_lock_any_held+0x75/0xa0 [ 2959.020366] ? vfs_write+0x354/0xa70 [ 2959.020854] ? fput_many+0x2f/0x1a0 [ 2959.021338] ? ksys_write+0x1a9/0x260 [ 2959.021829] ? __ia32_sys_read+0xb0/0xb0 [ 2959.022357] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2959.023029] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2959.023697] do_syscall_64+0x33/0x40 [ 2959.024179] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2959.024832] RIP: 0033:0x7fb03d693b19 [ 2959.025301] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2959.027670] RSP: 002b:00007fb03ac09188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2959.028659] RAX: ffffffffffffffda RBX: 00007fb03d7a6f60 RCX: 00007fb03d693b19 [ 2959.029583] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2959.030499] RBP: 00007fb03ac091d0 R08: 0000000000000000 R09: 0000000000000000 [ 2959.031410] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2959.032319] R13: 00007ffe77755f3f R14: 00007fb03ac09300 R15: 0000000000022000 05:59:34 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x935b}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 7) [ 2959.171160] FAULT_INJECTION: forcing a failure. [ 2959.171160] name failslab, interval 1, probability 0, space 0, times 0 [ 2959.172659] CPU: 0 PID: 16709 Comm: syz-executor.2 Not tainted 5.10.202 #1 [ 2959.173465] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2959.174437] Call Trace: [ 2959.174759] dump_stack+0x107/0x167 [ 2959.175224] should_fail.cold+0x5/0xa [ 2959.175685] ? create_object.isra.0+0x3a/0xa20 [ 2959.176231] should_failslab+0x5/0x20 [ 2959.176676] kmem_cache_alloc+0x5b/0x310 [ 2959.177162] ? mark_held_locks+0x9e/0xe0 [ 2959.177660] create_object.isra.0+0x3a/0xa20 [ 2959.178186] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2959.178789] kmem_cache_alloc_bulk+0x168/0x320 [ 2959.179333] io_submit_sqes+0x6f76/0x85c0 [ 2959.179833] ? percpu_ref_tryget_many+0x166/0x2d0 [ 2959.180422] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 2959.181003] __do_sys_io_uring_enter+0x6b5/0x1920 [ 2959.181592] ? lock_downgrade+0x6d0/0x6d0 [ 2959.182087] ? find_held_lock+0x2c/0x110 [ 2959.182569] ? io_submit_sqes+0x85c0/0x85c0 [ 2959.183102] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2959.183665] ? wait_for_completion_io+0x270/0x270 [ 2959.184256] ? rcu_read_lock_any_held+0x75/0xa0 [ 2959.184816] ? vfs_write+0x354/0xa70 [ 2959.185281] ? fput_many+0x2f/0x1a0 [ 2959.185719] ? ksys_write+0x1a9/0x260 [ 2959.186186] ? __ia32_sys_read+0xb0/0xb0 [ 2959.186669] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2959.187305] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2959.187918] do_syscall_64+0x33/0x40 [ 2959.188380] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2959.188982] RIP: 0033:0x7f68039deb19 [ 2959.189458] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2959.191705] RSP: 002b:00007f6800f54188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2959.192621] RAX: ffffffffffffffda RBX: 00007f6803af1f60 RCX: 00007f68039deb19 [ 2959.193492] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2959.194358] RBP: 00007f6800f541d0 R08: 0000000000000000 R09: 0000000000000000 [ 2959.195216] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2959.196076] R13: 00007ffddf06260f R14: 00007f6800f54300 R15: 0000000000022000 05:59:47 executing program 4: socket$inet6_udp(0xa, 0x2, 0x0) socket$inet(0x2, 0xa, 0xff7ffffd) r0 = syz_io_uring_setup(0x3157, &(0x7f0000000140), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x20000000) 05:59:47 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x935b}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x2e09) 05:59:47 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x935b}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 8) 05:59:47 executing program 7: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)={0x14, 0x1e, 0xe21}, 0x14}}, 0x0) r1 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0xfffffffc, 0x0, 0x3, 0x20000000}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r4 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) ioctl$TIOCL_SETSEL(r4, 0x541c, &(0x7f0000000040)={0x2, {0x2, 0x3, 0xf, 0x1, 0x3ff, 0x14}}) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000440)=0x6) r6 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={&(0x7f0000000080), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r4, 0xc018937c, &(0x7f00000000c0)=ANY=[@ANYBLOB="0106000001000b8018000900", @ANYRES32=r6, @ANYBLOB="01000000000000002e2f66696c653000"]) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x5, 0x4000010, r7, 0x0) accept$inet6(r4, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote}, &(0x7f00000001c0)=0x1c) r8 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000000, 0x10010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r8, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x1f, 0x0, 0x0, 0x0, {0x204}}, 0x9) pipe(&(0x7f0000003fc0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r10, 0xc0045878, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000100)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, r9, &(0x7f0000000340)={0x121100, 0x102, 0x9f18ee1f20b864f}, &(0x7f0000000380)='./file0\x00', 0x18, 0x0, 0x23456}, 0x8001) sendmsg$BATADV_CMD_TP_METER_CANCEL(r9, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="3218cd5bf66c81fd5b850fe9bcffde439fed447d77c184e34a074c834d6caffd4dc2163900"/50, @ANYRES16=0x0, @ANYBLOB="010027bd7000fedbdf25030000000800310003000000080034002000000005003500010000000500350003000000050038000100000005002f00000000000a000900ffffffffffff000008002c000000000008003400080000000500370001000000"], 0x68}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000815) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:59:47 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 39) 05:59:47 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) close(r0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r1 = socket$inet(0x2, 0xa, 0xff7ffffd) ioctl$SNAPSHOT_UNFREEZE(r1, 0x3302) r2 = syz_io_uring_setup(0x3157, &(0x7f0000000140), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_ASYNC_CANCEL={0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) syz_io_uring_submit(r5, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x440, 0x80) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsetxattr$security_selinux(r6, &(0x7f0000000100), &(0x7f0000000340)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x12, 0x0) r7 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000000, 0x10010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(r5, r7, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x3, 0x0, @fd, 0x0, 0x0, 0x0, {0x20c}}, 0x9) pipe(&(0x7f0000003fc0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r8, 0xc0045878, 0x0) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r7, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r9}}, 0x800) syz_io_uring_submit(r5, r4, &(0x7f00000002c0)=@IORING_OP_SEND={0x1a, 0x4, 0x0, r1, 0x0, &(0x7f00000001c0)="830aafa1538ffe791fb8423fedbd1f37c81ed76a90e3cc0ae8a6da0b6b69b4f2f4db6504dea1d82fa8c259740b5bff932ba10aea7633a619080346ba8eeec24b1eca90949bc920b1dc08f0615c32e6206eb5b2e00faa1b5c3e9aeac77f741ed2b1a90fcb0757de348edd5033449a566a142107deeb6775c44c6562fd083ad5a0050689e1547f55a0873c75cd231c14d0a31c2229c7920953b8d262b098b89c7ad2be971c4e7a439fc9d3805cf5f63c39841dd1bfe0d00769af39dcdccbf1322547bc42b50ed01963866333d12b1ec7d7f5bd5daab786ce405e066ad2e656c8722f4ffe2a89639a119c0025b921950f28bdd5", 0xf2, 0x80, 0x1, {0x0, r9}}, 0x1ff) io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:59:47 executing program 3: socket$inet6_udp(0xa, 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r1 = socket$inet(0x2, 0xa, 0xff7ffffd) ioctl$SNAPSHOT_UNFREEZE(r1, 0x3302) dup3(r1, r0, 0x0) r2 = syz_io_uring_setup(0x3157, &(0x7f0000000140), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x8006, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x40000000, 0x100000, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) syz_io_uring_submit(r5, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) 05:59:47 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = getpgid(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x935b}, 0x2000, 0x0, 0x0, 0x0, 0x9}, r4, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2972.885124] FAULT_INJECTION: forcing a failure. [ 2972.885124] name failslab, interval 1, probability 0, space 0, times 0 [ 2972.887501] CPU: 1 PID: 16724 Comm: syz-executor.0 Not tainted 5.10.202 #1 [ 2972.888917] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2972.890630] Call Trace: [ 2972.891169] dump_stack+0x107/0x167 [ 2972.891918] should_fail.cold+0x5/0xa [ 2972.892700] ? create_object.isra.0+0x3a/0xa20 [ 2972.893645] should_failslab+0x5/0x20 [ 2972.894419] kmem_cache_alloc+0x5b/0x310 [ 2972.895240] ? mark_held_locks+0x9e/0xe0 [ 2972.896066] create_object.isra.0+0x3a/0xa20 [ 2972.896971] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2972.898026] kmem_cache_alloc_bulk+0x168/0x320 [ 2972.898973] io_submit_sqes+0x6f76/0x85c0 [ 2972.899860] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 2972.900881] __do_sys_io_uring_enter+0x6b5/0x1920 [ 2972.901874] ? lock_downgrade+0x6d0/0x6d0 [ 2972.902718] ? find_held_lock+0x2c/0x110 [ 2972.903557] ? io_submit_sqes+0x85c0/0x85c0 [ 2972.904446] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2972.905437] ? wait_for_completion_io+0x270/0x270 [ 2972.906413] ? rcu_read_lock_any_held+0x75/0xa0 [ 2972.907361] ? vfs_write+0x354/0xa70 [ 2972.908127] ? fput_many+0x2f/0x1a0 [ 2972.908892] ? ksys_write+0x1a9/0x260 [ 2972.909537] FAULT_INJECTION: forcing a failure. [ 2972.909537] name failslab, interval 1, probability 0, space 0, times 0 [ 2972.909682] ? __ia32_sys_read+0xb0/0xb0 [ 2972.909709] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2972.909727] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2972.909754] do_syscall_64+0x33/0x40 [ 2972.909776] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2972.909789] RIP: 0033:0x7fb03d693b19 [ 2972.909809] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2972.909820] RSP: 002b:00007fb03ac09188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2972.909841] RAX: ffffffffffffffda RBX: 00007fb03d7a6f60 RCX: 00007fb03d693b19 [ 2972.909853] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2972.909864] RBP: 00007fb03ac091d0 R08: 0000000000000000 R09: 0000000000000000 [ 2972.909889] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2972.928627] R13: 00007ffe77755f3f R14: 00007fb03ac09300 R15: 0000000000022000 [ 2972.930123] CPU: 0 PID: 16730 Comm: syz-executor.2 Not tainted 5.10.202 #1 [ 2972.931566] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2972.933268] Call Trace: [ 2972.933818] dump_stack+0x107/0x167 [ 2972.934583] should_fail.cold+0x5/0xa [ 2972.935377] ? create_object.isra.0+0x3a/0xa20 [ 2972.936316] should_failslab+0x5/0x20 [ 2972.937109] kmem_cache_alloc+0x5b/0x310 [ 2972.937953] ? mark_held_locks+0x9e/0xe0 [ 2972.938795] create_object.isra.0+0x3a/0xa20 [ 2972.939695] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2972.940749] kmem_cache_alloc_bulk+0x168/0x320 [ 2972.941713] io_submit_sqes+0x6f76/0x85c0 [ 2972.942570] ? percpu_ref_tryget_many+0x166/0x2d0 [ 2972.943580] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 2972.944607] __do_sys_io_uring_enter+0x6b5/0x1920 [ 2972.945599] ? lock_downgrade+0x6d0/0x6d0 [ 2972.946450] ? find_held_lock+0x2c/0x110 [ 2972.947286] ? io_submit_sqes+0x85c0/0x85c0 [ 2972.948187] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2972.949185] ? wait_for_completion_io+0x270/0x270 [ 2972.950213] ? rcu_read_lock_any_held+0x75/0xa0 [ 2972.951163] ? vfs_write+0x354/0xa70 [ 2972.951934] ? fput_many+0x2f/0x1a0 [ 2972.952679] ? ksys_write+0x1a9/0x260 [ 2972.953476] ? __ia32_sys_read+0xb0/0xb0 [ 2972.954314] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2972.955390] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2972.956459] do_syscall_64+0x33/0x40 [ 2972.957237] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2972.958300] RIP: 0033:0x7f68039deb19 [ 2972.959072] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2972.962825] RSP: 002b:00007f6800f54188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2972.964404] RAX: ffffffffffffffda RBX: 00007f6803af1f60 RCX: 00007f68039deb19 [ 2972.965870] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2972.967328] RBP: 00007f6800f541d0 R08: 0000000000000000 R09: 0000000000000000 [ 2972.968795] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2972.970265] R13: 00007ffddf06260f R14: 00007f6800f54300 R15: 0000000000022000 05:59:47 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r1 = socket$inet(0x2, 0xa, 0xff7ffffd) ioctl$SNAPSHOT_UNFREEZE(r1, 0x3302) r2 = syz_io_uring_setup(0x3157, &(0x7f0000000140), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) syz_io_uring_submit(r5, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) ioctl$TUNSETLINK(r0, 0x400454cd, 0x20) io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:59:48 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) io_uring_enter(0xffffffffffffffff, 0x31ca, 0xd723, 0x2, &(0x7f0000000080)={[0x6]}, 0x8) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000000040)={0x2, {0x2, 0x3, 0x7, 0x1, 0x3ff, 0x14}}) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x935b}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:59:48 executing program 4: socket$inet6_udp(0xa, 0x2, 0x0) socket$inet(0x2, 0xa, 0xff7ffffd) r0 = syz_io_uring_setup(0x3157, &(0x7f0000000140), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x95ffffff) 05:59:48 executing program 6: syz_mount_image$ext4(&(0x7f0000000280)='ext3\x00', &(0x7f0000000340)='./file0\x00', 0x8, 0x3, &(0x7f0000001480)=[{&(0x7f0000000380)="982000668efa9fa5", 0x8, 0x5}, {&(0x7f00000003c0)="a0e0273b438e137292e6da023ddcee670d86d942ca3f2364b15b3417b9761156dce481115c4714f6712f164b9410b4ed2b433e0d67cf44ca483653b051b4ab54a1be72b14fb59facd825efdc1da08d5150dd732a1b494f104957591b0a8ac88e0685c483d345e1529f45470825a21bb0d40610901701fec74e242901c6cb578cbf653f597a0221446011b986cf36fdf89e", 0x91}, {&(0x7f0000000480)="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", 0x1000, 0xe1}], 0x31, &(0x7f0000001500)={[{@data_writeback}, {@resuid={'resuid', 0x3d, 0xffffffffffffffff}}, {@jqfmt_vfsv0}], [{@fscontext={'fscontext', 0x3d, 'user_u'}}, {@obj_role={'obj_role', 0x3d, '\x00'}}]}) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x173, &(0x7f0000000040)={0x0, 0xf956, 0x0, 0x3, 0x37c, 0x0, r0}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)=0x0) syz_io_uring_submit(r4, r6, &(0x7f00000001c0)=@IORING_OP_FALLOCATE={0x11, 0x1, 0x0, @fd_index=0x9, 0x1ffc000000000000, 0x0, 0x9, 0x0, 0x1}, 0x3ff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x935b}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x80, &(0x7f0000000240)=0x3f, 0x0, 0x4) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:59:48 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 40) 05:59:48 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x935b}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 9) 05:59:48 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r1 = socket$inet(0x2, 0xa, 0xff7ffffd) ioctl$SNAPSHOT_UNFREEZE(r1, 0x3302) r2 = syz_io_uring_setup(0x3157, &(0x7f0000000140), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) syz_io_uring_submit(r5, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x547, &(0x7f00000001c0)={0x0, 0xf30d, 0x20, 0x2, 0x131, 0x0, r2}, &(0x7f0000fef000/0xb000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000240)) socketpair(0x0, 0x2, 0x2f65e7cf, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000340)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x12, 0x0) r8 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000000, 0x10010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r8, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x1f, 0x0, 0x0, 0x0, {0x204}}, 0x9) pipe(&(0x7f0000003fc0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r9, 0xc0045878, 0x0) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r8, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x0, 0x0, r9, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r10}}, 0x800) syz_io_uring_submit(r6, r4, &(0x7f0000000440)=@IORING_OP_CLOSE={0x13, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r10}}, 0x2) syz_io_uring_submit(r6, r4, &(0x7f0000000640)=@IORING_OP_RECVMSG={0xa, 0x3, 0x0, r7, 0x0, &(0x7f0000000600)={&(0x7f00000002c0)=@pptp={0x18, 0x2, {0x0, @broadcast}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000340)=""/228, 0xe4}, {&(0x7f0000000740)=""/4096, 0x1000}, {&(0x7f0000001740)=""/4096, 0x1000}, {&(0x7f0000000440)}, {&(0x7f0000000480)=""/22, 0x16}], 0x5, &(0x7f0000000540)=""/147, 0x93}, 0x0, 0x0, 0x1, {0x2}}, 0x2) [ 2973.467779] FAULT_INJECTION: forcing a failure. [ 2973.467779] name failslab, interval 1, probability 0, space 0, times 0 [ 2973.470232] CPU: 0 PID: 16779 Comm: syz-executor.0 Not tainted 5.10.202 #1 [ 2973.471679] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2973.473387] Call Trace: [ 2973.473954] dump_stack+0x107/0x167 [ 2973.474732] should_fail.cold+0x5/0xa [ 2973.475538] ? create_object.isra.0+0x3a/0xa20 [ 2973.476502] should_failslab+0x5/0x20 [ 2973.477277] kmem_cache_alloc+0x5b/0x310 [ 2973.478148] ? mark_held_locks+0x9e/0xe0 [ 2973.478987] create_object.isra.0+0x3a/0xa20 [ 2973.479910] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2973.480957] kmem_cache_alloc_bulk+0x168/0x320 [ 2973.481929] io_submit_sqes+0x6f76/0x85c0 [ 2973.482822] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 2973.483854] __do_sys_io_uring_enter+0x6b5/0x1920 [ 2973.484848] ? lock_downgrade+0x6d0/0x6d0 [ 2973.485710] ? find_held_lock+0x2c/0x110 [ 2973.486546] ? io_submit_sqes+0x85c0/0x85c0 05:59:48 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(r1, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r2 = socket$inet(0x2, 0xa, 0xff7ffffd) ioctl$SNAPSHOT_UNFREEZE(r2, 0x3302) setsockopt$inet6_udp_int(r0, 0x11, 0x65, &(0x7f0000000040)=0x8, 0x4) r3 = dup3(r2, r1, 0x0) r4 = syz_io_uring_setup(0x3157, &(0x7f0000000140), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x9}}, './file0\x00'}) ioctl$TUNGETIFF(r7, 0x800454d2, &(0x7f0000000200)={'batadv_slave_1\x00'}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x8006, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x40000000, 0x100000, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) syz_io_uring_submit(r8, r6, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_uring_enter(r4, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2973.487452] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2973.488587] ? wait_for_completion_io+0x270/0x270 [ 2973.489611] ? rcu_read_lock_any_held+0x75/0xa0 [ 2973.489678] FAULT_INJECTION: forcing a failure. [ 2973.489678] name failslab, interval 1, probability 0, space 0, times 0 [ 2973.490552] ? vfs_write+0x354/0xa70 [ 2973.490578] ? fput_many+0x2f/0x1a0 [ 2973.490600] ? ksys_write+0x1a9/0x260 [ 2973.490620] ? __ia32_sys_read+0xb0/0xb0 [ 2973.490650] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2973.496990] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2973.498078] do_syscall_64+0x33/0x40 [ 2973.498851] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2973.499910] RIP: 0033:0x7fb03d693b19 [ 2973.500679] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2973.504447] RSP: 002b:00007fb03ac09188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2973.506026] RAX: ffffffffffffffda RBX: 00007fb03d7a6f60 RCX: 00007fb03d693b19 [ 2973.507491] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2973.508946] RBP: 00007fb03ac091d0 R08: 0000000000000000 R09: 0000000000000000 [ 2973.510413] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2973.511881] R13: 00007ffe77755f3f R14: 00007fb03ac09300 R15: 0000000000022000 [ 2973.513378] CPU: 1 PID: 16780 Comm: syz-executor.2 Not tainted 5.10.202 #1 [ 2973.514891] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2973.516565] Call Trace: [ 2973.517107] dump_stack+0x107/0x167 [ 2973.517865] should_fail.cold+0x5/0xa [ 2973.518643] ? create_object.isra.0+0x3a/0xa20 [ 2973.519573] should_failslab+0x5/0x20 [ 2973.520359] kmem_cache_alloc+0x5b/0x310 [ 2973.521186] ? mark_held_locks+0x9e/0xe0 [ 2973.522029] create_object.isra.0+0x3a/0xa20 [ 2973.522917] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2973.523951] kmem_cache_alloc_bulk+0x168/0x320 [ 2973.524884] io_submit_sqes+0x6f76/0x85c0 [ 2973.525747] ? percpu_ref_tryget_many+0x166/0x2d0 [ 2973.526746] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 2973.527756] __do_sys_io_uring_enter+0x6b5/0x1920 [ 2973.528727] ? lock_downgrade+0x6d0/0x6d0 [ 2973.529573] ? find_held_lock+0x2c/0x110 [ 2973.530405] ? io_submit_sqes+0x85c0/0x85c0 [ 2973.531296] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2973.532263] ? wait_for_completion_io+0x270/0x270 [ 2973.533246] ? rcu_read_lock_any_held+0x75/0xa0 [ 2973.534191] ? vfs_write+0x354/0xa70 [ 2973.534955] ? fput_many+0x2f/0x1a0 [ 2973.535688] ? ksys_write+0x1a9/0x260 [ 2973.536462] ? __ia32_sys_read+0xb0/0xb0 [ 2973.537282] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2973.538362] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2973.539404] do_syscall_64+0x33/0x40 [ 2973.540153] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2973.541175] RIP: 0033:0x7f68039deb19 [ 2973.541939] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2973.545624] RSP: 002b:00007f6800f54188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2973.547194] RAX: ffffffffffffffda RBX: 00007f6803af1f60 RCX: 00007f68039deb19 [ 2973.548650] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2973.550110] RBP: 00007f6800f541d0 R08: 0000000000000000 R09: 0000000000000000 [ 2973.551567] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2973.553029] R13: 00007ffddf06260f R14: 00007f6800f54300 R15: 0000000000022000 05:59:48 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x935b}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(r4, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r5 = socket$inet(0x2, 0xa, 0xff7ffffd) ioctl$SNAPSHOT_UNFREEZE(r5, 0x3302) dup3(r5, r4, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x6, 0x6007, @fd=r4, 0x80000001, &(0x7f0000000040)="fb83736ca5e0a6537c1dfc25d57b57f1bdd188d0617874d911a942953f8e68f7d9f9f21fdeb9bf4db51687", 0x2b, 0xc, 0x0, {0x0, r6}}, 0x21f) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:59:48 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x935b}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x2e0a) 05:59:48 executing program 4: socket$inet6_udp(0xa, 0x2, 0x0) socket$inet(0x2, 0xa, 0xff7ffffd) r0 = syz_io_uring_setup(0x3157, &(0x7f0000000140), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xffffff95) 05:59:48 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(r1, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r2 = socket$inet(0x2, 0xa, 0xff7ffffd) r3 = syz_open_dev$vcsa(0x0, 0xe11, 0x4000) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000240)={'wg2\x00'}) ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f00000001c0)) ioctl$SNAPSHOT_UNFREEZE(r2, 0x3302) r4 = syz_open_dev$vcsa(0x0, 0xe11, 0x4000) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000200)) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000000240)={'wg2\x00'}) pread64(r4, &(0x7f0000000040)=""/40, 0x28, 0x2) dup3(r2, r1, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000280)={0x4, 0x10001, 0x1000, 0x2, 0xfffffff7}) r5 = syz_io_uring_setup(0x3157, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ff2000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x8006, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x40000000, 0x100000, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r5, 0x0) syz_io_uring_submit(r8, r7, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x4008001) io_uring_enter(r5, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:59:48 executing program 7: r0 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0x2, 0x3, 0x7, 0x1, 0x3ff, 0x14}}) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000140)={0x2, {0x2, 0xff, 0x6d61, 0x3, 0xffff}}) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, @perf_config_ext={0x0, 0x935b}, 0x0, 0x0, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) 06:00:03 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x935b}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x3f00) 06:00:03 executing program 3: socket$inet6_udp(0xa, 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r1 = socket$inet(0x2, 0xa, 0xff7ffffd) ioctl$SNAPSHOT_UNFREEZE(r1, 0x3302) dup3(r1, r0, 0x0) r2 = syz_io_uring_setup(0x3157, &(0x7f0000000140), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x8006, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x40000000, 0x100000, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) syz_io_uring_submit(r5, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0) 06:00:03 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x935b}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 10) 06:00:03 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 41) 06:00:03 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)=0x0) r2 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)) syz_io_uring_submit(r3, 0x0, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0, 0x10001}, 0xfffffffd) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000000040)={0x2, {0x2, 0x3, 0x7, 0x1, 0x3ff, 0x14}}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x935b}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000018, 0x10, r0, 0x8000000) syz_io_uring_setup(0x4d51, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(r7, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r8 = socket$inet(0x2, 0xa, 0xff7ffffd) ioctl$SNAPSHOT_UNFREEZE(r8, 0x3302) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$SNAPSHOT_ATOMIC_RESTORE(r9, 0x3304) dup3(r8, r7, 0x0) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r6, &(0x7f0000000180)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r8, 0x80, &(0x7f0000000080)=@nfc={0x27, 0x1, 0x1, 0x5}, 0x0, 0x0, 0x1, {0x0, r10}}, 0x6) syz_io_uring_submit(0x0, r1, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 06:00:03 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index=0x3}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x935b}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SCRUB_CANCEL(r0, 0x941c, 0x0) syz_io_uring_setup(0x5eb8, &(0x7f0000000040)={0x0, 0xfde0, 0x20, 0x2, 0x21a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000180)) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) syz_io_uring_submit(r3, r5, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 06:00:03 executing program 4: socket$inet6_udp(0xa, 0x2, 0x0) socket$inet(0x2, 0xa, 0xff7ffffd) r0 = syz_io_uring_setup(0x3157, &(0x7f0000000140), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x7ffffffff000) 06:00:03 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'ip6gre0\x00'}) r1 = socket$inet(0x2, 0xa, 0xff7ffffd) ioctl$SNAPSHOT_UNFREEZE(r1, 0x3302) r2 = syz_io_uring_setup(0x3157, &(0x7f0000000140), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) syz_io_uring_submit(r5, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2988.741778] FAULT_INJECTION: forcing a failure. [ 2988.741778] name failslab, interval 1, probability 0, space 0, times 0 [ 2988.743999] CPU: 0 PID: 16840 Comm: syz-executor.0 Not tainted 5.10.202 #1 [ 2988.745310] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2988.746882] Call Trace: [ 2988.747390] dump_stack+0x107/0x167 [ 2988.748058] should_fail.cold+0x5/0xa [ 2988.748755] ? create_object.isra.0+0x3a/0xa20 [ 2988.749592] should_failslab+0x5/0x20 [ 2988.750311] kmem_cache_alloc+0x5b/0x310 [ 2988.751055] ? mark_held_locks+0x9e/0xe0 [ 2988.751794] create_object.isra.0+0x3a/0xa20 [ 2988.752584] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2988.753502] kmem_cache_alloc_bulk+0x168/0x320 [ 2988.754344] io_submit_sqes+0x6f76/0x85c0 [ 2988.755138] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 2988.756035] __do_sys_io_uring_enter+0x6b5/0x1920 [ 2988.756907] ? lock_downgrade+0x6d0/0x6d0 [ 2988.757652] ? find_held_lock+0x2c/0x110 [ 2988.758401] ? io_submit_sqes+0x85c0/0x85c0 [ 2988.759185] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2988.760067] ? wait_for_completion_io+0x270/0x270 [ 2988.760940] ? rcu_read_lock_any_held+0x75/0xa0 [ 2988.761801] ? vfs_write+0x354/0xa70 [ 2988.762478] ? fput_many+0x2f/0x1a0 [ 2988.763143] ? ksys_write+0x1a9/0x260 [ 2988.763844] ? __ia32_sys_read+0xb0/0xb0 [ 2988.764587] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2988.765580] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2988.766086] FAULT_INJECTION: forcing a failure. [ 2988.766086] name failslab, interval 1, probability 0, space 0, times 0 [ 2988.766542] do_syscall_64+0x33/0x40 [ 2988.769442] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2988.770371] RIP: 0033:0x7fb03d693b19 [ 2988.771025] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2988.774281] RSP: 002b:00007fb03ac09188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2988.775608] RAX: ffffffffffffffda RBX: 00007fb03d7a6f60 RCX: 00007fb03d693b19 [ 2988.776854] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2988.778112] RBP: 00007fb03ac091d0 R08: 0000000000000000 R09: 0000000000000000 [ 2988.779344] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2988.780579] R13: 00007ffe77755f3f R14: 00007fb03ac09300 R15: 0000000000022000 [ 2988.781935] CPU: 1 PID: 16847 Comm: syz-executor.2 Not tainted 5.10.202 #1 [ 2988.783321] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2988.784982] Call Trace: [ 2988.785522] dump_stack+0x107/0x167 [ 2988.786280] should_fail.cold+0x5/0xa [ 2988.787051] ? create_io_worker+0xe8/0x620 [ 2988.787917] should_failslab+0x5/0x20 [ 2988.788672] kmem_cache_alloc_node_trace+0x59/0x340 [ 2988.789684] create_io_worker+0xe8/0x620 [ 2988.790532] io_wqe_enqueue+0x69e/0xbe0 [ 2988.791342] ? create_worker_cb+0x260/0x260 [ 2988.792234] ? io_prep_async_work+0x340/0x540 [ 2988.793159] io_queue_async_work+0x26b/0x4f0 [ 2988.794083] __io_queue_sqe+0x5cc/0x9d0 [ 2988.794901] ? io_issue_sqe+0x7700/0x7700 [ 2988.795760] io_submit_sqes+0x4461/0x85c0 [ 2988.796638] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 2988.797672] __do_sys_io_uring_enter+0x6b5/0x1920 [ 2988.798662] ? lock_downgrade+0x6d0/0x6d0 [ 2988.799497] ? find_held_lock+0x2c/0x110 [ 2988.800328] ? io_submit_sqes+0x85c0/0x85c0 [ 2988.801222] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2988.802222] ? wait_for_completion_io+0x270/0x270 [ 2988.803194] ? rcu_read_lock_any_held+0x75/0xa0 [ 2988.804135] ? vfs_write+0x354/0xa70 [ 2988.804902] ? fput_many+0x2f/0x1a0 [ 2988.805656] ? ksys_write+0x1a9/0x260 [ 2988.806423] ? __ia32_sys_read+0xb0/0xb0 [ 2988.807259] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2988.808328] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2988.809382] do_syscall_64+0x33/0x40 [ 2988.810172] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2988.811215] RIP: 0033:0x7f68039deb19 [ 2988.811993] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2988.815690] RSP: 002b:00007f6800f54188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2988.817239] RAX: ffffffffffffffda RBX: 00007f6803af1f60 RCX: 00007f68039deb19 [ 2988.818706] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2988.820139] RBP: 00007f6800f541d0 R08: 0000000000000000 R09: 0000000000000000 [ 2988.821579] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2988.823030] R13: 00007ffddf06260f R14: 00007f6800f54300 R15: 0000000000022000 06:00:03 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000000040)={0x2, {0x2, 0x3, 0x7, 0x1, 0x3ff, 0x14}}) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x935b}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) r5 = syz_open_dev$vcsa(0x0, 0xe11, 0x4000) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000240)={'wg2\x00'}) getsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000080), 0x10) 06:00:03 executing program 6: ioctl$FAT_IOCTL_GET_VOLUME_ID(0xffffffffffffffff, 0x80047213, &(0x7f0000000040)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x935b}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x14803, 0x100) syz_io_uring_submit(r0, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_open_procfs(0x0, &(0x7f0000000140)='net/unix\x00') io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) 06:00:03 executing program 4: socket$inet6_udp(0xa, 0x2, 0x0) socket$inet(0x2, 0xa, 0xff7ffffd) r0 = syz_io_uring_setup(0x3157, &(0x7f0000000140), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x40000000000000) 06:00:03 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 42) 06:00:04 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r1 = socket$inet(0x2, 0xa, 0xff7ffffd) ioctl$SNAPSHOT_UNFREEZE(r1, 0x3302) r2 = syz_io_uring_setup(0x3157, &(0x7f0000000140), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) syz_io_uring_submit(r5, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r6 = syz_open_dev$vcsa(0x0, 0xe11, 0x4000) ioctl$ifreq_SIOCGIFINDEX_wireguard(r6, 0x8933, &(0x7f0000000240)={'wg2\x00'}) ioctl$TUNSETSNDBUF(r6, 0x400454d4, &(0x7f0000000040)=0x9) io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0) 06:00:04 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x935b}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 11) [ 2989.117400] FAULT_INJECTION: forcing a failure. [ 2989.117400] name failslab, interval 1, probability 0, space 0, times 0 [ 2989.119079] CPU: 0 PID: 16883 Comm: syz-executor.0 Not tainted 5.10.202 #1 [ 2989.120054] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2989.121218] Call Trace: [ 2989.121635] dump_stack+0x107/0x167 [ 2989.122159] should_fail.cold+0x5/0xa [ 2989.122701] ? create_object.isra.0+0x3a/0xa20 [ 2989.123340] should_failslab+0x5/0x20 [ 2989.123885] kmem_cache_alloc+0x5b/0x310 [ 2989.124455] ? mark_held_locks+0x9e/0xe0 [ 2989.125028] create_object.isra.0+0x3a/0xa20 [ 2989.125655] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2989.126375] kmem_cache_alloc_bulk+0x168/0x320 [ 2989.127030] io_submit_sqes+0x6f76/0x85c0 [ 2989.127635] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 2989.128332] __do_sys_io_uring_enter+0x6b5/0x1920 [ 2989.129013] ? lock_downgrade+0x6d0/0x6d0 [ 2989.129592] ? find_held_lock+0x2c/0x110 [ 2989.130176] ? io_submit_sqes+0x85c0/0x85c0 [ 2989.130786] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2989.131463] ? wait_for_completion_io+0x270/0x270 [ 2989.132142] ? rcu_read_lock_any_held+0x75/0xa0 [ 2989.132787] ? vfs_write+0x354/0xa70 [ 2989.133311] ? fput_many+0x2f/0x1a0 [ 2989.133842] ? ksys_write+0x1a9/0x260 [ 2989.134371] ? __ia32_sys_read+0xb0/0xb0 [ 2989.134947] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2989.135679] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2989.136401] do_syscall_64+0x33/0x40 [ 2989.136923] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2989.137638] RIP: 0033:0x7fb03d693b19 [ 2989.138162] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2989.140715] RSP: 002b:00007fb03ac09188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2989.141787] RAX: ffffffffffffffda RBX: 00007fb03d7a6f60 RCX: 00007fb03d693b19 [ 2989.142780] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2989.143772] RBP: 00007fb03ac091d0 R08: 0000000000000000 R09: 0000000000000000 [ 2989.144758] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2989.145757] R13: 00007ffe77755f3f R14: 00007fb03ac09300 R15: 0000000000022000 [ 2989.187465] FAULT_INJECTION: forcing a failure. [ 2989.187465] name failslab, interval 1, probability 0, space 0, times 0 [ 2989.189233] CPU: 0 PID: 16888 Comm: syz-executor.2 Not tainted 5.10.202 #1 [ 2989.190174] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2989.191295] Call Trace: [ 2989.191656] dump_stack+0x107/0x167 [ 2989.192147] should_fail.cold+0x5/0xa [ 2989.192670] ? memcg_alloc_page_obj_cgroups+0x73/0x100 [ 2989.193373] should_failslab+0x5/0x20 [ 2989.193899] __kmalloc_node+0x76/0x420 [ 2989.194432] memcg_alloc_page_obj_cgroups+0x73/0x100 [ 2989.195121] memcg_slab_post_alloc_hook+0x1f0/0x430 [ 2989.195795] kmem_cache_alloc_bulk+0x182/0x320 [ 2989.196422] io_submit_sqes+0x6f76/0x85c0 [ 2989.196991] ? percpu_ref_tryget_many+0x166/0x2d0 [ 2989.197662] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 2989.198359] __do_sys_io_uring_enter+0x6b5/0x1920 [ 2989.199009] ? lock_downgrade+0x6d0/0x6d0 [ 2989.199567] ? find_held_lock+0x2c/0x110 [ 2989.200117] ? io_submit_sqes+0x85c0/0x85c0 [ 2989.200705] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2989.201357] ? wait_for_completion_io+0x270/0x270 [ 2989.202014] ? rcu_read_lock_any_held+0x75/0xa0 [ 2989.202634] ? vfs_write+0x354/0xa70 [ 2989.203132] ? fput_many+0x2f/0x1a0 [ 2989.203624] ? ksys_write+0x1a9/0x260 [ 2989.204141] ? __ia32_sys_read+0xb0/0xb0 [ 2989.204688] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2989.205385] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2989.206090] do_syscall_64+0x33/0x40 [ 2989.206600] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2989.207289] RIP: 0033:0x7f68039deb19 [ 2989.207795] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2989.210280] RSP: 002b:00007f6800f54188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2989.211284] RAX: ffffffffffffffda RBX: 00007f6803af1f60 RCX: 00007f68039deb19 [ 2989.212238] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2989.213190] RBP: 00007f6800f541d0 R08: 0000000000000000 R09: 0000000000000000 [ 2989.214152] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2989.215098] R13: 00007ffddf06260f R14: 00007f6800f54300 R15: 0000000000022000 06:00:19 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x2c38, 0xcbb5, 0x2, &(0x7f0000000040)={[0x83bd]}, 0x8) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000080), &(0x7f00000000c0)={'U+', 0x2}, 0x16, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x935b}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 06:00:19 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000000040)={0x2, {0x2, 0x3, 0x7, 0x1, 0x3ff, 0x14}}) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x935b}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$mouse(&(0x7f0000000080), 0xbf2, 0x100) ioctl$TIOCL_SETSEL(r5, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x81, 0x7a, 0x9, 0x40, 0xf}}) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 06:00:19 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 43) [ 3004.485525] FAULT_INJECTION: forcing a failure. [ 3004.485525] name failslab, interval 1, probability 0, space 0, times 0 [ 3004.487440] CPU: 0 PID: 16904 Comm: syz-executor.0 Not tainted 5.10.202 #1 [ 3004.488558] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3004.489893] Call Trace: [ 3004.490307] dump_stack+0x107/0x167 [ 3004.490877] should_fail.cold+0x5/0xa [ 3004.491472] ? create_object.isra.0+0x3a/0xa20 [ 3004.492211] should_failslab+0x5/0x20 [ 3004.492818] kmem_cache_alloc+0x5b/0x310 [ 3004.493480] ? mark_held_locks+0x9e/0xe0 [ 3004.494150] create_object.isra.0+0x3a/0xa20 [ 3004.494855] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3004.495696] kmem_cache_alloc_bulk+0x168/0x320 [ 3004.496452] io_submit_sqes+0x6f76/0x85c0 [ 3004.497176] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 3004.497992] __do_sys_io_uring_enter+0x6b5/0x1920 [ 3004.498814] ? lock_downgrade+0x6d0/0x6d0 [ 3004.499499] ? find_held_lock+0x2c/0x110 [ 3004.500157] ? io_submit_sqes+0x85c0/0x85c0 [ 3004.500872] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3004.501652] ? wait_for_completion_io+0x270/0x270 [ 3004.502454] ? rcu_read_lock_any_held+0x75/0xa0 [ 3004.503201] ? vfs_write+0x354/0xa70 [ 3004.503801] ? fput_many+0x2f/0x1a0 [ 3004.504402] ? ksys_write+0x1a9/0x260 [ 3004.505040] ? __ia32_sys_read+0xb0/0xb0 [ 3004.505730] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3004.506616] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3004.507488] do_syscall_64+0x33/0x40 [ 3004.508119] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 3004.508979] RIP: 0033:0x7fb03d693b19 [ 3004.509607] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3004.512791] RSP: 002b:00007fb03ac09188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 3004.514079] RAX: ffffffffffffffda RBX: 00007fb03d7a6f60 RCX: 00007fb03d693b19 [ 3004.515269] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 3004.516471] RBP: 00007fb03ac091d0 R08: 0000000000000000 R09: 0000000000000000 [ 3004.517663] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3004.518877] R13: 00007ffe77755f3f R14: 00007fb03ac09300 R15: 0000000000022000 06:00:19 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r1 = timerfd_create(0x0, 0x0) clock_gettime(0x0, 0x0) timerfd_settime(r1, 0x3, &(0x7f00000000c0)={{0x77359400}, {0x0, 0x989680}}, 0x0) clock_gettime(0x0, 0x0) timerfd_settime(r1, 0x0, &(0x7f0000000140), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@l2tp={0x2, 0x0, @local}, 0x80, &(0x7f00000001c0), 0x0, &(0x7f0000000200)=""/79, 0x4f}, 0x0, 0x0, 0x0, {0x1}}, 0x3) openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_getres(0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setns(0xffffffffffffffff, 0x10000000) r2 = openat$zero(0xffffffffffffff9c, 0x0, 0x2a0000, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r2) timerfd_settime(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x14, 0x1a, 0x101, 0x0, 0xfffffffd, {0x4}}, 0x14}}, 0x20000000) readv(0xffffffffffffffff, &(0x7f0000000180)=[{0x0}, {&(0x7f0000000400)=""/253, 0xfd}], 0x2) unshare(0x48020200) 06:00:19 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0xf84f, @mcast2, 0x31}, 0x1c) ioctl$TUNSETQUEUE(r1, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r2 = socket$inet(0x2, 0xa, 0xff7ffffd) ioctl$SNAPSHOT_UNFREEZE(r2, 0x3302) r3 = dup3(r2, r1, 0x0) r4 = syz_io_uring_setup(0x3157, &(0x7f0000000140), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x8006, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x40000000, 0x100000, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) syz_io_uring_submit(r7, r6, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r4, 0x58ab, 0x0, 0x0, 0x0, 0x0) r8 = ioctl$TUNGETDEVNETNS(r3, 0x54e3, 0x0) ftruncate(r8, 0x0) 06:00:19 executing program 4: socket$inet6_udp(0xa, 0x2, 0x0) socket$inet(0x2, 0xa, 0xff7ffffd) r0 = syz_io_uring_setup(0x3157, &(0x7f0000000140), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xf0ffffff7f0000) 06:00:19 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x935b}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x4000) 06:00:19 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x935b}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 12) [ 3004.559950] FAULT_INJECTION: forcing a failure. [ 3004.559950] name failslab, interval 1, probability 0, space 0, times 0 [ 3004.561965] CPU: 0 PID: 16922 Comm: syz-executor.2 Not tainted 5.10.202 #1 [ 3004.563055] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3004.564367] Call Trace: [ 3004.564793] dump_stack+0x107/0x167 [ 3004.565371] should_fail.cold+0x5/0xa [ 3004.565988] ? copy_process+0x5d2/0x7800 [ 3004.566633] should_failslab+0x5/0x20 [ 3004.567230] kmem_cache_alloc_node+0x55/0x330 [ 3004.567952] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3004.568790] copy_process+0x5d2/0x7800 [ 3004.569402] ? stack_trace_save+0x8c/0xc0 [ 3004.570064] ? stack_trace_consume_entry+0x160/0x160 [ 3004.570870] ? kasan_save_stack+0x32/0x40 [ 3004.571505] ? kasan_save_stack+0x1b/0x40 [ 3004.572154] ? create_io_worker+0xe8/0x620 [ 3004.572811] ? io_wqe_enqueue+0x69e/0xbe0 [ 3004.573459] ? __cleanup_sighand+0xb0/0xb0 [ 3004.574119] ? __lockdep_reset_lock+0x180/0x180 [ 3004.574844] ? lock_acquire+0x197/0x470 [ 3004.575460] ? create_object.isra.0+0x3ad/0xa20 [ 3004.576181] ? lock_release+0x680/0x680 [ 3004.576794] ? find_held_lock+0x2c/0x110 [ 3004.577426] ? io_wqe_dec_running+0x220/0x220 [ 3004.578126] create_io_thread+0xb6/0xf0 [ 3004.578736] ? pidfd_pid+0x90/0x90 [ 3004.579286] ? mark_held_locks+0x9e/0xe0 [ 3004.579915] ? io_wqe_dec_running+0x220/0x220 [ 3004.580621] ? __init_swait_queue_head+0xc6/0x150 [ 3004.581373] create_io_worker+0x23a/0x620 [ 3004.582021] io_wqe_enqueue+0x69e/0xbe0 [ 3004.582645] ? create_worker_cb+0x260/0x260 [ 3004.583322] ? io_prep_async_work+0x340/0x540 [ 3004.584021] io_queue_async_work+0x26b/0x4f0 [ 3004.584709] __io_queue_sqe+0x5cc/0x9d0 [ 3004.585328] ? io_issue_sqe+0x7700/0x7700 [ 3004.585988] io_submit_sqes+0x4461/0x85c0 [ 3004.586655] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 3004.587421] __do_sys_io_uring_enter+0x6b5/0x1920 [ 3004.588162] ? lock_downgrade+0x6d0/0x6d0 [ 3004.588806] ? find_held_lock+0x2c/0x110 [ 3004.589431] ? io_submit_sqes+0x85c0/0x85c0 [ 3004.590114] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3004.590865] ? wait_for_completion_io+0x270/0x270 [ 3004.591610] ? rcu_read_lock_any_held+0x75/0xa0 [ 3004.592313] ? vfs_write+0x354/0xa70 [ 3004.592887] ? fput_many+0x2f/0x1a0 [ 3004.593457] ? ksys_write+0x1a9/0x260 [ 3004.594061] ? __ia32_sys_read+0xb0/0xb0 [ 3004.594690] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3004.595488] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3004.596280] do_syscall_64+0x33/0x40 [ 3004.596852] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 3004.597634] RIP: 0033:0x7f68039deb19 [ 3004.598227] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3004.600996] RSP: 002b:00007f6800f54188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 3004.602156] RAX: ffffffffffffffda RBX: 00007f6803af1f60 RCX: 00007f68039deb19 [ 3004.603240] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 3004.604350] RBP: 00007f6800f541d0 R08: 0000000000000000 R09: 0000000000000000 [ 3004.605420] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3004.606522] R13: 00007ffddf06260f R14: 00007f6800f54300 R15: 0000000000022000 06:00:19 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x935b}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0x8, 0x76, 0x8b, 0x0, 0x0, 0x5, 0x228, 0x9, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x4, @perf_config_ext={0xffffffff, 0x80000001}, 0x40020, 0x100, 0xe5, 0x7, 0x3f, 0xb46a, 0x800, 0x0, 0x5, 0x0, 0x2}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x8) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 06:00:19 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000000040)={0x2, {0x2, 0x3, 0x7, 0x1, 0x3ff, 0x14}}) r4 = syz_open_dev$vcsa(0x0, 0xe11, 0x4000) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000000240)={'wg2\x00'}) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x6, 0x2010, r4, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x935b}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 06:00:19 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth1_to_hsr\x00'}) r1 = socket$inet(0x2, 0xa, 0xff7ffffd) ioctl$SNAPSHOT_UNFREEZE(r1, 0x3302) r2 = syz_io_uring_setup(0x3157, &(0x7f0000000140), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) r5 = socket$inet_icmp(0x2, 0x2, 0x1) getsockopt$IP_SET_OP_GET_FNAME(r5, 0x1, 0x53, &(0x7f0000000040)={0x8, 0x7, 0x0, 'syz1\x00'}, &(0x7f00000001c0)=0x2c) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) syz_io_uring_submit(r6, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) 06:00:19 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 44) 06:00:19 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000000040)={0x2, {0x2, 0x3, 0x7, 0x1, 0x3ff, 0x14}}) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x935b}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) syz_io_uring_submit(r4, r6, &(0x7f00000000c0)=@IORING_OP_OPENAT={0x12, 0x2, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000080)='./file0\x00', 0x10, 0x0, 0x12345}, 0x90b5) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) symlink(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file0\x00') io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 06:00:19 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r1 = socket$inet(0x2, 0xa, 0xff7ffffd) ioctl$SNAPSHOT_UNFREEZE(r1, 0x3302) r2 = syz_io_uring_setup(0x3157, &(0x7f0000000140), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) ioctl$SNAPSHOT_ATOMIC_RESTORE(0xffffffffffffffff, 0x3304) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) syz_io_uring_submit(r5, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0) 06:00:19 executing program 4: socket$inet6_udp(0xa, 0x2, 0x0) socket$inet(0x2, 0xa, 0xff7ffffd) r0 = syz_io_uring_setup(0x3157, &(0x7f0000000140), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x100000000000000) [ 3004.943902] FAULT_INJECTION: forcing a failure. [ 3004.943902] name failslab, interval 1, probability 0, space 0, times 0 [ 3004.946384] CPU: 1 PID: 16959 Comm: syz-executor.0 Not tainted 5.10.202 #1 [ 3004.947811] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3004.949501] Call Trace: [ 3004.950069] dump_stack+0x107/0x167 [ 3004.950847] should_fail.cold+0x5/0xa [ 3004.951641] ? create_object.isra.0+0x3a/0xa20 [ 3004.952574] should_failslab+0x5/0x20 [ 3004.953353] kmem_cache_alloc+0x5b/0x310 [ 3004.954206] ? find_held_lock+0x2c/0x110 [ 3004.955038] create_object.isra.0+0x3a/0xa20 [ 3004.955935] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3004.956960] __kmalloc_node+0x1ae/0x420 [ 3004.957789] memcg_alloc_page_obj_cgroups+0x73/0x100 [ 3004.958823] memcg_slab_post_alloc_hook+0x1f0/0x430 [ 3004.959843] kmem_cache_alloc_bulk+0x182/0x320 [ 3004.960782] io_submit_sqes+0x6f76/0x85c0 [ 3004.961664] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 3004.962690] __do_sys_io_uring_enter+0x6b5/0x1920 [ 3004.963681] ? lock_downgrade+0x6d0/0x6d0 [ 3004.964532] ? find_held_lock+0x2c/0x110 [ 3004.965373] ? io_submit_sqes+0x85c0/0x85c0 [ 3004.966270] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3004.967250] ? wait_for_completion_io+0x270/0x270 [ 3004.968236] ? rcu_read_lock_any_held+0x75/0xa0 [ 3004.969177] ? vfs_write+0x354/0xa70 [ 3004.969950] ? fput_many+0x2f/0x1a0 [ 3004.970688] ? ksys_write+0x1a9/0x260 [ 3004.971466] ? __ia32_sys_read+0xb0/0xb0 [ 3004.972293] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3004.973348] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3004.974408] do_syscall_64+0x33/0x40 [ 3004.975163] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 3004.976205] RIP: 0033:0x7fb03d693b19 [ 3004.976960] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3004.980687] RSP: 002b:00007fb03ac09188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 3004.982236] RAX: ffffffffffffffda RBX: 00007fb03d7a6f60 RCX: 00007fb03d693b19 [ 3004.983675] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 3004.985115] RBP: 00007fb03ac091d0 R08: 0000000000000000 R09: 0000000000000000 [ 3004.986561] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3004.988006] R13: 00007ffe77755f3f R14: 00007fb03ac09300 R15: 0000000000022000 06:00:19 executing program 3: socket$inet6_udp(0xa, 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000280)={'veth1_to_bond\x00'}) r1 = socket$inet(0x2, 0xa, 0xff7ffffd) ioctl$SNAPSHOT_UNFREEZE(r1, 0x3302) r2 = dup3(r1, r0, 0x0) r3 = syz_io_uring_setup(0x3157, &(0x7f0000000140)={0x0, 0xfffffffe, 0x0, 0x0, 0x74}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x8006, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x40000000, 0x100000, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000200)=@routing={0x49, 0xa, 0x1, 0xfa, 0x0, [@ipv4={'\x00', '\xff\xff', @private=0xa010102}, @remote, @mcast1, @private1, @empty]}, 0x58) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000f, 0x13, r3, 0x0) getsockopt$sock_buf(r2, 0x1, 0x3b, &(0x7f0000000040)=""/7, &(0x7f00000001c0)=0x7) syz_io_uring_submit(r6, r5, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r3, 0x58ab, 0x0, 0x0, 0x0, 0x0) 06:00:19 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_setup(0x34df, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x1}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r3, r6, &(0x7f0000000080)=@IORING_OP_TEE={0x21, 0x2, 0x0, @fd_index=0x7, 0x0, 0x0, 0x4, 0x1, 0x1}, 0x4) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x5, 0x0, 0x0, 0x6, &(0x7f0000000040)={0x77359400}, 0x1, 0x1, 0x1, {0x0, r7}}, 0x0) r8 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x935b}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r8, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 06:00:20 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x935b}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 13) 06:00:20 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x935b}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x800000) [ 3005.187975] FAULT_INJECTION: forcing a failure. [ 3005.187975] name failslab, interval 1, probability 0, space 0, times 0 [ 3005.189469] CPU: 0 PID: 16980 Comm: syz-executor.2 Not tainted 5.10.202 #1 [ 3005.190215] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3005.191109] Call Trace: [ 3005.191403] dump_stack+0x107/0x167 [ 3005.191806] should_fail.cold+0x5/0xa [ 3005.192228] ? create_object.isra.0+0x3a/0xa20 [ 3005.192718] should_failslab+0x5/0x20 [ 3005.193121] kmem_cache_alloc+0x5b/0x310 [ 3005.193555] create_object.isra.0+0x3a/0xa20 [ 3005.194055] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3005.194611] kmem_cache_alloc_node+0x169/0x330 [ 3005.195118] copy_process+0x5d2/0x7800 [ 3005.195539] ? stack_trace_save+0x8c/0xc0 [ 3005.195991] ? stack_trace_consume_entry+0x160/0x160 [ 3005.196542] ? kasan_save_stack+0x32/0x40 [ 3005.197000] ? kasan_save_stack+0x1b/0x40 [ 3005.197461] ? create_io_worker+0xe8/0x620 [ 3005.197920] ? io_wqe_enqueue+0x69e/0xbe0 [ 3005.198371] ? __cleanup_sighand+0xb0/0xb0 [ 3005.198832] ? __lockdep_reset_lock+0x180/0x180 [ 3005.199334] ? lock_acquire+0x197/0x470 [ 3005.199755] ? create_object.isra.0+0x3ad/0xa20 [ 3005.200259] ? lock_release+0x680/0x680 [ 3005.200683] ? find_held_lock+0x2c/0x110 [ 3005.201123] ? io_wqe_dec_running+0x220/0x220 [ 3005.201599] create_io_thread+0xb6/0xf0 [ 3005.202039] ? pidfd_pid+0x90/0x90 [ 3005.202413] ? mark_held_locks+0x9e/0xe0 [ 3005.202855] ? io_wqe_dec_running+0x220/0x220 [ 3005.203349] ? __init_swait_queue_head+0xc6/0x150 [ 3005.203862] create_io_worker+0x23a/0x620 [ 3005.204306] io_wqe_enqueue+0x69e/0xbe0 [ 3005.204732] ? create_worker_cb+0x260/0x260 [ 3005.205192] ? io_prep_async_work+0x340/0x540 [ 3005.205670] io_queue_async_work+0x26b/0x4f0 [ 3005.206159] __io_queue_sqe+0x5cc/0x9d0 [ 3005.206591] ? io_issue_sqe+0x7700/0x7700 [ 3005.207045] io_submit_sqes+0x4461/0x85c0 [ 3005.207505] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 3005.208041] __do_sys_io_uring_enter+0x6b5/0x1920 [ 3005.208561] ? lock_downgrade+0x6d0/0x6d0 [ 3005.209000] ? find_held_lock+0x2c/0x110 [ 3005.209436] ? io_submit_sqes+0x85c0/0x85c0 [ 3005.209907] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3005.210426] ? wait_for_completion_io+0x270/0x270 [ 3005.210947] ? rcu_read_lock_any_held+0x75/0xa0 [ 3005.211447] ? vfs_write+0x354/0xa70 [ 3005.211851] ? fput_many+0x2f/0x1a0 [ 3005.212253] ? ksys_write+0x1a9/0x260 [ 3005.212661] ? __ia32_sys_read+0xb0/0xb0 [ 3005.213098] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3005.213669] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3005.214235] do_syscall_64+0x33/0x40 [ 3005.214631] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 3005.215174] RIP: 0033:0x7f68039deb19 [ 3005.215573] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3005.217518] RSP: 002b:00007f6800f54188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 3005.218339] RAX: ffffffffffffffda RBX: 00007f6803af1f60 RCX: 00007f68039deb19 [ 3005.219102] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 3005.219856] RBP: 00007f6800f541d0 R08: 0000000000000000 R09: 0000000000000000 [ 3005.220615] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3005.221383] R13: 00007ffddf06260f R14: 00007f6800f54300 R15: 0000000000022000 06:00:33 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 45) 06:00:33 executing program 4: socket$inet6_udp(0xa, 0x2, 0x0) socket$inet(0x2, 0xa, 0xff7ffffd) r0 = syz_io_uring_setup(0x3157, &(0x7f0000000140), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x2000000000000000) 06:00:33 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x935b}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x2000000) 06:00:33 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) r6 = openat2(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000400)={0x180c2, 0x164, 0x2}, 0x18) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x10, r6, 0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, 0x0, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000740)={&(0x7f0000000180)=@in={0x2, 0x4e23, @multicast2}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000340)="dfa004e59101f7689e34b25cb02612a2f0e25e2ed5160344ab96680854035d7f696958c51d6d50cf46d639325068675951f4a52f0ae3e3ff529466f0d24db802a9823c2e342cf352f7a9fe6852c6807b2b529c520e7c1d76a342e5af50b2e2068a4e8ac5fb80e06cb55868c8e32b1239a2fbee9693db5662b9f65760589ded35951861adf0d3ef6833d72442210b31e2", 0x90}, {&(0x7f0000000780)="5866b6e4c983e038c70068aa87c08841c3e3a05959f7d5f24b7e70f682e2e2fcd1cb65aeed4ec26b6fd7e7e431ae16fe3df73d387c7230ee71336bf24d333ff677a73809cd4c3250d1e4db431d72cb94cff061fe5d5e9f693fe0797eb9910d336fc5e849a421b52ab0e8abc97d4f3c6a56771560071b17d23f65309a6b66de13103e6446587a75c68219f2952c7dadc60dfd59337fc1759014e31afad5dc91dba0d09a705d867a4d0e9a6339d026a0f2419c06f50a5652d52ed05dc5704e04c378caa0be8170133bb599ebedceb6e68b82b5d13fe0ee1b2d3d3d2b38107096238a158c2f927763ce3e905712afd3d4ef", 0xf0}], 0x2, &(0x7f0000000500)=[{0x100, 0x109, 0x1, "7d299a2ac4860172043d1f6d8c2da946685a17e63ba4ff8e8b40da6cb1c9e0c85e9c638d3e9153575471932946b9eaa0866f2843a5dc5a9756d694056ef8cdb4e8c8277626ce42a5984582dddbc8605bef71f4063500e5065056df99320650f4e1734500f7402b8cab8961a040c21c9b36f8e09de3ccce47048db13a6364d60b5301900c17692779e68d8da3fad29805082d87864fa6fa76fa3d946b098a3beaf3dbe0b27e41d4db2b7a0db7079666b1990dd5d346e696a835ec54d2dd7b33624effe73d78551498f66e49cf04adeea51153e95579c1095db5226fecdcab8eddb114146198b915ea76"}, {0x70, 0x10c, 0x4, "40f7655c7668b1951ea6f7b064a37803f9a4fe936acfb59f2bc87eac0b6bba58cf56b8d8f81c03a571340ca9d59904ac2563591ba2d071f02b1f94cf6b16e9615f0d1ffd08afbc39765458f38d9c7505bc1ffc3f138eae36eca35c"}, {0xb8, 0x118, 0xdf7c, "e90daa2499e0ca5abc1ac968e6881ddf01dd8e117d233628a1509922619ed5e0103645fe7e33caac0292ba1d0a6ffd892147968521513e884a4fe599a9d5fec10eed20cc44ffa42fbf597446a84b0f79474ca8aeb588aad0147c9f327a95baed30854ff7bfcc7d9bbc8f8ab75e5f9c3d7ea6f8829eb9555f52d85c30b0c8adae009e185583246327bac01a83d37ca589de71d80c8a782212bacc38d760076b089c3b6f"}], 0x228}, 0x0, 0xc0, 0x4a0a88b65f0a1bf4, {0x0, r7}}, 0x80000001) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) r8 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r9 = syz_open_dev$vcsa(0x0, 0xe11, 0x4000) ioctl$ifreq_SIOCGIFINDEX_wireguard(r9, 0x8933, &(0x7f0000000240)={'wg2\x00'}) fcntl$setownex(r9, 0xf, &(0x7f0000000080)={0x0, 0xffffffffffffffff}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x935b}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r8, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r10 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x644e2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000002580)={0x0, 0x0, {}, {}, {0x0, @struct, 0x0}}) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f00000000c0)={r11, 0x0, 0x20}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r10, 0xc0189379, &(0x7f0000000080)=ANY=[@ANYRESHEX, @ANYRES32=r11, @ANYRESHEX]) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, &(0x7f0000000880)={0x2, 0x7fe2428b, @start={r11, 0x0, "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", "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"}, [0x20000000000000, 0xffffffff, 0x839b, 0x1, 0x1f, 0x8, 0x7f, 0xffff, 0x4, 0x6, 0x0, 0x10000, 0xffff, 0x8, 0x4, 0x1000, 0x80000000, 0x101, 0x7f, 0x10000, 0x9, 0x9, 0x6, 0x6, 0x5, 0x9ad, 0x3, 0x2, 0x2, 0x1000, 0x4, 0x401, 0x0, 0x4cf, 0x7f, 0xffffffffffff4915, 0x0, 0x0, 0x10001, 0x8, 0x3ff, 0x83b9, 0x5, 0x2, 0x7a8, 0x7fff, 0x6, 0x3, 0x7, 0x8, 0x62, 0xa6, 0xfffffffffffff599, 0x10000, 0x9, 0x2, 0x6, 0xce16, 0x100000001, 0x7, 0x8, 0x3ff, 0x7, 0x189]}) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 06:00:33 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'wlan1\x00'}) r1 = socket$inet(0x2, 0xa, 0xff7ffffd) ioctl$SNAPSHOT_UNFREEZE(r1, 0x3302) r2 = syz_io_uring_setup(0x3157, &(0x7f0000000140), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) syz_io_uring_submit(r5, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0) 06:00:33 executing program 3: socket$inet6_udp(0xa, 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KIOCSOUND(r1, 0x4b2f, 0x1) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KIOCSOUND(r2, 0x4b2f, 0x1) r3 = syz_open_dev$sg(&(0x7f0000000040), 0xffffffff, 0x4000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f00000001c0)) r4 = socket$inet(0x2, 0xa, 0xff7ffffd) ioctl$SNAPSHOT_UNFREEZE(r4, 0x3302) dup3(r4, r0, 0x0) r5 = syz_io_uring_setup(0x3157, &(0x7f0000000140), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)=0x0) r7 = open(&(0x7f00000003c0)='./file0\x00', 0x220840, 0x100) ioctl$TUNSETLINK(r7, 0x400454cd, 0x336) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x8006, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x40000000, 0x100000, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r5, 0x0) syz_io_uring_submit(r8, r6, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r5, 0x58ab, 0x0, 0x0, 0x0, 0x0) 06:00:33 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000340)='environ\x00') r1 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x3fba, 0x2, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r4 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) ioctl$TIOCL_SETSEL(r4, 0x541c, &(0x7f0000000040)={0x2, {0x2, 0x3, 0x7, 0x1, 0x3ff, 0x14}}) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x935b}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = dup2(r4, r1) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000002800)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000900)={0x24, r7, 0x1, 0x0, 0x0, {0x8}, [@ETHTOOL_A_EEE_HEADER={0x4}, @ETHTOOL_A_EEE_MODES_OURS={0xc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x8, 0x3, 0x0, 0x1, [{0x4, 0x2}]}]}]}, 0x24}}, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_GET(r6, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x3c, r7, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x88c0}, 0x4000000) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r9, &(0x7f0000000080)=@IORING_OP_WRITE_FIXED={0x5, 0x3, 0x4000, @fd, 0xffffffff80000001, 0x5, 0x1, 0x18, 0x0, {0x2}}, 0x7fff) syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) r10 = socket$inet(0x2, 0x6, 0x3c) r11 = syz_open_dev$vcsa(0x0, 0xe11, 0x4000) ioctl$ifreq_SIOCGIFINDEX_wireguard(r11, 0x8933, &(0x7f0000000240)={'wg2\x00'}) dup3(r10, r11, 0x0) 06:00:33 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x935b}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 14) [ 3019.007859] FAULT_INJECTION: forcing a failure. [ 3019.007859] name failslab, interval 1, probability 0, space 0, times 0 [ 3019.010643] CPU: 0 PID: 17013 Comm: syz-executor.0 Not tainted 5.10.202 #1 [ 3019.012298] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3019.014308] Call Trace: [ 3019.014505] FAULT_INJECTION: forcing a failure. [ 3019.014505] name failslab, interval 1, probability 0, space 0, times 0 [ 3019.014939] dump_stack+0x107/0x167 [ 3019.014972] should_fail.cold+0x5/0xa [ 3019.014998] ? create_object.isra.0+0x3a/0xa20 [ 3019.015024] should_failslab+0x5/0x20 [ 3019.015046] kmem_cache_alloc+0x5b/0x310 [ 3019.015078] ? mark_held_locks+0x9e/0xe0 [ 3019.022933] create_object.isra.0+0x3a/0xa20 [ 3019.023981] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3019.025199] kmem_cache_alloc_bulk+0x168/0x320 [ 3019.026317] io_submit_sqes+0x6f76/0x85c0 [ 3019.027341] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 3019.028518] __do_sys_io_uring_enter+0x6b5/0x1920 [ 3019.029650] ? lock_downgrade+0x6d0/0x6d0 [ 3019.030626] ? find_held_lock+0x2c/0x110 [ 3019.031592] ? io_submit_sqes+0x85c0/0x85c0 [ 3019.032623] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3019.033768] ? wait_for_completion_io+0x270/0x270 [ 3019.034929] ? rcu_read_lock_any_held+0x75/0xa0 [ 3019.036024] ? vfs_write+0x354/0xa70 [ 3019.036915] ? fput_many+0x2f/0x1a0 [ 3019.037792] ? ksys_write+0x1a9/0x260 [ 3019.038704] ? __ia32_sys_read+0xb0/0xb0 [ 3019.039690] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3019.040928] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3019.042197] do_syscall_64+0x33/0x40 [ 3019.043082] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 3019.044288] RIP: 0033:0x7fb03d693b19 [ 3019.045185] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3019.049558] RSP: 002b:00007fb03ac09188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 3019.051397] RAX: ffffffffffffffda RBX: 00007fb03d7a6f60 RCX: 00007fb03d693b19 [ 3019.053096] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 3019.054814] RBP: 00007fb03ac091d0 R08: 0000000000000000 R09: 0000000000000000 [ 3019.056506] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3019.058213] R13: 00007ffe77755f3f R14: 00007fb03ac09300 R15: 0000000000022000 [ 3019.059946] CPU: 1 PID: 17011 Comm: syz-executor.2 Not tainted 5.10.202 #1 [ 3019.061422] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3019.063106] Call Trace: [ 3019.063645] dump_stack+0x107/0x167 [ 3019.064381] should_fail.cold+0x5/0xa [ 3019.065147] ? create_object.isra.0+0x3a/0xa20 [ 3019.066073] should_failslab+0x5/0x20 [ 3019.066837] kmem_cache_alloc+0x5b/0x310 [ 3019.067653] ? lock_acquire+0x197/0x470 [ 3019.068454] create_object.isra.0+0x3a/0xa20 [ 3019.069337] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3019.070387] kmem_cache_alloc_node_trace+0x16d/0x340 [ 3019.071423] create_io_worker+0xe8/0x620 [ 3019.072266] io_wqe_enqueue+0x69e/0xbe0 [ 3019.073072] ? create_worker_cb+0x260/0x260 [ 3019.073988] ? io_prep_async_work+0x340/0x540 [ 3019.074922] io_queue_async_work+0x26b/0x4f0 [ 3019.075817] __io_queue_sqe+0x5cc/0x9d0 [ 3019.076614] ? io_issue_sqe+0x7700/0x7700 [ 3019.077464] io_submit_sqes+0x4461/0x85c0 [ 3019.078346] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 3019.079347] __do_sys_io_uring_enter+0x6b5/0x1920 [ 3019.080320] ? lock_downgrade+0x6d0/0x6d0 [ 3019.081154] ? find_held_lock+0x2c/0x110 [ 3019.081990] ? io_submit_sqes+0x85c0/0x85c0 [ 3019.082889] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3019.083867] ? wait_for_completion_io+0x270/0x270 [ 3019.084833] ? rcu_read_lock_any_held+0x75/0xa0 [ 3019.085756] ? vfs_write+0x354/0xa70 [ 3019.086517] ? fput_many+0x2f/0x1a0 [ 3019.087249] ? ksys_write+0x1a9/0x260 [ 3019.088015] ? __ia32_sys_read+0xb0/0xb0 [ 3019.088829] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3019.089873] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3019.090914] do_syscall_64+0x33/0x40 [ 3019.091665] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 3019.092693] RIP: 0033:0x7f68039deb19 [ 3019.093438] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3019.097112] RSP: 002b:00007f6800f54188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 3019.098650] RAX: ffffffffffffffda RBX: 00007f6803af1f60 RCX: 00007f68039deb19 [ 3019.100071] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 3019.101493] RBP: 00007f6800f541d0 R08: 0000000000000000 R09: 0000000000000000 [ 3019.102937] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3019.104361] R13: 00007ffddf06260f R14: 00007f6800f54300 R15: 0000000000022000 06:00:34 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x4, 0x0, @fd_index}, 0xfffffffd) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) r7 = syz_open_dev$vcsa(0x0, 0xe11, 0x4000) ioctl$ifreq_SIOCGIFINDEX_wireguard(r7, 0x8933, &(0x7f0000000240)={'wg2\x00'}) syz_io_uring_submit(r3, r6, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0, 0x26c1629dd91b6fa9}, 0x1) r8 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x935b}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r8, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 06:00:34 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x935b}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 15) 06:00:34 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r1 = socket$inet(0x2, 0xa, 0xff7ffffd) ioctl$SNAPSHOT_UNFREEZE(r1, 0x3302) r2 = syz_io_uring_setup(0x3157, &(0x7f0000000140), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000040)) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r6, 0x20, 0x70bd27, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000040}, 0x20040000) syz_io_uring_submit(r5, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1000000, 0x12, r2, 0x0) io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0) 06:00:34 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) pread64(0xffffffffffffffff, &(0x7f0000000240)=""/94, 0x61, 0x50a08d3f) r1 = socket$inet(0x2, 0xe, 0xff7ffffd) ioctl$SNAPSHOT_UNFREEZE(r1, 0x3302) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0x3, &(0x7f00000001c0), 0x1, 0x1, 0x1}, 0x9) r2 = dup3(r1, r0, 0x0) r3 = syz_io_uring_setup(0x3157, &(0x7f0000000140), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x8006, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x40000000, 0x100000, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xf, r2, 0x0) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) syz_io_uring_submit(r6, r5, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r3, 0x58ab, 0x0, 0x0, 0x0, 0x0) r7 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000000, 0x10010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r7, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x1f, 0x0, 0x0, 0x0, {0x204}}, 0x9) pipe(&(0x7f0000003fc0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r8, 0xc0045878, 0x0) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r7, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r9}}, 0x800) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_FADVISE={0x18, 0x1, 0x0, @fd, 0x8, 0x0, 0x8, 0x0, 0x1, {0x0, r9}}, 0x9662) 06:00:34 executing program 4: socket$inet6_udp(0xa, 0x2, 0x0) socket$inet(0x2, 0xa, 0xff7ffffd) r0 = syz_io_uring_setup(0x3157, &(0x7f0000000140), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x95ffffffffffffff) 06:00:34 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 46) 06:00:34 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) io_uring_enter(r0, 0x6271, 0xa5a7, 0x2, &(0x7f0000000080)={[0x10001]}, 0x8) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000000040)={0x2, {0x2, 0x3, 0x7, 0x1, 0x3ff, 0x14}}) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x935b}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 06:00:34 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x935b}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x5000000) [ 3019.576086] FAULT_INJECTION: forcing a failure. [ 3019.576086] name failslab, interval 1, probability 0, space 0, times 0 [ 3019.578403] CPU: 0 PID: 17065 Comm: syz-executor.0 Not tainted 5.10.202 #1 [ 3019.579786] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3019.581437] Call Trace: [ 3019.581971] dump_stack+0x107/0x167 [ 3019.582732] should_fail.cold+0x5/0xa [ 3019.583499] ? create_io_worker+0xe8/0x620 [ 3019.584355] should_failslab+0x5/0x20 [ 3019.585131] kmem_cache_alloc_node_trace+0x59/0x340 [ 3019.586169] create_io_worker+0xe8/0x620 [ 3019.587015] io_wqe_enqueue+0x69e/0xbe0 [ 3019.587840] ? create_worker_cb+0x260/0x260 [ 3019.588743] ? io_prep_async_work+0x340/0x540 [ 3019.589680] io_queue_async_work+0x26b/0x4f0 [ 3019.590595] __io_queue_sqe+0x5cc/0x9d0 [ 3019.591420] ? io_issue_sqe+0x7700/0x7700 [ 3019.592292] io_submit_sqes+0x4461/0x85c0 [ 3019.593174] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 3019.594207] __do_sys_io_uring_enter+0x6b5/0x1920 [ 3019.595199] ? lock_downgrade+0x6d0/0x6d0 [ 3019.596045] ? find_held_lock+0x2c/0x110 [ 3019.596887] ? io_submit_sqes+0x85c0/0x85c0 [ 3019.597783] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3019.598783] ? wait_for_completion_io+0x270/0x270 [ 3019.599767] ? rcu_read_lock_any_held+0x75/0xa0 [ 3019.600713] ? vfs_write+0x354/0xa70 [ 3019.601478] ? fput_many+0x2f/0x1a0 [ 3019.602242] ? ksys_write+0x1a9/0x260 [ 3019.603020] ? __ia32_sys_read+0xb0/0xb0 [ 3019.603864] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3019.604933] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3019.605989] do_syscall_64+0x33/0x40 [ 3019.606782] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 3019.607822] RIP: 0033:0x7fb03d693b19 [ 3019.608601] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3019.612373] RSP: 002b:00007fb03ac09188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 3019.613905] RAX: ffffffffffffffda RBX: 00007fb03d7a6f60 RCX: 00007fb03d693b19 [ 3019.615347] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 3019.616786] RBP: 00007fb03ac091d0 R08: 0000000000000000 R09: 0000000000000000 [ 3019.618233] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3019.619665] R13: 00007ffe77755f3f R14: 00007fb03ac09300 R15: 0000000000022000 06:00:50 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000300)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) socket$inet6_udp(0xa, 0x2, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) r3 = syz_open_dev$vcsa(0x0, 0xe11, 0x4000) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000240)={'wg2\x00'}) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f00000001c0)={@in={{0x2, 0x4e24, @multicast2}}, 0x0, 0x0, 0x12, 0x0, "e7c8e9312534edcb4ac46e5f76166260c0e7c9e145862a01f2e0c1dab8eea19e49270911b063bbd0c9f19e745d2eef8490edbb80a5bc3b11869e556a3ebf82c4f5b54332f1aa782eb5ea8f2447cecc73"}, 0xd8) ioctl$TUNSETQUEUE(r2, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r4 = socket$inet(0x2, 0xa, 0xff7ffffd) ioctl$SNAPSHOT_UNFREEZE(r4, 0x3302) r5 = dup3(r4, r2, 0x0) r6 = syz_io_uring_setup(0x3157, &(0x7f0000000140), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) faccessat2(r5, &(0x7f0000000340)='./file0\x00', 0x0, 0x1200) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x8006, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x40000000, 0x100000, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r6, 0x0) syz_io_uring_submit(r9, r8, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r6, 0x58ab, 0x0, 0x0, 0x0, 0x0) 06:00:50 executing program 6: r0 = syz_open_dev$vcsa(0x0, 0xe11, 0x4000) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000240)={'wg2\x00'}) r1 = syz_io_uring_setup(0x1272, &(0x7f00000002c0)={0x0, 0x0, 0x20, 0x0, 0x24b, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x935b}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r1, {0x9, 0x2}}, './file0\x00'}) syz_io_uring_submit(r4, r3, &(0x7f0000000280)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd=r5}, 0x1) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) r6 = syz_open_dev$vcsa(0x0, 0xe11, 0x4000) ioctl$ifreq_SIOCGIFINDEX_wireguard(r6, 0x8933, &(0x7f0000000240)={'wg2\x00'}) io_uring_register$IORING_REGISTER_BUFFERS(r6, 0x0, &(0x7f0000000180)=[{&(0x7f0000000340)=""/199, 0xc7}, {&(0x7f0000000440)=""/197, 0xc5}, {&(0x7f0000000540)=""/218, 0xda}, {&(0x7f0000000040)=""/134, 0x86}], 0x4) 06:00:50 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x935b}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 06:00:50 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000000040)={0x2, {0x2, 0x3, 0x7, 0x1, 0x3ff, 0x14}}) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x935b}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) syz_io_uring_submit(r4, r6, &(0x7f0000000080)=@IORING_OP_POLL_REMOVE={0x7, 0x4}, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 06:00:50 executing program 4: socket$inet6_udp(0xa, 0x2, 0x0) socket$inet(0x2, 0xa, 0xff7ffffd) r0 = syz_io_uring_setup(0x3157, &(0x7f0000000140), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xffffffffffffff95) 06:00:50 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r1 = socket$inet(0x2, 0xa, 0xff7ffffd) ioctl$SNAPSHOT_UNFREEZE(r1, 0x3302) r2 = syz_io_uring_setup(0x3157, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x4, 0x35}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) syz_io_uring_submit(r5, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r6 = syz_open_dev$vcsa(0x0, 0xe11, 0x4000) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, r7, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=@pppol2tpv3={0x18, 0x1, {0x0, r6, {0x2, 0x4e23, @multicast2}, 0x4, 0x3, 0x0, 0x4}}, 0x80, &(0x7f0000000040)}, 0x0, 0x4, 0x1}, 0x7) ioctl$ifreq_SIOCGIFINDEX_wireguard(r6, 0x8933, &(0x7f0000000240)={'wg2\x00'}) lstat(&(0x7f00000009c0)='./file0\x00', &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TUNSETOWNER(r6, 0x400454cc, r8) io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0) 06:00:50 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x935b}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x62e0000) [ 3035.794055] FAULT_INJECTION: forcing a failure. [ 3035.794055] name failslab, interval 1, probability 0, space 0, times 0 [ 3035.795465] CPU: 0 PID: 17120 Comm: syz-executor.0 Not tainted 5.10.202 #1 [ 3035.796287] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3035.797273] Call Trace: [ 3035.797596] dump_stack+0x107/0x167 [ 3035.798038] should_fail.cold+0x5/0xa [ 3035.798518] ? create_object.isra.0+0x3a/0xa20 06:00:50 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 47) [ 3035.799062] should_failslab+0x5/0x20 [ 3035.799650] kmem_cache_alloc+0x5b/0x310 [ 3035.800137] create_object.isra.0+0x3a/0xa20 [ 3035.800660] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3035.801264] kmem_cache_alloc_bulk+0x168/0x320 [ 3035.801808] io_submit_sqes+0x6f76/0x85c0 [ 3035.802339] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 3035.802931] __do_sys_io_uring_enter+0x6b5/0x1920 [ 3035.803502] ? lock_downgrade+0x6d0/0x6d0 [ 3035.803995] ? find_held_lock+0x2c/0x110 [ 3035.804482] ? io_submit_sqes+0x85c0/0x85c0 [ 3035.804999] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3035.805581] ? wait_for_completion_io+0x270/0x270 [ 3035.806149] ? rcu_read_lock_any_held+0x75/0xa0 [ 3035.806709] ? vfs_write+0x354/0xa70 [ 3035.807153] ? fput_many+0x2f/0x1a0 [ 3035.807594] ? ksys_write+0x1a9/0x260 [ 3035.808047] ? __ia32_sys_read+0xb0/0xb0 [ 3035.808541] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3035.809156] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3035.809773] do_syscall_64+0x33/0x40 [ 3035.810211] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 3035.810834] RIP: 0033:0x7fb03d693b19 [ 3035.811285] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3035.813464] RSP: 002b:00007fb03ac09188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 3035.814375] RAX: ffffffffffffffda RBX: 00007fb03d7a6f60 RCX: 00007fb03d693b19 [ 3035.815216] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 3035.816058] RBP: 00007fb03ac091d0 R08: 0000000000000000 R09: 0000000000000000 [ 3035.816886] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3035.817729] R13: 00007ffe77755f3f R14: 00007fb03ac09300 R15: 0000000000022000 06:00:50 executing program 7: io_uring_enter(0xffffffffffffffff, 0x6bf1, 0x2255, 0x3, &(0x7f0000000080)={[0x4]}, 0x8) r0 = io_uring_setup(0x7b6a, &(0x7f0000000180)={0x0, 0xc0b2, 0x4, 0x2, 0xd1}) r1 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_setup(0x509f, &(0x7f0000000240)={0x0, 0x315e, 0x10, 0x1, 0x3a9, 0x0, r1}, &(0x7f0000ffa000/0x5000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000340)) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) syz_io_uring_submit(r4, r6, &(0x7f0000000380)=@IORING_OP_CLOSE={0x13, 0x1, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x80000001) r7 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) ioctl$TIOCL_SETSEL(r7, 0x541c, &(0x7f0000000040)={0x2, {0x2, 0x3, 0x7, 0x1, 0x3ff, 0x14}}) r8 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x935b}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r8, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) 06:00:50 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x6763, 0x0, 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x935b}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r4 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) sendmsg$FOU_CMD_GET(r4, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, 0x0, 0x0, 0x70bd2a, 0x25dfdbfb, {}, [@FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x3a}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @mcast1}, @FOU_ATTR_PEER_V4={0x8, 0x8, @remote}]}, 0x40}, 0x1, 0x0, 0x0, 0x4004011}, 0x88c9) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000003, 0x4010, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 06:00:50 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x935b}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 06:00:50 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 48) [ 3036.064462] FAULT_INJECTION: forcing a failure. [ 3036.064462] name failslab, interval 1, probability 0, space 0, times 0 [ 3036.065789] CPU: 0 PID: 17154 Comm: syz-executor.0 Not tainted 5.10.202 #1 [ 3036.066558] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3036.067466] Call Trace: [ 3036.067778] dump_stack+0x107/0x167 [ 3036.068193] should_fail.cold+0x5/0xa [ 3036.068617] ? create_object.isra.0+0x3a/0xa20 [ 3036.069113] should_failslab+0x5/0x20 [ 3036.069525] kmem_cache_alloc+0x5b/0x310 [ 3036.069968] ? mark_held_locks+0x9e/0xe0 [ 3036.070429] create_object.isra.0+0x3a/0xa20 [ 3036.070910] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3036.071466] kmem_cache_alloc_bulk+0x168/0x320 [ 3036.071963] io_submit_sqes+0x6f76/0x85c0 [ 3036.072430] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 3036.072972] __do_sys_io_uring_enter+0x6b5/0x1920 [ 3036.073497] ? lock_downgrade+0x6d0/0x6d0 [ 3036.073939] ? find_held_lock+0x2c/0x110 [ 3036.074389] ? io_submit_sqes+0x85c0/0x85c0 [ 3036.074872] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3036.075425] ? wait_for_completion_io+0x270/0x270 [ 3036.075959] ? rcu_read_lock_any_held+0x75/0xa0 [ 3036.076470] ? vfs_write+0x354/0xa70 [ 3036.076872] ? fput_many+0x2f/0x1a0 [ 3036.077275] ? ksys_write+0x1a9/0x260 [ 3036.077685] ? __ia32_sys_read+0xb0/0xb0 [ 3036.078118] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3036.078702] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3036.079266] do_syscall_64+0x33/0x40 [ 3036.079675] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 3036.080238] RIP: 0033:0x7fb03d693b19 [ 3036.080636] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3036.082628] RSP: 002b:00007fb03ac09188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 3036.083475] RAX: ffffffffffffffda RBX: 00007fb03d7a6f60 RCX: 00007fb03d693b19 [ 3036.084278] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 3036.085065] RBP: 00007fb03ac091d0 R08: 0000000000000000 R09: 0000000000000000 [ 3036.085851] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3036.086656] R13: 00007ffe77755f3f R14: 00007fb03ac09300 R15: 0000000000022000 06:01:06 executing program 3: socket$inet6_udp(0xa, 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r1 = socket$inet(0x2, 0xa, 0xff7ffffd) ioctl$SNAPSHOT_UNFREEZE(r1, 0x3302) dup3(r1, r0, 0x0) r2 = syz_io_uring_setup(0x3157, &(0x7f0000000140), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x8006, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x40000000, 0x100000, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) syz_io_uring_submit(r5, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0) 06:01:06 executing program 7: syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r2 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000000040)={0x2, {0x2, 0x3, 0x7, 0x1, 0x3ff, 0x14}}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x14, 0x12, r2, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x4000, 0x0) sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000780), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x80) r3 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8002}, 0xc, &(0x7f0000000300)={&(0x7f0000000580)=ANY=[@ANYBLOB="fc00000062d064", @ANYRES16=r3, @ANYBLOB="01002dbd7000fedbdf251c000000080001007063690011000200303030303a30303a31302e300000000008000b00060000000e0001006e657464657673696d0000000f0002006e65746400f373696d30000008000b00a60000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000b00"], 0xfc}, 0x1, 0x0, 0x0, 0x40004000}, 0x0) r4 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r4, &(0x7f0000000180)="d9739dd28962", 0x6) r5 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r5, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2a86e9904692abff, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r6, &(0x7f0000000400)=@IORING_OP_SPLICE={0x1e, 0x5, 0x0, @fd=r5, 0x3f, {}, 0x2, 0x11, 0x1, {0x0, 0x0, r4}}, 0xff) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x108000}) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000380), 0x2, 0x0) 06:01:06 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 49) 06:01:06 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r1 = socket$inet(0x2, 0xa, 0xff7ffffd) ioctl$SNAPSHOT_UNFREEZE(r1, 0x3302) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r1, 0x6628) r2 = syz_io_uring_setup(0x3157, &(0x7f0000000140), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) syz_io_uring_submit(r5, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0) 06:01:06 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x935b}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x72e0000) 06:01:06 executing program 4: socket$inet6_udp(0xa, 0x2, 0x0) socket$inet(0x2, 0xa, 0xff7ffffd) r0 = syz_io_uring_setup(0x3157, &(0x7f0000000140), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xffffffffffffffff) 06:01:06 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) io_uring_enter(r0, 0x76a9, 0x13c7, 0x1, &(0x7f0000000040)={[0xfff]}, 0x8) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x935b}, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 06:01:06 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x935b}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x2, 0x0, 0x0, 0x0) [ 3051.967004] FAULT_INJECTION: forcing a failure. [ 3051.967004] name failslab, interval 1, probability 0, space 0, times 0 [ 3051.968692] CPU: 0 PID: 17182 Comm: syz-executor.0 Not tainted 5.10.202 #1 [ 3051.969703] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3051.970918] Call Trace: [ 3051.971306] dump_stack+0x107/0x167 [ 3051.971839] should_fail.cold+0x5/0xa [ 3051.972378] ? create_object.isra.0+0x3a/0xa20 [ 3051.973030] should_failslab+0x5/0x20 [ 3051.973565] kmem_cache_alloc+0x5b/0x310 [ 3051.974145] ? mark_held_locks+0x9e/0xe0 [ 3051.974738] create_object.isra.0+0x3a/0xa20 [ 3051.975367] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3051.975969] kmem_cache_alloc_bulk+0x168/0x320 [ 3051.976526] io_submit_sqes+0x6f76/0x85c0 [ 3051.977135] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 3051.977844] __do_sys_io_uring_enter+0x6b5/0x1920 [ 3051.978537] ? lock_downgrade+0x6d0/0x6d0 [ 3051.979123] ? find_held_lock+0x2c/0x110 [ 3051.979704] ? io_submit_sqes+0x85c0/0x85c0 [ 3051.980329] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3051.981024] ? wait_for_completion_io+0x270/0x270 [ 3051.981712] ? rcu_read_lock_any_held+0x75/0xa0 [ 3051.982369] ? vfs_write+0x354/0xa70 [ 3051.982917] ? fput_many+0x2f/0x1a0 [ 3051.983440] ? ksys_write+0x1a9/0x260 [ 3051.983984] ? __ia32_sys_read+0xb0/0xb0 [ 3051.984563] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3051.985301] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3051.986038] do_syscall_64+0x33/0x40 [ 3051.986582] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 3051.987300] RIP: 0033:0x7fb03d693b19 [ 3051.987829] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3051.990413] RSP: 002b:00007fb03ac09188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 3051.991494] RAX: ffffffffffffffda RBX: 00007fb03d7a6f60 RCX: 00007fb03d693b19 [ 3051.992494] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 3051.993488] RBP: 00007fb03ac091d0 R08: 0000000000000000 R09: 0000000000000000 [ 3051.994311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3051.995114] R13: 00007ffe77755f3f R14: 00007fb03ac09300 R15: 0000000000022000 06:01:07 executing program 5: openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) r0 = socket$inet(0x2, 0xa, 0xff7ffffd) ioctl$SNAPSHOT_UNFREEZE(r0, 0x3302) r1 = io_uring_setup(0x1731, &(0x7f00000001c0)={0x0, 0x47f9, 0x10, 0x2, 0x1b3}) r2 = syz_io_uring_setup(0x1554, &(0x7f0000000240)={0x0, 0x29c1, 0x2, 0x1, 0xf9, 0x0, r1}, &(0x7f0000ff4000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) syz_io_uring_submit(r5, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0) 06:01:07 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) r3 = syz_io_uring_setup(0x1108, &(0x7f0000000040)={0x0, 0x922f, 0x10, 0x6, 0x3c6}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000240), &(0x7f0000000180)) io_uring_enter(r3, 0x7c00, 0xe8bc, 0x0, &(0x7f00000001c0)={[0x9]}, 0x8) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x935b}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 06:01:07 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 50) 06:01:07 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x935b}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x5, 0x0, 0x0, 0x0) [ 3052.261534] FAULT_INJECTION: forcing a failure. [ 3052.261534] name failslab, interval 1, probability 0, space 0, times 0 [ 3052.263915] CPU: 1 PID: 17230 Comm: syz-executor.0 Not tainted 5.10.202 #1 [ 3052.265344] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3052.267076] Call Trace: [ 3052.267623] dump_stack+0x107/0x167 [ 3052.268379] should_fail.cold+0x5/0xa [ 3052.269161] ? create_object.isra.0+0x3a/0xa20 [ 3052.270094] should_failslab+0x5/0x20 [ 3052.270890] kmem_cache_alloc+0x5b/0x310 [ 3052.271724] ? mark_held_locks+0x9e/0xe0 [ 3052.272562] create_object.isra.0+0x3a/0xa20 [ 3052.273465] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3052.274518] kmem_cache_alloc_bulk+0x168/0x320 [ 3052.275462] io_submit_sqes+0x6f76/0x85c0 [ 3052.276346] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 3052.277362] __do_sys_io_uring_enter+0x6b5/0x1920 [ 3052.278351] ? lock_downgrade+0x6d0/0x6d0 [ 3052.279222] ? find_held_lock+0x2c/0x110 [ 3052.280059] ? io_submit_sqes+0x85c0/0x85c0 [ 3052.280951] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3052.281943] ? wait_for_completion_io+0x270/0x270 [ 3052.282953] ? rcu_read_lock_any_held+0x75/0xa0 [ 3052.283900] ? vfs_write+0x354/0xa70 [ 3052.284669] ? fput_many+0x2f/0x1a0 [ 3052.285423] ? ksys_write+0x1a9/0x260 [ 3052.286203] ? __ia32_sys_read+0xb0/0xb0 [ 3052.287053] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3052.288125] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3052.289188] do_syscall_64+0x33/0x40 [ 3052.289953] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 3052.291022] RIP: 0033:0x7fb03d693b19 [ 3052.291787] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3052.295554] RSP: 002b:00007fb03ac09188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 3052.297131] RAX: ffffffffffffffda RBX: 00007fb03d7a6f60 RCX: 00007fb03d693b19 [ 3052.298608] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 3052.300087] RBP: 00007fb03ac091d0 R08: 0000000000000000 R09: 0000000000000000 [ 3052.301553] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3052.303044] R13: 00007ffe77755f3f R14: 00007fb03ac09300 R15: 0000000000022000 06:01:07 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = syz_open_dev$vcsa(0x0, 0xe11, 0x4000) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000000240)={'wg2\x00'}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000003, 0x80010, r4, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000000040)={0x2, {0x2, 0x3, 0x7, 0x1, 0x3ff, 0x14}}) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x935b}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 06:01:07 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000700)=@IORING_OP_SENDMSG={0x9, 0x3, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@l2={0x1f, 0xfffb, @none, 0x5, 0x1}, 0x80, &(0x7f0000000240)=[{&(0x7f00000000c0)="6746f2b006dbf3473736b80c476ddd73025249e3a6a9e06f", 0x18}, {&(0x7f0000000180)="95f4466c01", 0x5}, {0x0}, {&(0x7f0000000340)="ef5c237a5c099f3bb5cd53972c8fcf60705e4b0663896d88352fce697225bfaa3713c88e72e4c446148bf2714ffd99678df4c524783d225f544931f9694decacfb83a8c5affcc1faf20f55cce8b4518e8a0aceb9e9a504cbf7c0689332f476f4f5271272219d58a147019531360e2009505ea5cbcbe388aff16a1d07d88329876397cdd981aff3c26e5f684b68a474491bb26bd021893c9d6d32c69439570e7f2bea7e2c470565f12642b7a3544d980322f846385b4293142aa87e39f5520c178fdb5a52c2309e7284063926ae89c403bcaa3b50c8a2d2f0177aa93271e48f83a235f5", 0xe3}, {&(0x7f0000000440)="7623dec81cc950a16038a1370be5ce035a9a3c603db3bb760129a9cfd32b9fec52cf86fd341c190a6e719628e662241cfbc05e4ef6081ee94bff69c4173b7f27858610202dcc2d087c519c9073b6c9ec2d8efd380d226b25c6d6fc750179553c3d0b9d142c97e03373216ecff6e1836b4e847e6acd9ff04946dc2a939a48c5ce215cd48cd4cb222afa3c185a792ab9828e89025396c16b9da1110fa53df4eb99069c290758c4b12f2601981bd9dfa5e42fe087872dc86a6328a85fb0f8341b7a2c04e46843eab4e4b4d008fb952c50ddbb373d568bbcffff1334fc1c9a458b9f5486ae7072cb", 0xe6}], 0x5, &(0x7f0000000540)=[{0x88, 0x110, 0xff, "3e43490edb132b6e6a00ce200b32c5b682cfaee8121cdf7cbf47196d4fef9f1722f80176427ecdc0c5157cb5c7d83268a6f45d1ad109abe8515207eb140610e14de3eb17667794e83aa4caaf9c52da61728e2bd055a56b8b2a93bca0a5e9298773bedd0f5844e4c7aa6fd6349a6b703b606b"}, {0x48, 0x0, 0x8, "84779ebda39b9517627d924952ea22a70352d101fa2fc0a9b73a7599fed23256578ba3f646f1e2d4324fe1e8ec0e7ec9a2"}, {0xc8, 0x103, 0x20, "310ef95ae55a01c2119ddc218541e189dc66de22f0dc54157dbbf1b3b32e69e1d9204624c54dfb76de2bd8a9f81a6db6caa97f0239d287c1ca1f096392a1e86529134f45f0cc784a4e9b540552d5dbeab73ab74af0f0efdbe2b792298e7efc8ff33d6b8d3df859efd9de2e13fc9a0cc4c4ad0b9392a6426c6f9104993ac5051c07a890e06f566c5df80074a9ad64feab81f07a701a40378fd7a8efd311b3e4b1dc76bbc717fc0dd2561eae738a9b1f7a100adf7f6e05"}], 0x198}, 0x0, 0x80d0}, 0x7) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x935b}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 06:01:07 executing program 3: socket$inet6_udp(0xa, 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x612281, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r1 = socket$inet(0x2, 0xa, 0xff7ffffd) ioctl$SNAPSHOT_UNFREEZE(r1, 0x3302) r2 = syz_open_dev$vcsa(0x0, 0xe11, 0x4000) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000240)={'wg2\x00'}) ioctl$TUNSETSNDBUF(r2, 0x400454d4, &(0x7f0000000040)) dup3(r1, r0, 0x0) r3 = syz_io_uring_setup(0x3157, &(0x7f0000000140), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x8006, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x40000000, 0x100000, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x100000e, 0x12, r3, 0x0) syz_io_uring_submit(r6, r5, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r3, 0x58ab, 0x0, 0x0, 0x0, 0x0) 06:01:07 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x935b}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x8000000) 06:01:07 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x1}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x935b}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 06:01:07 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 51) 06:01:07 executing program 3: sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000005d80)={0x0, 0x0, &(0x7f0000005d40)={&(0x7f0000004cc0)={0x24, 0x0, 0x300, 0x70bd26, 0x25dfdbff, {{}, {}, {0x8}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x28, 0x11, 0x101, 0x0, 0x0, {}, [@typed={0x8, 0x0, 0x0, 0x0, @ipv4=@dev}, @typed={0x4}, @typed={0x8, 0x1c, 0x0, 0x0, @uid}]}, 0x28}}, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x3, &(0x7f0000000300)=0x3, 0x4) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000000c0)={0x14, 0x1d, 0xc21, 0x0, 0x0, {0x1, 0x0, 0x2}}, 0x14}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_RELOAD_REGDB(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000380), 0x4800, 0x0) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x8100, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r5, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40040140}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4040000}, 0x8880) fsync(0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r4, 0x0, 0x4000010) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="24000000d3cdb60ea2366a6836c5d6fd9ce9be2a00274e08000000000000000000000180"], 0x24}}, 0x0) [ 3052.558999] FAULT_INJECTION: forcing a failure. [ 3052.558999] name failslab, interval 1, probability 0, space 0, times 0 [ 3052.561384] CPU: 1 PID: 17286 Comm: syz-executor.0 Not tainted 5.10.202 #1 [ 3052.562830] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3052.564535] Call Trace: [ 3052.565079] dump_stack+0x107/0x167 [ 3052.565842] should_fail.cold+0x5/0xa [ 3052.566656] ? create_object.isra.0+0x3a/0xa20 [ 3052.567590] should_failslab+0x5/0x20 [ 3052.568366] kmem_cache_alloc+0x5b/0x310 [ 3052.569192] ? mark_held_locks+0x9e/0xe0 [ 3052.570024] create_object.isra.0+0x3a/0xa20 [ 3052.570931] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3052.571968] kmem_cache_alloc_bulk+0x168/0x320 [ 3052.572905] io_submit_sqes+0x6f76/0x85c0 [ 3052.573783] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 3052.574810] __do_sys_io_uring_enter+0x6b5/0x1920 [ 3052.575793] ? lock_downgrade+0x6d0/0x6d0 [ 3052.576640] ? find_held_lock+0x2c/0x110 [ 3052.577483] ? io_submit_sqes+0x85c0/0x85c0 [ 3052.578372] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3052.579373] ? wait_for_completion_io+0x270/0x270 [ 3052.580371] ? rcu_read_lock_any_held+0x75/0xa0 [ 3052.581331] ? vfs_write+0x354/0xa70 [ 3052.582108] ? fput_many+0x2f/0x1a0 [ 3052.582845] ? ksys_write+0x1a9/0x260 [ 3052.583604] ? __ia32_sys_read+0xb0/0xb0 [ 3052.584417] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3052.585470] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3052.586535] do_syscall_64+0x33/0x40 [ 3052.587288] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 3052.588326] RIP: 0033:0x7fb03d693b19 [ 3052.589087] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3052.592814] RSP: 002b:00007fb03ac09188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 3052.594353] RAX: ffffffffffffffda RBX: 00007fb03d7a6f60 RCX: 00007fb03d693b19 [ 3052.595813] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 3052.597252] RBP: 00007fb03ac091d0 R08: 0000000000000000 R09: 0000000000000000 [ 3052.598700] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3052.600145] R13: 00007ffe77755f3f R14: 00007fb03ac09300 R15: 0000000000022000 06:01:07 executing program 6: r0 = syz_io_uring_setup(0x6d9c, &(0x7f00000002c0)={0x0, 0x0, 0x8, 0x1, 0xfffffffc}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x200) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_config_ext={0x1, 0x100000001}, 0x0, 0x2, 0x8001, 0x2, 0xffffffffffffffff, 0x4, 0x17, 0x0, 0x0, 0x0, 0x401}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_dev$vcsa(0x0, 0xe11, 0x4000) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000000240)={'wg2\x00'}) syz_io_uring_setup(0x4fd4, &(0x7f0000000180)={0x0, 0xaec7, 0x1, 0x2, 0x1d0, 0x0, r4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000240)) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(r5, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r6 = socket$inet(0x2, 0xa, 0xff7ffffd) ioctl$SNAPSHOT_UNFREEZE(r6, 0x3302) dup3(r6, r5, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_EPOLL_CTL=@mod={0x1d, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000000), r6, 0x3, 0x0, 0x1}, 0x636) [ 3052.629003] Zero length message leads to an empty skb [ 3052.690391] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3052.712889] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 06:01:22 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) syz_open_procfs(0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000180)={{0x1, 0x1, 0x18, r1, @out_args}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)={{0x1, 0x1, 0x18, r2}, './file1\x00'}) r3 = fsmount(0xffffffffffffffff, 0x0, 0x88) syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') sendmsg$NL80211_CMD_SET_NOACK_MAP(0xffffffffffffffff, &(0x7f0000001180)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001140)={&(0x7f00000010c0)={0x44, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x8}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x101f}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x8}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x1}, @NL80211_ATTR_NOACK_MAP={0x6}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x80}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x4000) accept$unix(r0, &(0x7f0000000300), &(0x7f0000000380)=0x6e) lseek(r1, 0x800, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat(r3, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) fstatfs(r1, &(0x7f0000000000)=""/46) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000140)) mknodat(r1, &(0x7f00000003c0)='./file1\x00', 0x44, 0x0) sendmsg$NL80211_CMD_DISASSOCIATE(r3, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)={0x3c, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @random="c07a40454d95"}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x4}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4001}, 0x40000) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000000, 0x40010, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000400)=@IORING_OP_READ_FIXED={0x4, 0x3, 0x2000, @fd_index=0xa, 0x1, 0xba, 0x7fffffff, 0x0, 0x1, {0x2}}, 0xffff) sendfile(r1, r4, 0x0, 0x100000001) 06:01:22 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000000040)={0x2, {0x2, 0x3, 0x7, 0x1, 0x3ff, 0x14}}) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x8, 0x9, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x935b}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(r5, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r6 = socket$inet(0x2, 0xa, 0xff7ffffd) ioctl$SNAPSHOT_UNFREEZE(r6, 0x3302) r7 = dup3(r6, r5, 0x0) ioctl$F2FS_IOC_FLUSH_DEVICE(r6, 0x4008f50a, &(0x7f0000000080)={0x2, 0xfffffffc}) openat(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0x200000, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCGSID(r7, 0x5429, &(0x7f0000000400)=0x0) r9 = creat(&(0x7f0000000280)='./file0\x00', 0x20) perf_event_open(&(0x7f0000000180)={0x3, 0x80, 0x3, 0x1f, 0xff, 0x2, 0x0, 0xfffffffffffffffe, 0x18446, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x6, @perf_bp={&(0x7f00000000c0), 0x8}, 0x880, 0x3, 0xfff, 0x4, 0x5, 0x3f, 0x100, 0x0, 0xb2, 0x0, 0x1000}, r8, 0x7, r9, 0x8) 06:01:22 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 52) 06:01:22 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x935b}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x92e0000) 06:01:22 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x935b}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x8, 0x0, 0x0, 0x0) 06:01:22 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x935b}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000000, 0x10, r0, 0x0) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsetxattr$security_selinux(r6, &(0x7f0000000100), &(0x7f0000000340)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x12, 0x0) r7 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000000, 0x10010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r7, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x1f, 0x0, 0x0, 0x0, {0x204}}, 0x9) pipe(&(0x7f0000003fc0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r8, 0xc0045878, 0x0) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) r12 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x12, r8, 0x10000000) syz_io_uring_submit(r10, r12, &(0x7f0000000240)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r6, &(0x7f0000000080)=0x80, &(0x7f0000000180)=@isdn, 0x0, 0x1800, 0x1, {0x0, r9}}, 0x40) syz_io_uring_submit(0x0, r7, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r9}}, 0x800) syz_io_uring_submit(r5, r2, &(0x7f0000000040)=@IORING_OP_READ=@pass_buffer={0x16, 0x2, 0x4004, @fd=r4, 0x7, &(0x7f0000000340)=""/4096, 0x1000, 0x6, 0x1, {0x0, r9}}, 0x3e) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 06:01:22 executing program 4: r0 = semget$private(0x0, 0x4000, 0x0) semctl$IPC_RMID(r0, 0x0, 0x0) semctl$IPC_RMID(r0, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet(0x2, 0xa, 0xff7ffffd) r1 = semget$private(0x0, 0x4000, 0x0) semctl$IPC_RMID(r1, 0x0, 0x0) semctl$IPC_RMID(r1, 0x0, 0x0) r2 = syz_io_uring_setup(0x3157, &(0x7f0000000140), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_register$IORING_UNREGISTER_FILES(r2, 0x3, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) syz_io_uring_submit(r5, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r6 = syz_open_dev$vcsa(0x0, 0xe11, 0x4000) ioctl$ifreq_SIOCGIFINDEX_wireguard(r6, 0x8933, &(0x7f0000000240)={'wg2\x00'}) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r6, 0x7, &(0x7f00000000c0), 0x1) io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0) r7 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0), 0x400, 0x0) fcntl$dupfd(r6, 0x406, r7) 06:01:22 executing program 5: r0 = syz_open_dev$vcsa(0x0, 0xe11, 0x4000) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000240)={'wg2\x00'}) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x102}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, 0x0, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x2400c890}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(r1, 0x400454ca, &(0x7f0000000000)={'veth1_to_batadv\x00'}) r2 = socket$inet(0x2, 0xa, 0xff7ffffd) ioctl$SNAPSHOT_UNFREEZE(r2, 0x3302) read(r1, &(0x7f0000000740)=""/4096, 0x1000) r3 = syz_io_uring_setup(0x3157, &(0x7f0000000140), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) syz_io_uring_submit(r6, r5, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) getsockopt$sock_buf(r2, 0x1, 0x3d, &(0x7f0000000280)=""/210, &(0x7f0000000380)=0xd2) io_uring_enter(r3, 0x58ab, 0x0, 0x0, 0x0, 0x0) r7 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KIOCSOUND(r7, 0x4b2f, 0x1) io_uring_register$IORING_REGISTER_FILES(r3, 0x2, &(0x7f00000003c0)=[r7], 0x1) [ 3067.947285] FAULT_INJECTION: forcing a failure. [ 3067.947285] name failslab, interval 1, probability 0, space 0, times 0 [ 3067.949636] CPU: 0 PID: 17310 Comm: syz-executor.0 Not tainted 5.10.202 #1 [ 3067.951072] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3067.952796] Call Trace: [ 3067.952821] dump_stack+0x107/0x167 [ 3067.952849] should_fail.cold+0x5/0xa [ 3067.952873] ? create_object.isra.0+0x3a/0xa20 [ 3067.952894] should_failslab+0x5/0x20 [ 3067.952921] kmem_cache_alloc+0x5b/0x310 [ 3067.957362] ? mark_held_locks+0x9e/0xe0 [ 3067.958205] create_object.isra.0+0x3a/0xa20 [ 3067.959117] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3067.960167] kmem_cache_alloc_bulk+0x168/0x320 [ 3067.961113] io_submit_sqes+0x6f76/0x85c0 [ 3067.961999] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 3067.963031] __do_sys_io_uring_enter+0x6b5/0x1920 [ 3067.964021] ? lock_downgrade+0x6d0/0x6d0 [ 3067.964875] ? find_held_lock+0x2c/0x110 [ 3067.965727] ? io_submit_sqes+0x85c0/0x85c0 [ 3067.966660] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3067.967667] ? wait_for_completion_io+0x270/0x270 [ 3067.968666] ? rcu_read_lock_any_held+0x75/0xa0 [ 3067.969633] ? vfs_write+0x354/0xa70 [ 3067.970402] ? fput_many+0x2f/0x1a0 [ 3067.971169] ? ksys_write+0x1a9/0x260 [ 3067.971969] ? __ia32_sys_read+0xb0/0xb0 [ 3067.972809] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3067.973896] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3067.974968] do_syscall_64+0x33/0x40 [ 3067.975738] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 3067.976787] RIP: 0033:0x7fb03d693b19 [ 3067.977550] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3067.981315] RSP: 002b:00007fb03ac09188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 3067.982874] RAX: ffffffffffffffda RBX: 00007fb03d7a6f60 RCX: 00007fb03d693b19 [ 3067.984323] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 3067.985785] RBP: 00007fb03ac091d0 R08: 0000000000000000 R09: 0000000000000000 [ 3067.985797] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3067.985809] R13: 00007ffe77755f3f R14: 00007fb03ac09300 R15: 0000000000022000 [ 3068.055237] audit: type=1400 audit(1701756082.978:17): avc: denied { execute } for pid=17309 comm="syz-executor.6" path="pipe:[52580]" dev="pipefs" ino=52580 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=fifo_file permissive=1 06:01:23 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 53) [ 3068.157530] FAULT_INJECTION: forcing a failure. [ 3068.157530] name failslab, interval 1, probability 0, space 0, times 0 [ 3068.158879] CPU: 1 PID: 17345 Comm: syz-executor.0 Not tainted 5.10.202 #1 [ 3068.159658] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3068.160581] Call Trace: [ 3068.160893] dump_stack+0x107/0x167 [ 3068.161330] should_fail.cold+0x5/0xa [ 3068.161771] ? memcg_alloc_page_obj_cgroups+0x73/0x100 [ 3068.162366] should_failslab+0x5/0x20 [ 3068.162811] __kmalloc_node+0x76/0x420 [ 3068.163258] memcg_alloc_page_obj_cgroups+0x73/0x100 [ 3068.163833] memcg_slab_post_alloc_hook+0x1f0/0x430 [ 3068.164400] kmem_cache_alloc_bulk+0x182/0x320 [ 3068.164929] io_submit_sqes+0x6f76/0x85c0 [ 3068.165415] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 3068.165979] __do_sys_io_uring_enter+0x6b5/0x1920 [ 3068.166525] ? lock_downgrade+0x6d0/0x6d0 [ 3068.166992] ? find_held_lock+0x2c/0x110 [ 3068.167449] ? io_submit_sqes+0x85c0/0x85c0 [ 3068.167949] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3068.168480] ? wait_for_completion_io+0x270/0x270 [ 3068.169028] ? rcu_read_lock_any_held+0x75/0xa0 [ 3068.169546] ? vfs_write+0x354/0xa70 [ 3068.169966] ? fput_many+0x2f/0x1a0 [ 3068.170385] ? ksys_write+0x1a9/0x260 [ 3068.170841] ? __ia32_sys_read+0xb0/0xb0 [ 3068.171298] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3068.171896] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3068.172477] do_syscall_64+0x33/0x40 [ 3068.172902] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 3068.173477] RIP: 0033:0x7fb03d693b19 [ 3068.173898] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3068.175913] RSP: 002b:00007fb03ac09188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 3068.176770] RAX: ffffffffffffffda RBX: 00007fb03d7a6f60 RCX: 00007fb03d693b19 [ 3068.177559] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 3068.178360] RBP: 00007fb03ac091d0 R08: 0000000000000000 R09: 0000000000000000 [ 3068.179150] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3068.179947] R13: 00007ffe77755f3f R14: 00007fb03ac09300 R15: 0000000000022000 06:01:23 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r1 = socket$inet(0x2, 0xa, 0xff7ffffd) ioctl$SNAPSHOT_UNFREEZE(r1, 0x3302) r2 = syz_io_uring_setup(0x3157, &(0x7f0000000140), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e24, @remote}, 0x10) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x5, 0x0, 0x0, 0x1}, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) syz_io_uring_submit(r5, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0) 06:01:23 executing program 4: socket$inet6_udp(0xa, 0x2, 0x0) socket$inet(0x2, 0xa, 0xff7ffffd) r0 = syz_io_uring_setup(0x3157, &(0x7f0000000140), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = syz_open_dev$vcsa(0x0, 0xe11, 0x4000) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000000240)={'wg2\x00'}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(r5, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r6 = socket$inet(0x2, 0xa, 0xff7ffffd) ioctl$SNAPSHOT_UNFREEZE(r6, 0x3302) dup3(r6, r5, 0x0) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r6, &(0x7f0000000040)={0x10000000}) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x18f0, 0x66c3, 0x3, &(0x7f00000001c0)={[0x4]}, 0x8) 06:01:23 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x2, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = openat$incfs(0xffffffffffffffff, &(0x7f0000000040)='.pending_reads\x00', 0x410000, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x1, 0x0, @fd=r4, 0x5, 0x0, 0x0, 0x2, 0x1, {0x0, r5}}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x935b}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000000c0), 0x9) 06:01:23 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x935b}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x488, 0x0, 0x0, 0x0) 06:01:23 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x935b}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x40010, r0, 0x8000000) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 06:01:23 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r1 = socket$inet(0x2, 0xa, 0xff7ffffd) ioctl$SNAPSHOT_UNFREEZE(r1, 0x3302) r2 = dup3(r1, 0xffffffffffffffff, 0x0) dup3(0xffffffffffffffff, r1, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r3 = socket$inet(0x2, 0xa, 0xff7ffffd) ioctl$SNAPSHOT_UNFREEZE(r3, 0x3302) r4 = syz_io_uring_setup(0x3157, &(0x7f0000000140), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) syz_io_uring_submit(r7, r6, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r8 = dup2(r0, r0) accept$unix(r8, &(0x7f00000001c0)=@abs, &(0x7f0000000240)=0x6e) bind(0xffffffffffffffff, &(0x7f00000002c0)=@rc={0x1f, @none, 0x2}, 0x80) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000000000018000000", @ANYRES32=r2, @ANYBLOB="01000000000000002e2f66696c653000"]) io_uring_enter(r9, 0x58ab, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r4, 0x2359, 0x8daa, 0x1, &(0x7f0000000040)={[0x2000000000000000]}, 0x8) 06:01:23 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x935b}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xa2e0000) 06:01:40 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 54) 06:01:40 executing program 4: socket$inet6_udp(0xa, 0x2, 0x0) socket$inet(0x2, 0xa, 0xff7ffffd) r0 = syz_io_uring_setup(0x3157, &(0x7f0000000140), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) io_uring_setup(0x24c2, &(0x7f00000001c0)={0x0, 0x4206, 0x4, 0x0, 0x27}) 06:01:40 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c000000120001050600009c00000000070000000000000000000000040000000000000000000000000000000000000000000000000000009dfcbbd2a867a38fd076185f6ea2a6cbbfddbd9998480fdcc12afb0dad68d24b93bb03bae89b235218178afdb74d1ec1547a09584300ef510324328fbfe8f1", @ANYRES32=0x0, @ANYBLOB='\x00'/16], 0x4c}, 0x1, 0x0, 0x0, 0x4000091}, 0x0) 06:01:40 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x100) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)="f75587319a12658273d84eed9361c174ede6a073bc245ed5378d20fa", 0x1c, 0x2, 0x1, {0x0, r3}}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x935b}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 06:01:40 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x935b}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x20000000) 06:01:40 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r1 = socket$inet(0x2, 0xa, 0xff7ffffd) ioctl$SNAPSHOT_UNFREEZE(r1, 0x3302) r2 = syz_io_uring_setup(0x203157, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KIOCSOUND(r5, 0x4b2f, 0x1) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r5, @ANYBLOB="0100feff000030002d8dd709ac1ab96637c67edbf28f3a8e29e3b7d86893e17b5a8ecf69cee74ac69cac992f2ee44c1deb899349bf15e49f5525a8263e90d06bff500e888945687337faefb4f4d753b38a1b3ec549803b4e0eef31a7b40e639fe4afe5366186d200dd32225c89594449c37018385f97c08464d2c560c2804b4e57741c12dbf4071eb9709803bcd5af9c8b65d649db70b3f6fdd40973919c9481549fc3fbf18afd20db7d020000006f9b6c7909fbb0a507961b55d9f98de54c"]) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) syz_io_uring_submit(r6, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0) 06:01:40 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000000040)={0x2, {0x2, 0x3, 0x7, 0x1, 0x3ff, 0x14}}) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x935b}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) r5 = syz_open_dev$vcsa(0x0, 0xe11, 0x4000) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/cgroups\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2, 0x3, 0x9, 0x40, 0x0, 0x0, 0x20032, 0xa, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x9, 0x4, @perf_config_ext={0x3f, 0x7ff}, 0x1002, 0xbd91, 0x400, 0x8, 0x7b, 0x8, 0x6, 0x0, 0x0, 0x0, 0xe8b}, 0xffffffffffffffff, 0x2, r6, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000240)={'wg2\x00'}) syz_io_uring_setup(0x5b42, &(0x7f0000000180)={0x0, 0x68f5, 0x1, 0x1, 0x12ba, 0x0, r5}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000240)) ioctl$TCSETSW2(r3, 0x402c542c, &(0x7f0000000280)={0xff, 0x1f, 0x0, 0x9, 0x7f, "36770aff3913a55d684b0dfda6df5cbb1a04fa", 0x5, 0x3}) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 06:01:40 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x935b}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x489, 0x0, 0x0, 0x0) [ 3085.547431] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3085.560346] FAULT_INJECTION: forcing a failure. [ 3085.560346] name failslab, interval 1, probability 0, space 0, times 0 [ 3085.562736] CPU: 0 PID: 17406 Comm: syz-executor.0 Not tainted 5.10.202 #1 [ 3085.564188] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3085.565907] Call Trace: [ 3085.566457] dump_stack+0x107/0x167 [ 3085.567231] should_fail.cold+0x5/0xa [ 3085.568027] ? create_object.isra.0+0x3a/0xa20 [ 3085.568984] should_failslab+0x5/0x20 [ 3085.569774] kmem_cache_alloc+0x5b/0x310 [ 3085.570618] ? mark_held_locks+0x9e/0xe0 [ 3085.571491] create_object.isra.0+0x3a/0xa20 [ 3085.571511] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3085.571538] kmem_cache_alloc_bulk+0x168/0x320 [ 3085.571566] io_submit_sqes+0x6f76/0x85c0 [ 3085.571620] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 3085.571639] __do_sys_io_uring_enter+0x6b5/0x1920 [ 3085.571663] ? lock_downgrade+0x6d0/0x6d0 [ 3085.571680] ? find_held_lock+0x2c/0x110 [ 3085.571706] ? io_submit_sqes+0x85c0/0x85c0 [ 3085.571736] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3085.571761] ? wait_for_completion_io+0x270/0x270 [ 3085.571784] ? rcu_read_lock_any_held+0x75/0xa0 [ 3085.571801] ? vfs_write+0x354/0xa70 [ 3085.571824] ? fput_many+0x2f/0x1a0 [ 3085.571845] ? ksys_write+0x1a9/0x260 [ 3085.571865] ? __ia32_sys_read+0xb0/0xb0 [ 3085.571890] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3085.571910] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3085.571942] do_syscall_64+0x33/0x40 [ 3085.571968] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 3085.571984] RIP: 0033:0x7fb03d693b19 [ 3085.572009] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3085.572022] RSP: 002b:00007fb03ac09188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 3085.572047] RAX: ffffffffffffffda RBX: 00007fb03d7a6f60 RCX: 00007fb03d693b19 [ 3085.572061] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 3085.572074] RBP: 00007fb03ac091d0 R08: 0000000000000000 R09: 0000000000000000 [ 3085.572088] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3085.572102] R13: 00007ffe77755f3f R14: 00007fb03ac09300 R15: 0000000000022000 [ 3085.573469] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.3'. 06:01:40 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r1 = socket$inet(0x2, 0xa, 0xff7ffffd) ioctl$SNAPSHOT_UNFREEZE(r1, 0x3302) r2 = syz_io_uring_setup(0x3157, &(0x7f0000000140)={0x0, 0xfffffffc, 0x8}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) syz_io_uring_submit(r5, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) dup3(r2, r1, 0x0) io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0) 06:01:40 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x935b}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_setup(0x6ba3, &(0x7f0000000040)={0x0, 0xe3cf, 0x8, 0x0, 0x1cd}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000180)) r5 = socket(0x1, 0x6, 0x8001) syz_io_uring_submit(r4, r2, &(0x7f00000017c0)=@IORING_OP_SENDMSG={0x9, 0x5, 0x0, r5, 0x0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000340)="de9dfe5072ac88960d3692ba1dda145965bf249170483c9c5be31e500b0d2dc80c67c87e475363fe89298528fd44f23d515a009a30efcaa42ba80cb68cf09010b0101afef5cd8e56320800ea86cf47eceedce415f372864a5958c8f24f5e5e8a0b0849bb15224ef822cf10bbc7eb4fc1879a2058de7a92f26f71aa133b5dd958073f6fa00cd89c79677952c0013193d829dd63fe510695a53a30b4df015774bfa8ed274899f12549fe54ff3d6fc480b33a677dc05bcad189a7ec125a879e300178145c067e7d101c2744b20aef33816bdf283e04284fc4", 0xd7}, {&(0x7f0000000440)="40dc38b32f08168840f3e8e31f50fba7f83727465a7e15cc2d5a1fbfc18dcad5bd11e172c772f2025ca41810f24812e101d1f82807002ff6e6138e59b62a3006058d2a80c860f55754cbd367c00f480352b1db16074872e967e1e919c010ba960420a60a8b5880418dea599c7ca2030c04509604036d34fdc01353b4692e7eab2e8d5c2817495d3c2ffbbec987250baf9a", 0x91}, {&(0x7f00000001c0)="dddc7e33673af7cfe3ebcbcc08e1bf0e994568c1d8d88eef505bed02f40fb66442de9f71538b98615fcd137adfd533d97f816c8b9fd7eb", 0x37}, {&(0x7f0000000240)="625f8e89178f786e74", 0x9}, {&(0x7f0000000500)="649834a4850b4917f5fcae53feda6b1e7c0bb7b4144ec534895df75153bd4bd205a77c25e1b1bccc451c137f39a358ed1d7c997f7f7613f8877d9e497bd52ef2b144b61877550b8016b30fbe3c3ca727a9f7a02dee0176e72a831a9fffd7062318a8ca7a7446b864c5167b02876ad3a31704aa5aeb31f765659bc938a7fb932d", 0x80}], 0x5, &(0x7f0000000600)=[{0x98, 0x10a, 0xb01, "5c10e4678f02d97605a66a8e00f58f94dd500a54d8f42df8e656dbe10b334d32c0db4b766510664c6771827d0982cd9f44fa65e3092900a5a38d00ea4347b2ae8e5bce6d1550f50526b14beaa0685c09c858937b04fab981ff4675f3efb970495926b792d6146565a47ac66d5d51a0924a718301612a51dee875198376bddb88a3b390"}, {0x48, 0x11, 0xffffffff, "4a980ffd2625be61009162b6ff91c35d57aaa121e49f3472bdfdd8f53d5d9ca1aaf4b321d4af34561450fb3d4736a31dc7e3"}, {0x1010, 0x113, 0x8, "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"}, {0x40, 0x107, 0x7f, "a269de1a8656bf3e3c16b8cf39c2add967c8cd884382a191006cf0884fad64dd7a14447d78d13c80b1ab721eab64"}, {0x50, 0x101, 0x7fffffff, "e28a0a61627955d1184cd2512783cf412ac17ed5ccfe6c5faefd252e602cc5b89c29e8d6207dc88fe2a2647a7b284877c30126e78e75f9f22210"}, {0x20, 0x105, 0x5, "ee6423988aefcffae4e7"}], 0x11a0}, 0x0, 0x4000004, 0x1}, 0x5d7) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 06:01:40 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = getpid() process_vm_readv(r1, &(0x7f0000000240)=[{&(0x7f0000000140)=""/193, 0xc1}], 0x1, &(0x7f0000000380)=[{&(0x7f0000003300)=""/4096, 0xd00}], 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x101, 0x0, 0x0, 0x0, 0x3}, r1, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) r2 = socket$inet(0x2, 0x1, 0x0) dup3(r2, r0, 0x0) 06:01:40 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 55) [ 3085.880442] FAULT_INJECTION: forcing a failure. [ 3085.880442] name failslab, interval 1, probability 0, space 0, times 0 [ 3085.882838] CPU: 0 PID: 17458 Comm: syz-executor.0 Not tainted 5.10.202 #1 [ 3085.884260] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3085.885948] Call Trace: [ 3085.886494] dump_stack+0x107/0x167 [ 3085.887270] should_fail.cold+0x5/0xa [ 3085.888051] ? create_object.isra.0+0x3a/0xa20 [ 3085.888984] should_failslab+0x5/0x20 [ 3085.889763] kmem_cache_alloc+0x5b/0x310 [ 3085.890610] create_object.isra.0+0x3a/0xa20 [ 3085.891523] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3085.892598] kmem_cache_alloc_bulk+0x168/0x320 [ 3085.893555] io_submit_sqes+0x6f76/0x85c0 [ 3085.894441] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 3085.895469] __do_sys_io_uring_enter+0x6b5/0x1920 [ 3085.896465] ? lock_downgrade+0x6d0/0x6d0 [ 3085.897314] ? find_held_lock+0x2c/0x110 [ 3085.898155] ? io_submit_sqes+0x85c0/0x85c0 [ 3085.899078] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3085.900082] ? wait_for_completion_io+0x270/0x270 [ 3085.901068] ? rcu_read_lock_any_held+0x75/0xa0 [ 3085.902013] ? vfs_write+0x354/0xa70 [ 3085.902781] ? fput_many+0x2f/0x1a0 [ 3085.903546] ? ksys_write+0x1a9/0x260 [ 3085.904337] ? __ia32_sys_read+0xb0/0xb0 [ 3085.905183] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3085.906272] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3085.907345] do_syscall_64+0x33/0x40 [ 3085.908103] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 3085.909136] RIP: 0033:0x7fb03d693b19 [ 3085.909891] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3085.913606] RSP: 002b:00007fb03ac09188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 3085.915155] RAX: ffffffffffffffda RBX: 00007fb03d7a6f60 RCX: 00007fb03d693b19 [ 3085.916615] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 3085.918120] RBP: 00007fb03ac091d0 R08: 0000000000000000 R09: 0000000000000000 [ 3085.919578] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3085.921018] R13: 00007ffe77755f3f R14: 00007fb03ac09300 R15: 0000000000022000 06:01:54 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x935b}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x25040000) 06:01:54 executing program 5: ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r0 = socket$inet(0x2, 0xa, 0xff7ffffd) ioctl$SNAPSHOT_UNFREEZE(r0, 0x3302) r1 = syz_io_uring_setup(0x3157, &(0x7f0000000240)={0x0, 0x5369, 0x10}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x30, r1, 0x0) signalfd4(r0, &(0x7f0000000040)={[0x4]}, 0x8, 0x80000) syz_io_uring_submit(r4, r3, &(0x7f00000001c0)=@IORING_OP_NOP={0x0, 0x2}, 0x8001) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140), 0x101000, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r5, 0x40086607, &(0x7f0000000180)) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) r6 = creat(&(0x7f0000000100)='./file0\x00', 0x40) ioctl$sock_ifreq(r6, 0x8927, &(0x7f0000000200)={'veth0_virt_wifi\x00', @ifru_flags}) 06:01:54 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 56) 06:01:54 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x200000a, 0x40010, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_FADVISE={0x18, 0x11a755ca6c451d8d, 0x0, @fd=r0, 0x8f, 0x0, 0x24, 0x3}, 0xfa) syz_io_uring_setup(0x48cf, &(0x7f0000000240)={0x0, 0xf57f, 0x0, 0x0, 0x93, 0x0, r0}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000380)) syz_io_uring_submit(r4, r2, &(0x7f0000001540)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000001500)={0x0, 0x0, &(0x7f0000001480)=[{&(0x7f00000003c0)=""/60, 0x3c}, {&(0x7f0000000400)=""/82, 0x52}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x3, &(0x7f00000014c0)=""/39, 0x27}, 0x0, 0x10160, 0x1}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_setup(0x70ad, &(0x7f0000000080)={0x0, 0xf433, 0x0, 0x0, 0x148}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f00000001c0)) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000000)=@IORING_OP_WRITE_FIXED={0x5, 0x4, 0x4000, @fd_index=0x7, 0x6, 0x800, 0x2, 0xe, 0x1, {0xffff, r6}}, 0x0) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x935b}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r7, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 06:01:54 executing program 3: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="cfeaffffffffffff00f4ff1c9477000007"], 0x14}}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x21, 0x0, 0x163}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x308) r1 = socket$inet(0x2, 0xa, 0x0) r2 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000040)={'veth1_to_team\x00'}) sendmsg$DEVLINK_CMD_SB_POOL_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000240), 0xc, 0x0}, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r1, 0x8914, &(0x7f00000001c0)={'veth0_vlan\x00', {0x2, 0x0, @empty}}) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x2) r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x100000001) ioctl$TUNSETQUEUE(r4, 0x400454d9, &(0x7f0000000080)={'veth1_virt_wifi\x00'}) 06:01:54 executing program 4: socket$inet6_udp(0xa, 0x2, 0x0) socket$inet(0x2, 0xa, 0xff7ffffd) r0 = syz_io_uring_setup(0x3157, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xffffffff}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) r3 = syz_open_dev$vcsa(0x0, 0xe11, 0x4000) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000240)={'wg2\x00'}) setsockopt$IP_VS_SO_SET_STOPDAEMON(r3, 0x0, 0x48c, &(0x7f0000000040)={0x1, 'rose0\x00', 0x3}, 0x18) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsetxattr$security_selinux(r5, &(0x7f0000000100), &(0x7f0000000340)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x12, 0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000000, 0x10010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r6, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x1f, 0x0, 0x0, 0x0, {0x204}}, 0x9) pipe(&(0x7f0000003fc0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r7, 0xc0045878, 0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r8}}, 0x800) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000700)=@IORING_OP_SENDMSG={0x9, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000006c0)={&(0x7f0000000280)=@vsock={0x28, 0x0, 0x2710}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000300)="15a22a31deeaf872a8414ecf68d1da60b16129681a0bb2280659c66429704fe217273f9937ed1dda3063c52669287a8adcc6e95efc25a8b5cdb2bfd2f3dca696e662d54c51c2f36e7e39dcb498d0b2308bfe7ba216c0f7601adb8b4af082ec2479b3a06d1c335614feed28658e14c8ff3c5990d96b8b30f6aa05b3f212e434aaa2ad8fc7c9a71fafd57c7ef06792053fc6853da1b459d8f3", 0x98}], 0x1, &(0x7f00000003c0)=[{0x110, 0x10f, 0x7, "a498eb974d4181f027f9ad1b5bf507f2d93a1f9cb0005be7ca878309d42f093b036a230945a68c38b04984a57b4886ded9101184e4fa7de8513e22cc1cb77ab06af5eb73afb4d1dc6702bb6d870a07b6e659a7867783bb7e392a6260d09940e35ba83ac6ee2d4a7456c779cd09089eea440d1912af8cf5810f9c56c86c4791ddda8b57a83f558af0dd25ddf34497d1340826d98bca465dce1c8ba02ee4045cd1382e0ccae882c5c258fc32d85a1128be2024e6030aa3fbaa56bc06effab8338366a620c7b62cfa1db2c1e43f3555f559a925923a7e18493dc9830f7ec28dac212ebff25ac6516a8e3bb3d3467b5c67e433b3f1565aad0585e1"}, {0x108, 0x115, 0x3, "b1d3671831d1155203fb4d1b4b5c47f2dcb82c09ae58b08d38a4b5b282317bc1cbcf6f206dab2ef7e6813d68443e4c1cc9599526d18e2153cc357e5bfc6a91d951f373b0c751e18e469259ef8acd888d27f2637a7ad96d1a5e0b5c8518e239f77089b09fa81c69339a3c22c450db48c3c466b7a91c0f272c8dd655786c3f1b23145ad7353c812b9e2434bce87e559bde6cff08a57f3b2e737fa7696d60eb4f2a4db0f9d762c03ef60d595a1742fa70f7254311f287d8f012d5028cef13b793cc2851d90bcd85b76e681963d23f368fac7a8e1b556a6c95d80b7fce8ce2778455f500a58172b85460d668218ad2c9e48da41a99"}, {0xe8, 0xfe56c346e8bc7418, 0xb7, "a2312b330f45d63712eab46ae265e75229bdcf3d1d589b1df58f06a369694ea27045df041ebb1e7658ece6c97d203db32726c77fc18105a255d1a47649061063ee2299474afdb9d7cee7d809d732b4d55d74c4ab1af121602ca69595d1539322b91fda687354a27487887554134f5e5201d5a871e598692f9f7307ca465ec8bbfe51096af3f05a6693cda7d65d33527c509f070fd8bf877aa3f7bbdbae6c5374410e8d21d1e50d82f69bfa89ae1f53b993d6a2d06b77118d239fc7a6993d73eb3437e5538d85484f52bd1bdda1773420d0a57cb5475a1b"}], 0x300}, 0x0, 0x840, 0x1, {0x0, r8}}, 0x7fffffff) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 06:01:54 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) ioctl$FIBMAP(r0, 0x1, &(0x7f00000000c0)=0xfb) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000000040)={0x2, {0x2, 0x3, 0x7, 0x1, 0x3ff, 0x14}}) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x5, 0x0, 0x400, 0xd9, 0x2}}) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x935b}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r3) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000340)={{{@in6=@loopback, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @remote}}, 0x0, @in=@empty}}, &(0x7f0000000240)=0xe8) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000140)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r7, 0x8918, &(0x7f0000000040)={@local, 0x0, r9}) getsockopt$inet6_mreq(r3, 0x29, 0x14, &(0x7f0000000580)={@private2, 0x0}, &(0x7f00000005c0)=0x14) sendmsg$ETHTOOL_MSG_TSINFO_GET(r3, &(0x7f0000000780)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000740)={&(0x7f0000000600)={0x108, r5, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x108}, 0x1, 0x0, 0x0, 0x4}, 0x48005) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 06:01:54 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x935b}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x500, 0x0, 0x0, 0x0) [ 3099.738004] FAULT_INJECTION: forcing a failure. [ 3099.738004] name failslab, interval 1, probability 0, space 0, times 0 [ 3099.740417] CPU: 0 PID: 17483 Comm: syz-executor.0 Not tainted 5.10.202 #1 [ 3099.741830] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3099.743545] Call Trace: [ 3099.744091] dump_stack+0x107/0x167 [ 3099.744855] should_fail.cold+0x5/0xa [ 3099.745631] ? create_object.isra.0+0x3a/0xa20 [ 3099.746579] should_failslab+0x5/0x20 [ 3099.747387] kmem_cache_alloc+0x5b/0x310 [ 3099.748237] create_object.isra.0+0x3a/0xa20 [ 3099.749141] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3099.750191] kmem_cache_alloc_bulk+0x168/0x320 [ 3099.751148] io_submit_sqes+0x6f76/0x85c0 [ 3099.752046] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 3099.753081] __do_sys_io_uring_enter+0x6b5/0x1920 [ 3099.754087] ? lock_downgrade+0x6d0/0x6d0 [ 3099.754942] ? find_held_lock+0x2c/0x110 [ 3099.755807] ? io_submit_sqes+0x85c0/0x85c0 [ 3099.756704] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3099.757039] device veth0_vlan entered promiscuous mode [ 3099.757700] ? wait_for_completion_io+0x270/0x270 [ 3099.757725] ? rcu_read_lock_any_held+0x75/0xa0 [ 3099.757741] ? vfs_write+0x354/0xa70 [ 3099.757765] ? fput_many+0x2f/0x1a0 [ 3099.757793] ? ksys_write+0x1a9/0x260 [ 3099.763068] ? __ia32_sys_read+0xb0/0xb0 [ 3099.763924] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3099.765006] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3099.766084] do_syscall_64+0x33/0x40 [ 3099.766865] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 3099.767928] RIP: 0033:0x7fb03d693b19 [ 3099.768706] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3099.772509] RSP: 002b:00007fb03ac09188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 3099.774087] RAX: ffffffffffffffda RBX: 00007fb03d7a6f60 RCX: 00007fb03d693b19 [ 3099.775578] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 3099.777054] RBP: 00007fb03ac091d0 R08: 0000000000000000 R09: 0000000000000000 [ 3099.778530] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3099.780009] R13: 00007ffe77755f3f R14: 00007fb03ac09300 R15: 0000000000022000 06:01:54 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r1 = socket$inet(0x2, 0xa, 0xff7ffffd) ioctl$SNAPSHOT_UNFREEZE(r1, 0x3302) r2 = syz_io_uring_setup(0x3157, &(0x7f0000000140), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) sendmmsg(r1, &(0x7f0000002c00)=[{{&(0x7f00000001c0)=@ax25={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x6}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000240)="ad797a308e10e3adcfbca97a3eb76948f68bd79dbb14a1faabd468dbe37d9f26a39a1ba6593014e03d67bac3f432854b3c292761a490b0224133628093ab0dc5fa3504b199e0a7ecf0e0e8fe0f9a880e62fa79f6627341dfcc7bea9b7489c50c8a938367a4276b7eb96847ee6ea3aa783b7e1df41e18104332bb773f0fb04e03830a60324a11a1400cace89467a4699387bae773111cc2cc3958d60ec5aeacdd4b42d6c62e1e20a70cfb6d526e225520a8ffbebea23e8553547a", 0xba}, {&(0x7f0000000040)="99631f49126fa8dbfb53e6faa92c8c16a66b1ab2804709c44c49f8da6275c522c7a6", 0x22}, {&(0x7f0000000300)="a503dc7f86b47cd77e145a505ada3594642983a210eaaf1e8af158a202ad0c112eac740ac27ae9545b9b6f08bd853850e013edfdab4f26d9b75a1f464e849ed085648308b6dcab82a271f0ebc4e823e4c1346a67f1ff9d4ecf06c8514e58109ceca8acf3e7243f530e57889193a9b050bb53fd283773481f263569809a03bf24a4b2d85c6b92c80cc1b13f", 0x8b}, {&(0x7f00000003c0)="524a128c43736a3000791497d930b4b29f", 0x11}, {&(0x7f0000000400)}, {&(0x7f0000000440)="4a8bf9486551f7b46bf809eff01d030fed7a9e5eb9f6d816efff779b7e3bfa905fad3c81b1cbdb7275605aa0b6de35a4673bbeb7ac499771410737ddf7b55bd97d671b5b5ae71d7154c61425b9cc40156f95ffe7ed3ed1c49220ab37d5fc26b8bb84218b77d9d0e4042c1ece3a903acc6c3d2fef7bc154bbc9c9883752a04f6d45b9ad0a2a65c3f73dca02620ec195bbeb6a265c12d5e2062f6aa2307d77af7687f2eb1e4cde66337fe557e893d2fe25f79a3b7920ad10afc049", 0xba}], 0x6, &(0x7f0000000580)}}, {{&(0x7f00000005c0)=@rc={0x1f, @any, 0x3}, 0x80, &(0x7f0000000800)=[{&(0x7f0000000640)="7362ead23c7885e93919f5324c40222a814964e0d50630f29a65edd2c9918e96c260c77a57166730e7a52f", 0x2b}, {&(0x7f0000000680)="ab6ef16bbc5854a897bb3c09c95f7cf0dcc727e2b5b911fb7ded7adb105fbdaea1fcba88d1c5ef00cd639d6e547ee779ea786dfef27cda5dda98d8f63b91e8fc09e3c144", 0x44}, {&(0x7f0000000740)="5ed082ac254ff410acc0252bfc10c69e0b39df5b6b0b3520f55f274770ca6d81211b7e944f92a8644c4c071e49f2bff2f2135b30502586ae304602e4fd58b1e1d968ab815d9e167563c98847d99126a3c2bff01e2cc4c9e3404f39aa3d09147bb59597b372b840fdb8afb1acf5cac1a750e968b041138409a90b8a5bc41358b2a2ce1850d47107ebe454adba1657b9b36058caa58d621426976943d8e86cac4c26cde085a921b2b88591033d6e460f30fcdfe8", 0xb3}], 0x3, &(0x7f0000000840)=[{0x68, 0xff, 0x7, "029909a1d790f4c641296ca25bd3ad57f2f667c2055a18b88d8cc870d3d59cde514f8c45026da3086dff5c50b7b00839381ff49806eeef81a69d8e2b465b5d0ea26a9c4a17eedda23b471c6f05b8487ab3d7e4198656"}, {0x20, 0x102, 0x4, "2a048144ac63bfa119fe4e186474da5b"}, {0x98, 0x84, 0x1ff, "5944831ea02e950dfb2c98fb0e8ae7b9c332fd181d972057cbf410587c9aa67ffd346aa30bde1b4b0649361daa5575f2777e1f8311b57d84f1437dd21e63e787a81b827d2b7274df8911f88935c8d9c5ebffdfc5efd2be9411292cd1b46d8c005b66c5fe6d0d62f50b515a51f099cb52997d2798b74d29f25b8c27e22227c281b51ebc9623e7"}], 0x120}}, {{&(0x7f0000000980)=@phonet={0x23, 0x1, 0xcc, 0x6}, 0x80, &(0x7f0000000a80)=[{&(0x7f0000000a00)="d2bc214a2584e797a62c26d47de570cc", 0x10}, {&(0x7f0000000a40)="5aa61215633a88a53a34b9e42b9880a6b498860f692bb95985d8b780103d60eff3c0b27475d251417af60c", 0x2b}], 0x2, &(0x7f0000000ac0)=[{0x100, 0x111, 0x8, "e3e5d3f383779ae200eefcc58e187f5d550b206e4215b9d6e92964da295f5de88b090f2282dc31e679d51ee0f939078b488d149405f14c2b970de55be89f4445a6bf05bd18a1c6a28fc3d376dcea3986573c6a2b7cd29ce6bde500409f8f49cd179aa8c91f2582307a680e759187a2c4050fc028d038add61e9ce1b92d9b531c33289e909a3cb46591820988be5e2c8fbad4359aa12944095caef9dd2e4e009bab9b89e092d4d4b74b77c60d7f8b984048b02988c6c6190fba26f73044098ee79c56d32309bd8dd37903d8e440624cba89e9a47cd91091e89706f339e244c031c6eded3e762ed5efecc4c982ee"}, {0x48, 0x117, 0x7, "a6587216b50e7f7429d16ebd4d4bba4b945bd9b5fee878311948fc9d607f4ce76eb89dcd4d141a5d81caf9148d6d9f667087f2629dfa1df8"}, {0xf8, 0x0, 0xb9fe, "c04a95831f79252f50dc216151e4e0879933ccb9ca9caa67b43017ecfb8d59d4fe7b5e2fe5ea17dd832acbea005a9840fd0119c6d4f5c0310b8d07acdb74fd86afa426949ef19d0bceb3b7f270081bb4fe504df21f1143801b2b41bbb29afc261466d9a932d9f0f2e0f0161cbb877b310a92abd3f2df286ea8447a5c7cd3cef4f180f46b215241395f509f8b050e9aebe702029ea011c928889095bde9393e0246f1a257570be33b9516a5632b66bf9faa870b371bbeeecf106638af8b0da95aec6aed87a394e47c6bdd2ccb05eae6e707f421aac3121022cd1f07db95badfc14ca4149f"}], 0x240}}, {{&(0x7f0000000d00)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000000e40)=[{&(0x7f0000000d80)="dd3f26ee451a090e01ccc8b4777d3c8efb9bf32000fb38f44b5a939cd6fe1585477df915a98daff0d1980847b99caf709deb2ccafaecea8a1f6216fabc84f10a852099e3a2d42abe736a5c5e0152dd05e3b4e8bfee26b193de80e8abb2dd2c063211c000e3897dee779d9d959399df160098bdf2e44b756e7203ff9f60016f431b6eb28c", 0x84}], 0x1, &(0x7f0000000e80)=[{0xe0, 0x119, 0xffff, "c6aad7e4e243867923b97131126a0997fd76aaa1ef541882561fd1c8b059c3c445fb4f6b42c6c0a41d32112b417ddcbf5bafbfd95f9ccdf987a7e2b747ce62e43af0fa03d3b7da78022dcf53bd6c4232f73b862be1172c108309461ae5332b8badda549992c301aff1ce28ef3caa467bab680f480704957449ce8685a3c3546dfbdd32dfd291f01e41287d3e6cadddbf2cc6586d4faa59d908c6a86cd3d3923844aa056664efb9113a6101984cd11d371339b28ab7d8347c747c867e0598f3c0005329c68d5c6e8854c2d8cc69bb"}, {0x18, 0x112, 0x3f800, '[V'}, {0x1010, 0x104, 0x8, "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"}, {0x48, 0x29, 0x7fff, "7edd8f04e1b4845137210e285a0e88369ba2c3861de4907ef9ae72c383e72d1423486e3d5bd5094485a9fa7a7121d4604cbb70dd8a70b6"}, {0xb8, 0x119, 0x0, "33831c976f32759b8a75732e3d290a49fea86b5a220404bb138e145a30ac9c9799c8f39179f76c957289f75aa1f02be998706e885f810b332c386f3b0f4dd023f422214b8810c5327e35bc40513cd08ca3c311ddc5c863bb19e8c5d901ad2853d1c7fd3c5720e787e5989645235c33545c385736ca6748df62ae5b1f5a5017f1bf3f18022e5745272b37a6ee69b29643599a2ccee9bb243c8563ffc15fba216d7bdc"}, {0x70, 0x110, 0x1ac, "564d1e18c4039571782f82237c90eb31c4f73c0b0d68775a008160515ead43466348eda35c1fe4423747f7c1239e48efcaeccff5b876bb64914f4a53e71059859fcd78993bd8906acf289b32dd0543bb383851c5d5f27227270c349c"}], 0x1278}}, {{&(0x7f0000002100)=@ax25={{0x3, @bcast, 0x1}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}, 0x80, &(0x7f0000002500)=[{&(0x7f0000002180)}, {&(0x7f00000021c0)="7484ab919027834da04a4693689e7f49b7faaa1c3f0170a8ffe745ef0900c9eb3a30770b023b1c8a5cd6fa6ebe88f1a070b839587d8859124a092f90bb5427c3b7801e6855c18b5291eb8e5477e1dbd4265764f5b616185d54a60371f46d9daa71305619dd95f159584a0645c1b792daab891e4e1ab8c6e83e04d15f364357b8aaea053721a8f71657d803566f9d276965d8b22c5d3afc66d8a17e4b3a8af1f53a22f06d7f", 0xa5}, {&(0x7f0000002280)="761651a64982dae2bef44e8c777984f30029761bd0e238d1d4b3434af149c3accd455ff7bbff40333b5bcebd45aceea6d3d3e4fd33825aa130e1b9eee114630e2b9023086e73aa06be39ccd16227064eba1294a4d26a28ceae31d2bf3804745690768116c9af5f8e285cb2c0b5d895c0a876548a18", 0x75}, {&(0x7f0000002300)="bbd8ce0b69fa724d336f9ede387bc2d8f19503d0ae36be3922cb08700a48fe65cfaee243a27c30c56c6c0d344bcee33b1ee72dbb00ef897ee30be3fbe9ea6bd32ec8488fde4e8786e6b4280ea420a50ce6817d273cd2b712a4e15acb7840ec4e1bfcc6eedabe7bd8c603cc351b4f2c1c92ac982e8af36ff552aff9ebdd5436beae8935e680ba72549ca209c72a9d394d149473075e3f466677a56d97cd75b981d127a6e5d0d013b1c2eae59a5756463793346e65b86d263da67a9d1f5a08de3004f9612a1392ca066bd769567562047d1ec1cdebb3d8506e1c94077d09efd4fc646b7d1235ab15aaabdaf6d6db1962e9f24c79c28a24d46a0e", 0xf9}, {&(0x7f0000002400)="a719f9b27638b6376082502efc8007be5a41adcbd7c01b8a43a14c382326e2c50644af5eb58a794d47f8101c497466528ab09c20af584b44f472efc3b5043c0e21177358c0c979bde3833c2ac9299e4b9a683322cdd9e487904ef7876e2ba3320f6e0cdf3d5e8c8062595c13e89f5019546ae15d075455447633d0c6e1f693888a4212e39db115edef164501e0e10470cdb8295c15137eebfc9817c7fb9f14fd34c748ab7d6bae519c50989fb07dea2f4e6050640aef75c09e96b952b6944a1cddae0ff122986b8f0daf847e16a9d00dbd81714308b726bf6410f8a3a8ea22a4e067583fa0", 0xe5}], 0x5, &(0x7f0000002580)=[{0xf8, 0x115, 0x1, "d192f0b3f8f48bba9e15d321f5c7b914eb369d36976b0c4dd0a2af6effeee5e74c350e44f5fbe44e292402e07e3a41b4e2dead90aefc9fa6b078c8462e5039b04a6e98815cdc744d46ca2edd1839bdb37f4a528217834969c88039361b06bd81a59bb4728a2e967844e4a11db4b75d3362effb9ce54e82039c2bf70d09dcadd146fd75412e3bb721927edff1105a6252cfb00be998f7c0a7f93d33ef2adf576e7e31cbca6c15dd7995280dc3dded5b388c58245ea25c3a841ffe7b24aeb91ed9d42e2cfb92ea2353633d810b48626f3baf6b61d1de507e196e805583c9656b09cba19e"}, {0xa8, 0x10f, 0x9, "ad61f33f20cd3d9da77ad7649446b1b14d411ab46dd414158d8c3966c46cf30508c7b965a3b99798c9c59f6c6000b9bb4d1dff4b7e6a0c9b4fd9338b761c4d8d5af6c318502f706f098dae5494fb6b37f39d4532009f7a7b61d4ef15cd0cd0c4383f0dadafda1594928789f8f1a525b4f4531f9d7297cc45a1a71ed3d7876c1cc31fb7341cd46baaeab1e6a74065a8dc0ff80bfe39"}, {0xf0, 0x116, 0x6, "d210205d30fb88ee8e7533c73edcf346439b0bfe737f08562d8d6aaf6aae426ffd4cf6cbc63efa44884f9819a45f52ab0e77568f5b593209e533ab320b8e291f56bd282ab8118cb97cf54480674cddd1249dcd5098b6c0b71555834fdf5076e90b54a87eed6853b3a8b60cc87e84b8328062668b4f55334b299a3f919f5f345aafe51589c532d88266b2dd24d9164157225468171e70922f5736607ff122f44ad598fb2df16d16d69ba8ff5db1a220ed5a4adb68072008562fd4198651fc7e1e10175bf585d20fcdc76e6221b69b3c4722c41c11a09d62d30a"}], 0x290}}, {{&(0x7f0000002840)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f0000002b40)=[{&(0x7f00000028c0)="3851ef77c18246875a01ab6bed4360ca668e38da0aaa21e3e21dc3dbe9acca5e13c6cfa046030780290cc16bccc8", 0x2e}, {&(0x7f0000002900)="03c379926dba0c7f004e8a48c5011fd977f6332fa4e55d76bbce9c677bb085731ec8dcfe457c07636caab97e56f617586736475d039b33fb048f6e282d52bbf43316d7ff473eed2c86ef9c00a39f58afd5fc7c8c1240a1c962c226afb833bfc9852fa2f18c489520db9bf2e374b3d6a7631e5f901a83e213cebee9b8f12d6b6d890640625a218aba918f17828041707fd650ceff47a5beb041a2c7cf8f28ddcc1e26a335e0b1b59abc3e1b88d45ea5fda9ac7d1a98ae2f6b5131106259e7245a53a8c8e6238e4150e97e", 0xca}, {&(0x7f0000002a00)="34fb9ccfc0b987a085cee70a6d54bdc046447e12847aeddecfd3e151c5c3bc1cb3cfd4f43c8d6f061658d68063f5dc882746c0e8b5e56d53d4ccb8691a6e1aa6de1276528dbb6b37926e01d320ebfcdf9146c18095c90ab710", 0x59}, {&(0x7f0000002a80)="7202b83ce65b6f2405701d63ed59165c78a9f32d6d1d4047367108afdc6e431c62bf6ab01ce13028fa55b3f38d81883784621b09f9cde51985672bce823eeec02e8965aafdbb0f619fd4014338570d776af64c167e990952952aeeb93ada9f3cf977fb45aba961b10a6d8d402b462787e227cd433756c50325301f7631b11358bf8f2f2242d193d8e7a528ed13321701478d70bc2087", 0x96}], 0x4, &(0x7f0000002b80)=[{0x60, 0x114, 0x717, "d6387881df277bb096b8009df147898c32fc4eb2db7ceb5b67e3385ec1d396e2ed7e6f361c0dcb2a1ebdb9cce3c572e3a3ed7a8e89ee2426703275e8c8eb56eeb4220a6c81a99bf691d47bba0b"}], 0x60}}], 0x6, 0x85) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) syz_io_uring_submit(r5, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0) 06:01:54 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x935b}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2, 0x40010, r0, 0x0) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) openat$sysfs(0xffffffffffffff9c, &(0x7f0000002c80)='/sys/block/loop7', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x1, 0x0, r4, 0x0, &(0x7f0000000040)="c434fd80f2dad2d5df8b4a7fc5b838c2f80b9fa87cae61d6e738ba2f5a84667c721eee336855c429587411202e724637b4f59e647d2f2f86b8297dd779136bfe7a5e0f347d6a150fddcd8956a393f364e9635b83320a029dbd21bdd952a517a538b9809d7c3703877152cdaf3847eb", 0x6f, 0x12000, 0x1}, 0x84) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) r5 = getpgrp(0x0) fcntl$setown(r4, 0x8, r5) 06:01:55 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) io_uring_setup(0x7b51, &(0x7f0000000080)={0x0, 0xdd15, 0x0, 0x0, 0x310}) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000000040)={0x2, {0x2, 0x3, 0x7, 0x1, 0x3ff, 0x14}}) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x935b}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 06:01:55 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 57) 06:01:55 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x935b}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x2000, 0x0, 0x0, 0x0) [ 3100.209674] FAULT_INJECTION: forcing a failure. [ 3100.209674] name failslab, interval 1, probability 0, space 0, times 0 [ 3100.212018] CPU: 0 PID: 17541 Comm: syz-executor.0 Not tainted 5.10.202 #1 [ 3100.213434] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3100.215134] Call Trace: [ 3100.215682] dump_stack+0x107/0x167 [ 3100.216435] should_fail.cold+0x5/0xa [ 3100.217223] ? create_object.isra.0+0x3a/0xa20 [ 3100.218161] should_failslab+0x5/0x20 [ 3100.218939] kmem_cache_alloc+0x5b/0x310 [ 3100.219796] ? find_held_lock+0x2c/0x110 [ 3100.220636] create_object.isra.0+0x3a/0xa20 [ 3100.221540] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3100.222590] __kmalloc_node+0x1ae/0x420 [ 3100.223437] memcg_alloc_page_obj_cgroups+0x73/0x100 [ 3100.224487] memcg_slab_post_alloc_hook+0x1f0/0x430 [ 3100.225528] kmem_cache_alloc_bulk+0x182/0x320 [ 3100.226478] io_submit_sqes+0x6f76/0x85c0 [ 3100.227379] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 3100.228406] __do_sys_io_uring_enter+0x6b5/0x1920 [ 3100.229405] ? lock_downgrade+0x6d0/0x6d0 [ 3100.230255] ? find_held_lock+0x2c/0x110 [ 3100.231110] ? io_submit_sqes+0x85c0/0x85c0 [ 3100.232019] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3100.233018] ? wait_for_completion_io+0x270/0x270 [ 3100.234009] ? rcu_read_lock_any_held+0x75/0xa0 [ 3100.234962] ? vfs_write+0x354/0xa70 [ 3100.235747] ? fput_many+0x2f/0x1a0 [ 3100.236499] ? ksys_write+0x1a9/0x260 [ 3100.237292] ? __ia32_sys_read+0xb0/0xb0 [ 3100.238154] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3100.239240] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3100.240303] do_syscall_64+0x33/0x40 [ 3100.241074] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 3100.242131] RIP: 0033:0x7fb03d693b19 [ 3100.242896] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3100.246653] RSP: 002b:00007fb03ac09188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 3100.248230] RAX: ffffffffffffffda RBX: 00007fb03d7a6f60 RCX: 00007fb03d693b19 [ 3100.249685] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 3100.251157] RBP: 00007fb03ac091d0 R08: 0000000000000000 R09: 0000000000000000 [ 3100.252622] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3100.254071] R13: 00007ffe77755f3f R14: 00007fb03ac09300 R15: 0000000000022000 06:01:55 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = syz_open_dev$vcsa(0x0, 0xe11, 0x4000) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000000240)={'wg2\x00'}) io_uring_enter(r4, 0x2860, 0x6a82, 0x2, &(0x7f0000000040)={[0x2]}, 0x8) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x935b}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KIOCSOUND(r5, 0x4b2f, 0x1) statx(r4, &(0x7f0000000180)='./file0\x00', 0x100, 0x10, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x82000, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@uname={'uname', 0x3d, 'wg2\x00'}}, {@version_9p2000}, {}], [{@euid_lt}, {@dont_measure}, {@context={'context', 0x3d, 'user_u'}}, {@fsmagic={'fsmagic', 0x3d, 0x2}}, {@subj_type={'subj_type', 0x3d, '\x00'}}, {@fowner_gt={'fowner>', 0xffffffffffffffff}}, {@euid_gt={'euid>', r6}}, {@subj_role={'subj_role', 0x3d, ',{\''}}]}}) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 06:01:55 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x935b}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x26040000) [ 3100.285872] device veth0_vlan entered promiscuous mode 06:01:55 executing program 4: socket$inet6_udp(0xa, 0x2, 0x0) socket$inet(0x2, 0xa, 0xff7ffffd) r0 = syz_io_uring_setup(0x3157, &(0x7f0000000140), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000500)="200000000002000019000000500100000f000000000000000000000004000000000002", 0x23}], 0x0, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r5 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x8802) r6 = fcntl$dupfd(r5, 0x0, r4) writev(r6, &(0x7f0000000140)=[{&(0x7f0000000300)="0040abe02400030021206cda3b5e5672b89aeddb2a535fbd", 0x7e0}], 0x1) ppoll(&(0x7f0000000100)=[{r5}], 0x1, &(0x7f0000000180), 0x0, 0x0) io_uring_enter(r0, 0xd34, 0xe532, 0x1, &(0x7f0000000040)={[0xd6fe]}, 0x8) syz_io_uring_setup(0x34e8, &(0x7f00000001c0)={0x0, 0xedaa, 0x20, 0x2, 0x385, 0x0, r0}, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000000240), &(0x7f0000000280)) 06:01:55 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r1 = socket$inet(0x2, 0xa, 0xff7ffffd) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f00000001c0)={'broute\x00', 0x0, 0x0, 0x0, [0x5, 0xffffffff, 0x31353679, 0x1, 0x4, 0x1000]}, &(0x7f0000000040)=0x78) ioctl$SNAPSHOT_UNFREEZE(r1, 0x3302) r2 = syz_io_uring_setup(0x3157, &(0x7f0000000140), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) syz_io_uring_submit(r5, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0) 06:01:55 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r1 = socket$inet(0x2, 0xa, 0xff7ffffd) ioctl$SNAPSHOT_UNFREEZE(r1, 0x3302) r2 = syz_io_uring_setup(0x3157, &(0x7f0000000140), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) sendmmsg(r1, &(0x7f0000002c00)=[{{&(0x7f00000001c0)=@ax25={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x6}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000240)="ad797a308e10e3adcfbca97a3eb76948f68bd79dbb14a1faabd468dbe37d9f26a39a1ba6593014e03d67bac3f432854b3c292761a490b0224133628093ab0dc5fa3504b199e0a7ecf0e0e8fe0f9a880e62fa79f6627341dfcc7bea9b7489c50c8a938367a4276b7eb96847ee6ea3aa783b7e1df41e18104332bb773f0fb04e03830a60324a11a1400cace89467a4699387bae773111cc2cc3958d60ec5aeacdd4b42d6c62e1e20a70cfb6d526e225520a8ffbebea23e8553547a", 0xba}, {&(0x7f0000000040)="99631f49126fa8dbfb53e6faa92c8c16a66b1ab2804709c44c49f8da6275c522c7a6", 0x22}, {&(0x7f0000000300)="a503dc7f86b47cd77e145a505ada3594642983a210eaaf1e8af158a202ad0c112eac740ac27ae9545b9b6f08bd853850e013edfdab4f26d9b75a1f464e849ed085648308b6dcab82a271f0ebc4e823e4c1346a67f1ff9d4ecf06c8514e58109ceca8acf3e7243f530e57889193a9b050bb53fd283773481f263569809a03bf24a4b2d85c6b92c80cc1b13f", 0x8b}, {&(0x7f00000003c0)="524a128c43736a3000791497d930b4b29f", 0x11}, {&(0x7f0000000400)}, {&(0x7f0000000440)="4a8bf9486551f7b46bf809eff01d030fed7a9e5eb9f6d816efff779b7e3bfa905fad3c81b1cbdb7275605aa0b6de35a4673bbeb7ac499771410737ddf7b55bd97d671b5b5ae71d7154c61425b9cc40156f95ffe7ed3ed1c49220ab37d5fc26b8bb84218b77d9d0e4042c1ece3a903acc6c3d2fef7bc154bbc9c9883752a04f6d45b9ad0a2a65c3f73dca02620ec195bbeb6a265c12d5e2062f6aa2307d77af7687f2eb1e4cde66337fe557e893d2fe25f79a3b7920ad10afc049", 0xba}], 0x6, &(0x7f0000000580)}}, {{&(0x7f00000005c0)=@rc={0x1f, @any, 0x3}, 0x80, &(0x7f0000000800)=[{&(0x7f0000000640)="7362ead23c7885e93919f5324c40222a814964e0d50630f29a65edd2c9918e96c260c77a57166730e7a52f", 0x2b}, {&(0x7f0000000680)="ab6ef16bbc5854a897bb3c09c95f7cf0dcc727e2b5b911fb7ded7adb105fbdaea1fcba88d1c5ef00cd639d6e547ee779ea786dfef27cda5dda98d8f63b91e8fc09e3c144", 0x44}, {&(0x7f0000000740)="5ed082ac254ff410acc0252bfc10c69e0b39df5b6b0b3520f55f274770ca6d81211b7e944f92a8644c4c071e49f2bff2f2135b30502586ae304602e4fd58b1e1d968ab815d9e167563c98847d99126a3c2bff01e2cc4c9e3404f39aa3d09147bb59597b372b840fdb8afb1acf5cac1a750e968b041138409a90b8a5bc41358b2a2ce1850d47107ebe454adba1657b9b36058caa58d621426976943d8e86cac4c26cde085a921b2b88591033d6e460f30fcdfe8", 0xb3}], 0x3, &(0x7f0000000840)=[{0x68, 0xff, 0x7, "029909a1d790f4c641296ca25bd3ad57f2f667c2055a18b88d8cc870d3d59cde514f8c45026da3086dff5c50b7b00839381ff49806eeef81a69d8e2b465b5d0ea26a9c4a17eedda23b471c6f05b8487ab3d7e4198656"}, {0x20, 0x102, 0x4, "2a048144ac63bfa119fe4e186474da5b"}, {0x98, 0x84, 0x1ff, "5944831ea02e950dfb2c98fb0e8ae7b9c332fd181d972057cbf410587c9aa67ffd346aa30bde1b4b0649361daa5575f2777e1f8311b57d84f1437dd21e63e787a81b827d2b7274df8911f88935c8d9c5ebffdfc5efd2be9411292cd1b46d8c005b66c5fe6d0d62f50b515a51f099cb52997d2798b74d29f25b8c27e22227c281b51ebc9623e7"}], 0x120}}, {{&(0x7f0000000980)=@phonet={0x23, 0x1, 0xcc, 0x6}, 0x80, &(0x7f0000000a80)=[{&(0x7f0000000a00)="d2bc214a2584e797a62c26d47de570cc", 0x10}, {&(0x7f0000000a40)="5aa61215633a88a53a34b9e42b9880a6b498860f692bb95985d8b780103d60eff3c0b27475d251417af60c", 0x2b}], 0x2, &(0x7f0000000ac0)=[{0x100, 0x111, 0x8, "e3e5d3f383779ae200eefcc58e187f5d550b206e4215b9d6e92964da295f5de88b090f2282dc31e679d51ee0f939078b488d149405f14c2b970de55be89f4445a6bf05bd18a1c6a28fc3d376dcea3986573c6a2b7cd29ce6bde500409f8f49cd179aa8c91f2582307a680e759187a2c4050fc028d038add61e9ce1b92d9b531c33289e909a3cb46591820988be5e2c8fbad4359aa12944095caef9dd2e4e009bab9b89e092d4d4b74b77c60d7f8b984048b02988c6c6190fba26f73044098ee79c56d32309bd8dd37903d8e440624cba89e9a47cd91091e89706f339e244c031c6eded3e762ed5efecc4c982ee"}, {0x48, 0x117, 0x7, "a6587216b50e7f7429d16ebd4d4bba4b945bd9b5fee878311948fc9d607f4ce76eb89dcd4d141a5d81caf9148d6d9f667087f2629dfa1df8"}, {0xf8, 0x0, 0xb9fe, "c04a95831f79252f50dc216151e4e0879933ccb9ca9caa67b43017ecfb8d59d4fe7b5e2fe5ea17dd832acbea005a9840fd0119c6d4f5c0310b8d07acdb74fd86afa426949ef19d0bceb3b7f270081bb4fe504df21f1143801b2b41bbb29afc261466d9a932d9f0f2e0f0161cbb877b310a92abd3f2df286ea8447a5c7cd3cef4f180f46b215241395f509f8b050e9aebe702029ea011c928889095bde9393e0246f1a257570be33b9516a5632b66bf9faa870b371bbeeecf106638af8b0da95aec6aed87a394e47c6bdd2ccb05eae6e707f421aac3121022cd1f07db95badfc14ca4149f"}], 0x240}}, {{&(0x7f0000000d00)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000000e40)=[{&(0x7f0000000d80)="dd3f26ee451a090e01ccc8b4777d3c8efb9bf32000fb38f44b5a939cd6fe1585477df915a98daff0d1980847b99caf709deb2ccafaecea8a1f6216fabc84f10a852099e3a2d42abe736a5c5e0152dd05e3b4e8bfee26b193de80e8abb2dd2c063211c000e3897dee779d9d959399df160098bdf2e44b756e7203ff9f60016f431b6eb28c", 0x84}], 0x1, &(0x7f0000000e80)=[{0xe0, 0x119, 0xffff, "c6aad7e4e243867923b97131126a0997fd76aaa1ef541882561fd1c8b059c3c445fb4f6b42c6c0a41d32112b417ddcbf5bafbfd95f9ccdf987a7e2b747ce62e43af0fa03d3b7da78022dcf53bd6c4232f73b862be1172c108309461ae5332b8badda549992c301aff1ce28ef3caa467bab680f480704957449ce8685a3c3546dfbdd32dfd291f01e41287d3e6cadddbf2cc6586d4faa59d908c6a86cd3d3923844aa056664efb9113a6101984cd11d371339b28ab7d8347c747c867e0598f3c0005329c68d5c6e8854c2d8cc69bb"}, {0x18, 0x112, 0x3f800, '[V'}, {0x1010, 0x104, 0x8, "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"}, {0x48, 0x29, 0x7fff, "7edd8f04e1b4845137210e285a0e88369ba2c3861de4907ef9ae72c383e72d1423486e3d5bd5094485a9fa7a7121d4604cbb70dd8a70b6"}, {0xb8, 0x119, 0x0, "33831c976f32759b8a75732e3d290a49fea86b5a220404bb138e145a30ac9c9799c8f39179f76c957289f75aa1f02be998706e885f810b332c386f3b0f4dd023f422214b8810c5327e35bc40513cd08ca3c311ddc5c863bb19e8c5d901ad2853d1c7fd3c5720e787e5989645235c33545c385736ca6748df62ae5b1f5a5017f1bf3f18022e5745272b37a6ee69b29643599a2ccee9bb243c8563ffc15fba216d7bdc"}, {0x70, 0x110, 0x1ac, "564d1e18c4039571782f82237c90eb31c4f73c0b0d68775a008160515ead43466348eda35c1fe4423747f7c1239e48efcaeccff5b876bb64914f4a53e71059859fcd78993bd8906acf289b32dd0543bb383851c5d5f27227270c349c"}], 0x1278}}, {{&(0x7f0000002100)=@ax25={{0x3, @bcast, 0x1}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}, 0x80, &(0x7f0000002500)=[{&(0x7f0000002180)}, {&(0x7f00000021c0)="7484ab919027834da04a4693689e7f49b7faaa1c3f0170a8ffe745ef0900c9eb3a30770b023b1c8a5cd6fa6ebe88f1a070b839587d8859124a092f90bb5427c3b7801e6855c18b5291eb8e5477e1dbd4265764f5b616185d54a60371f46d9daa71305619dd95f159584a0645c1b792daab891e4e1ab8c6e83e04d15f364357b8aaea053721a8f71657d803566f9d276965d8b22c5d3afc66d8a17e4b3a8af1f53a22f06d7f", 0xa5}, {&(0x7f0000002280)="761651a64982dae2bef44e8c777984f30029761bd0e238d1d4b3434af149c3accd455ff7bbff40333b5bcebd45aceea6d3d3e4fd33825aa130e1b9eee114630e2b9023086e73aa06be39ccd16227064eba1294a4d26a28ceae31d2bf3804745690768116c9af5f8e285cb2c0b5d895c0a876548a18", 0x75}, {&(0x7f0000002300)="bbd8ce0b69fa724d336f9ede387bc2d8f19503d0ae36be3922cb08700a48fe65cfaee243a27c30c56c6c0d344bcee33b1ee72dbb00ef897ee30be3fbe9ea6bd32ec8488fde4e8786e6b4280ea420a50ce6817d273cd2b712a4e15acb7840ec4e1bfcc6eedabe7bd8c603cc351b4f2c1c92ac982e8af36ff552aff9ebdd5436beae8935e680ba72549ca209c72a9d394d149473075e3f466677a56d97cd75b981d127a6e5d0d013b1c2eae59a5756463793346e65b86d263da67a9d1f5a08de3004f9612a1392ca066bd769567562047d1ec1cdebb3d8506e1c94077d09efd4fc646b7d1235ab15aaabdaf6d6db1962e9f24c79c28a24d46a0e", 0xf9}, {&(0x7f0000002400)="a719f9b27638b6376082502efc8007be5a41adcbd7c01b8a43a14c382326e2c50644af5eb58a794d47f8101c497466528ab09c20af584b44f472efc3b5043c0e21177358c0c979bde3833c2ac9299e4b9a683322cdd9e487904ef7876e2ba3320f6e0cdf3d5e8c8062595c13e89f5019546ae15d075455447633d0c6e1f693888a4212e39db115edef164501e0e10470cdb8295c15137eebfc9817c7fb9f14fd34c748ab7d6bae519c50989fb07dea2f4e6050640aef75c09e96b952b6944a1cddae0ff122986b8f0daf847e16a9d00dbd81714308b726bf6410f8a3a8ea22a4e067583fa0", 0xe5}], 0x5, &(0x7f0000002580)=[{0xf8, 0x115, 0x1, "d192f0b3f8f48bba9e15d321f5c7b914eb369d36976b0c4dd0a2af6effeee5e74c350e44f5fbe44e292402e07e3a41b4e2dead90aefc9fa6b078c8462e5039b04a6e98815cdc744d46ca2edd1839bdb37f4a528217834969c88039361b06bd81a59bb4728a2e967844e4a11db4b75d3362effb9ce54e82039c2bf70d09dcadd146fd75412e3bb721927edff1105a6252cfb00be998f7c0a7f93d33ef2adf576e7e31cbca6c15dd7995280dc3dded5b388c58245ea25c3a841ffe7b24aeb91ed9d42e2cfb92ea2353633d810b48626f3baf6b61d1de507e196e805583c9656b09cba19e"}, {0xa8, 0x10f, 0x9, "ad61f33f20cd3d9da77ad7649446b1b14d411ab46dd414158d8c3966c46cf30508c7b965a3b99798c9c59f6c6000b9bb4d1dff4b7e6a0c9b4fd9338b761c4d8d5af6c318502f706f098dae5494fb6b37f39d4532009f7a7b61d4ef15cd0cd0c4383f0dadafda1594928789f8f1a525b4f4531f9d7297cc45a1a71ed3d7876c1cc31fb7341cd46baaeab1e6a74065a8dc0ff80bfe39"}, {0xf0, 0x116, 0x6, "d210205d30fb88ee8e7533c73edcf346439b0bfe737f08562d8d6aaf6aae426ffd4cf6cbc63efa44884f9819a45f52ab0e77568f5b593209e533ab320b8e291f56bd282ab8118cb97cf54480674cddd1249dcd5098b6c0b71555834fdf5076e90b54a87eed6853b3a8b60cc87e84b8328062668b4f55334b299a3f919f5f345aafe51589c532d88266b2dd24d9164157225468171e70922f5736607ff122f44ad598fb2df16d16d69ba8ff5db1a220ed5a4adb68072008562fd4198651fc7e1e10175bf585d20fcdc76e6221b69b3c4722c41c11a09d62d30a"}], 0x290}}, {{&(0x7f0000002840)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f0000002b40)=[{&(0x7f00000028c0)="3851ef77c18246875a01ab6bed4360ca668e38da0aaa21e3e21dc3dbe9acca5e13c6cfa046030780290cc16bccc8", 0x2e}, {&(0x7f0000002900)="03c379926dba0c7f004e8a48c5011fd977f6332fa4e55d76bbce9c677bb085731ec8dcfe457c07636caab97e56f617586736475d039b33fb048f6e282d52bbf43316d7ff473eed2c86ef9c00a39f58afd5fc7c8c1240a1c962c226afb833bfc9852fa2f18c489520db9bf2e374b3d6a7631e5f901a83e213cebee9b8f12d6b6d890640625a218aba918f17828041707fd650ceff47a5beb041a2c7cf8f28ddcc1e26a335e0b1b59abc3e1b88d45ea5fda9ac7d1a98ae2f6b5131106259e7245a53a8c8e6238e4150e97e", 0xca}, {&(0x7f0000002a00)="34fb9ccfc0b987a085cee70a6d54bdc046447e12847aeddecfd3e151c5c3bc1cb3cfd4f43c8d6f061658d68063f5dc882746c0e8b5e56d53d4ccb8691a6e1aa6de1276528dbb6b37926e01d320ebfcdf9146c18095c90ab710", 0x59}, {&(0x7f0000002a80)="7202b83ce65b6f2405701d63ed59165c78a9f32d6d1d4047367108afdc6e431c62bf6ab01ce13028fa55b3f38d81883784621b09f9cde51985672bce823eeec02e8965aafdbb0f619fd4014338570d776af64c167e990952952aeeb93ada9f3cf977fb45aba961b10a6d8d402b462787e227cd433756c50325301f7631b11358bf8f2f2242d193d8e7a528ed13321701478d70bc2087", 0x96}], 0x4, &(0x7f0000002b80)=[{0x60, 0x114, 0x717, "d6387881df277bb096b8009df147898c32fc4eb2db7ceb5b67e3385ec1d396e2ed7e6f361c0dcb2a1ebdb9cce3c572e3a3ed7a8e89ee2426703275e8c8eb56eeb4220a6c81a99bf691d47bba0b"}], 0x60}}], 0x6, 0x85) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) syz_io_uring_submit(r5, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0) 06:02:08 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x935b}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x3f00, 0x0, 0x0, 0x0) 06:02:08 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r1 = socket$inet(0x2, 0xa, 0xff7ffffd) ioctl$SNAPSHOT_UNFREEZE(r1, 0x3302) r2 = syz_io_uring_setup(0x3ebe, &(0x7f0000000140)={0x0, 0x0, 0x1, 0x8000000}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(0xffffffffffffff9c, 0x800c6613, &(0x7f00000001c0)=@v1={0x0, @aes256, 0x4, @desc2}) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) syz_io_uring_submit(r5, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x18, r0, @in_args={0x2}}, './file0\x00'}) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r4, &(0x7f0000000040)=@IORING_OP_ASYNC_CANCEL={0xe, 0x3, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x0, {0x0, r7}}, 0x5) io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0) 06:02:08 executing program 4: socket$inet6_udp(0xa, 0x2, 0x0) socket$inet(0x2, 0xa, 0xff7ffffd) r0 = syz_io_uring_setup(0x3157, &(0x7f0000000140), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) waitid(0x1, 0x0, 0x0, 0x6000000d, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r5 = getpid() process_vm_readv(r5, &(0x7f0000000240)=[{&(0x7f0000000140)=""/193, 0xc1}], 0x1, &(0x7f0000000380)=[{&(0x7f0000003300)=""/4096, 0xd00}], 0x1, 0x0) perf_event_open(&(0x7f00000001c0)={0x4, 0x80, 0x80, 0x3, 0x1, 0x9, 0x0, 0x4, 0x4000, 0x4, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x1, 0x8}, 0x1000, 0x40, 0xfffff31e, 0x0, 0x5, 0xff, 0x4, 0x0, 0xff, 0x0, 0x4}, r5, 0xf, r3, 0x14) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 06:02:08 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 58) 06:02:08 executing program 7: ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000080)={{0x3, 0x3, 0x7, 0x1, 0x8}}) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000000040)={0x2, {0x2, 0x3, 0x7, 0x1, 0x3ff, 0x14}}) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x935b}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000340), r5) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_KEY(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x30, r6, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x7}]}, 0x30}}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 06:02:08 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x20000000}, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000400)='/proc/sysvipc/shm\x00', 0x0, 0x0) bind(r6, &(0x7f0000000440)=@nfc={0x27, 0x0, 0x1, 0x4}, 0x80) syz_io_uring_submit(r1, r5, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000180)=0x80, &(0x7f0000000240)=@l2={0x1f, 0x0, @fixed}, 0x0, 0x80000}, 0x5) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000580)=ANY=[@ANYBLOB="15", @ANYRES32=0xffffffffffffffff, @ANYBLOB="01000000000000002e2f66696c653000"]) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f00000005c0)={'batadv_slave_1\x00'}) readlinkat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=""/79, 0x4f) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, @perf_config_ext={0x0, 0x935b}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) socketpair(0x27, 0x1, 0xffff, &(0x7f0000000340)={0xffffffffffffffff}) r9 = accept$inet6(0xffffffffffffffff, &(0x7f0000000380)={0xa, 0x0, 0x0, @mcast1}, &(0x7f00000003c0)=0x1c) dup2(r8, r9) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 06:02:08 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x935b}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x27040000) 06:02:08 executing program 3: ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000080)=0x2) getpgid(0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa418b6d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00'}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x800448d2, &(0x7f0000000080)) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000380)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="000000006c65308d00000000801190c5dd6d31a30acab68a69ea89000000000080c8b55719c94a54038a4303b2d794fe308fdb6d4c7b8b781e03d0a70306b8f1064012082a0c7ad9ce001e983cfb0f3e5636487c"]) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000280)=0x1) clone3(&(0x7f0000000200)={0x44004100, 0x0, &(0x7f00000000c0), 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(r2, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r3 = socket$inet(0x2, 0xa, 0xff7ffffd) ioctl$SNAPSHOT_UNFREEZE(r3, 0x3302) dup3(r3, r2, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000400)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@cachetag={'cachetag', 0x3d, '/dev/sr0\x00'}}, {@cache_none}, {@afid={'afid', 0x3d, 0x1ff}}, {@mmap}], [{@smackfsfloor={'smackfsfloor', 0x3d, '*'}}, {@smackfsfloor={'smackfsfloor', 0x3d, '(\x7f-!^}:{}\\'}}, {@fsuuid={'fsuuid', 0x3d, {[0x53, 0x0, 0x35, 0x30, 0x33, 0x61, 0xf, 0x37], 0x2d, [0x32, 0x64, 0x39, 0x37], 0x2d, [0x65, 0x36, 0x65, 0x33], 0x2d, [0x31, 0x64, 0x65, 0x64], 0x2d, [0x62, 0x34, 0x8, 0x0, 0x61, 0x38, 0x35, 0x64]}}}, {@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@seclabel}, {@euid_eq={'euid', 0x3d, 0xee01}}, {@smackfshat={'smackfshat', 0x3d, ')\xda%&\xbf*'}}, {@dont_measure}, {@rootcontext={'rootcontext', 0x3d, 'staff_u'}}, {@appraise}]}}) openat$sr(0xffffffffffffff9c, &(0x7f0000000100), 0xc0240, 0x0) [ 3113.771752] FAULT_INJECTION: forcing a failure. [ 3113.771752] name failslab, interval 1, probability 0, space 0, times 0 [ 3113.774310] CPU: 0 PID: 17617 Comm: syz-executor.0 Not tainted 5.10.202 #1 [ 3113.775717] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3113.777418] Call Trace: [ 3113.777948] dump_stack+0x107/0x167 [ 3113.778688] should_fail.cold+0x5/0xa [ 3113.779469] ? create_object.isra.0+0x3a/0xa20 [ 3113.780386] should_failslab+0x5/0x20 [ 3113.781152] kmem_cache_alloc+0x5b/0x310 [ 3113.781966] ? mark_held_locks+0x9e/0xe0 [ 3113.782782] create_object.isra.0+0x3a/0xa20 [ 3113.783706] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3113.784757] kmem_cache_alloc_bulk+0x168/0x320 [ 3113.785706] io_submit_sqes+0x6f76/0x85c0 [ 3113.786608] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 3113.787645] __do_sys_io_uring_enter+0x6b5/0x1920 [ 3113.788627] ? lock_downgrade+0x6d0/0x6d0 [ 3113.789485] ? find_held_lock+0x2c/0x110 [ 3113.790324] ? io_submit_sqes+0x85c0/0x85c0 [ 3113.791246] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3113.792252] ? wait_for_completion_io+0x270/0x270 [ 3113.793253] ? rcu_read_lock_any_held+0x75/0xa0 [ 3113.794200] ? vfs_write+0x354/0xa70 [ 3113.794964] ? fput_many+0x2f/0x1a0 [ 3113.795751] ? ksys_write+0x1a9/0x260 [ 3113.796536] ? __ia32_sys_read+0xb0/0xb0 [ 3113.797373] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3113.798432] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3113.799510] do_syscall_64+0x33/0x40 [ 3113.800271] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 3113.801298] RIP: 0033:0x7fb03d693b19 [ 3113.802056] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3113.805788] RSP: 002b:00007fb03ac09188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 3113.807334] RAX: ffffffffffffffda RBX: 00007fb03d7a6f60 RCX: 00007fb03d693b19 [ 3113.808799] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 3113.810229] RBP: 00007fb03ac091d0 R08: 0000000000000000 R09: 0000000000000000 [ 3113.811736] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3113.813185] R13: 00007ffe77755f3f R14: 00007fb03ac09300 R15: 0000000000022000 06:02:08 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x935b}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x28040000) 06:02:08 executing program 6: r0 = syz_io_uring_setup(0xf71, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1fd, 0x182}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x935b}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$vcsa(0x0, 0xe11, 0x4000) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000240)={'wg2\x00'}) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000280)={{0x1, 0x1, 0x18, r4, {0x800}}, './file0\x00'}) perf_event_open$cgroup(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x9, 0x40, 0x80, 0x0, 0xc7, 0x0, 0x1b, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={&(0x7f00000001c0), 0x4}, 0x4100a, 0x7, 0x74084c73, 0x5, 0x6, 0x8, 0x5, 0x0, 0x7fffffff, 0x0, 0x2}, r5, 0x6, r6, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB='\v']) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4, 0x80010, r7, 0x0) 06:02:08 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r1 = socket$inet(0x2, 0xa, 0xff7ffffd) ioctl$SNAPSHOT_UNFREEZE(r1, 0x3302) r2 = syz_io_uring_setup(0x3157, &(0x7f0000000140), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) syz_io_uring_submit(r5, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r6 = syz_open_dev$vcsa(0x0, 0xe11, 0x4000) ioctl$ifreq_SIOCGIFINDEX_wireguard(r6, 0x8933, &(0x7f0000000240)={'wg1\x00'}) ioctl$sock_inet6_SIOCSIFDSTADDR(r6, 0x8918, &(0x7f0000000040)={@private1, 0x31}) io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0) recvmsg$unix(r6, &(0x7f00000006c0)={&(0x7f00000001c0), 0x6e, &(0x7f0000000740)=[{&(0x7f0000000280)=""/203, 0xcb}, {&(0x7f0000000380)=""/251, 0xfb}, {&(0x7f0000000480)=""/87, 0x57}, {&(0x7f0000000500)=""/56, 0x38}, {&(0x7f0000000540)=""/74, 0x4a}, {&(0x7f00000005c0)=""/34, 0x22}, {&(0x7f0000000600)=""/185, 0xb9}], 0x7, &(0x7f00000008c0)=ANY=[@ANYBLOB="2c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=0xffffffffffffffff, @ANYBLOB="000000001c000000002000000100000002000000d04366bba771c537d0e525ecd0ccef80284df13e3ff38c0bdc4222fb078916f13bc450217851a02736c9ef304e9de8ba2f4b1cf25cf298be66bbb8", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x50}, 0x10000) getsockopt$inet6_mreq(r7, 0x29, 0x14, &(0x7f0000000840)={@ipv4={""/10, ""/2, @broadcast}}, &(0x7f0000000880)=0x14) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(r8, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r9 = socket$inet(0x2, 0xa, 0xff7ffffd) ioctl$SNAPSHOT_UNFREEZE(r9, 0x3302) dup3(r9, r8, 0x0) dup3(0xffffffffffffffff, r8, 0x0) 06:02:08 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000000040)={0x2, {0x2, 0x3, 0x7, 0x1, 0x3ff, 0x14}}) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x935b}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='fd\x00') 06:02:08 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x935b}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000004, 0x100010, r0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(r4, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r5 = socket$inet(0x2, 0xa, 0xff7ffffd) ioctl$SNAPSHOT_UNFREEZE(r5, 0x3302) dup3(r5, r4, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r4, 0xc0709411, &(0x7f0000000080)={{0x0, 0x4, 0x7fff, 0x6, 0x3, 0x7, 0x1, 0x0, 0x400, 0x7ff, 0x1, 0x10, 0x8, 0x401, 0x4}, 0x8, [0x0]}) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x5, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) r6 = gettid() r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/block/loop3', 0x2000, 0x2) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x1, 0x3, 0x0, 0xe0, 0x0, 0x7, 0x2a50, 0xe, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x3ff, 0xc5fc80fef11c049, @perf_bp={&(0x7f0000000180)}, 0x2020, 0x5, 0x40, 0x2, 0x8, 0x40, 0x6, 0x0, 0x1000, 0x0, 0x9}, r6, 0xffffffffffffffff, r7, 0x3) 06:02:22 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x935b}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x3f000000) 06:02:22 executing program 3: ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000080)={{0x3, 0x3, 0x7, 0x1, 0x8}}) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000000040)={0x2, {0x2, 0x3, 0x7, 0x1, 0x3ff, 0x14}}) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x935b}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000340), r5) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_KEY(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x30, r6, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x7}]}, 0x30}}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 06:02:22 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000040)={0x2, {0x2, 0x3, 0x7, 0x1, 0x3ff, 0x14}}) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x935b}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) r6 = syz_open_dev$vcsa(0x0, 0xe11, 0x4000) ioctl$ifreq_SIOCGIFINDEX_wireguard(r6, 0x8933, &(0x7f0000000240)={'wg2\x00'}) syz_io_uring_submit(r3, r5, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x3, 0x6000, @fd=r6, 0x1, &(0x7f0000000180)=[{&(0x7f0000000340)="e12c62120eb26a2ac388be6fa890cf66d1d2c2e9129a111eff00119d845984b28ddb5904fea2cfc587a8535413311cbdf12da0cff1a1e965dc5e31f31173a78bdc241ea6becf705fa414e1a778bf63ff91d23880c7b6f6888928896fc3f686922ef2f3e5d2299b9409cc6829e87ff7b93b93abb4101115a93868159ebb27b91e0ed08b5eb0dd3c1624a373a977b750f98c", 0x91}, {&(0x7f0000000400)="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", 0x1000}, {&(0x7f0000001400)="87dffea1672d2f3c1e8af4625314c95d913fc2dba1a59780fa87b4e7a1772529db4aa868dbfd33ab4f129dcee34e4d6baae3c49c9766927fa1e0a543e414a9d1265412e50197fd7889a83b84f58ea107aa2d49e967b8a997201dfd0b17f8e24830426323b3ede8c17e7fd5811206da8dced5294cfda64c65b2b4067d8eb2f381ba410e8d55d163b4ad9e2a9c8ed5c540453b1b2a9cba15e981cde2ba439bc5b7e5add1e75f74e7037ff4", 0xaa}, {&(0x7f0000000080)="568f9dbe1b12e0ab11192d0031aa2e8a669396d9edb150b62b0a539401877bc9eb02fb86205976eb9f3957adc782eb5acfd5aa91f476a23a3ebf85031a87186eb1ccc0c82eb36ebf9cc48befd137c01708aa820638a348a68dadabdcb7e04de33bdab7f45a852a", 0x67}], 0x4, 0xc, 0x0, {0x1}}, 0x10000) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 06:02:22 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 59) 06:02:22 executing program 4: socket$inet6_udp(0xa, 0x2, 0x0) socket$inet(0x2, 0xa, 0xff7ffffd) r0 = syz_io_uring_setup(0x3157, &(0x7f0000000140), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(r4, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r5 = socket$inet(0x2, 0xa, 0xff7ffffd) ioctl$SNAPSHOT_UNFREEZE(r5, 0x3302) dup3(r5, r4, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_SENDMSG={0x9, 0x1, 0x0, r5, 0x0, &(0x7f0000001a00)={&(0x7f00000001c0)=@ax25={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x1}, [@null, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x80, &(0x7f0000001840)=[{&(0x7f0000000240)="3d18872c9dc86e6d7474ee0d9f5ff4ae1051743b4f9e175125c1d6a198b01c857fdb860aa6d0316a4eb780fb4b3c8b01092b14376630cafe973622f8d6a07c4a4fb8980f4cf03b2906cb79b9ee9e5a794ad4ca9fdec7a99f8f2c3f5a34a61498fe69c38e495ee80c60e23fc1852ecd763fe5b34c618ce81de283a03a9c0fce80742fada271f1e966cd5e37afefa1d7150e700cc0d4da28864db6b0070922b0f18c8c5a4269616b48e9dcd1724a2d9228397285de906dce874617769cbb7855996e0a34e0db39b39ceacdc4d92b70589856f198bb8c93a2fc2121280e", 0xdc}, {&(0x7f0000000040)="3c383a9b2be287c143ecac1ffca38d352a68c6f827bc6e37665726423f73358a9aca350494808717870a7a616ee5aa2dc1689084b94172fb", 0x38}, {&(0x7f0000000340)="0beca7eac6055db6b3d030db2d85762adf199ebe4be8a8618822753844276279dadb495369cb8a6ff5f0b6232372d223f0b5f3917502017a7c7cc0994507123ce177cf00e8d3b3df691f6a1511cd061f5f65ecce334d9de7be4d23cae290466bddc26140c08750b129114a32514d78967844bf1b1e1afe0416e8fe08feda2b9e1e422150be7320b20d4a07790eab0c53caeb786c76", 0x95}, {&(0x7f0000000400)="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", 0xfd}, {&(0x7f0000001a40)="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", 0x1f7}, {&(0x7f0000000600)="cb3aa855a0b36487030c745082e05a3e67e84f12d3fd1e404440871c280dc84f7de8b109bd02227d20bc37b19bcec5daa25b8a8faf4402e7746c628a6054f4e68b386f483942ff5be7179e9967fb7c3fa7ebe0a6c9f9af1f9b55956c012f6355e5eff7340eeee32f5f8baa7d545588e572eb84c7fe1ed3adfc98fd43cbffc554abe7e69435a723a80f93a6a6873dda236038b59698479f4e3d9f98d64a152f8358a1f68a2b884beb6b9179b5ca0637bb6ee49074d6d75c68", 0xb8}, {&(0x7f00000006c0)="fa78a221d7f9211078ca8f731f4815cbd2e1dd521b619a50a4a02a5e2b00722726debd1c9453eb716e637628", 0x2c}, {&(0x7f0000000700)="9f64a977ca61d018793b0da1c27c92f862f5d4403ee55b6613d7e168c6b11d045f9e07d4ef20dc5535fa8e0bb3d5bac201e3521e4f0e59f08f69570204d7bc458a08f3ecbdc174a5046ac73f695a0cfd7c2fc7a4227804c54ef0ad0578332f3cd38a894e95be98f022ff894d73e8df82a7ed7ea3", 0x74}, {&(0x7f0000000780)="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", 0x1000}, {&(0x7f0000001780)="15df2f009a0e37b05587b2e70a93696d65e939f61a3c9ab0adca309d36ec09c21f67b8a30fb89b24d14f070565a0742fc8cb803768bc578f7000d5c70f94410707fe1cc302a9f368f14600625be604f84b74c80da81cb068a4976d9ba6befd82616bf29dae216c88fa8c287dbab27c672351481fde2f3220612de429587a6dabfd939084e7c1b6cb4a5b5d41cecca3439ed7204829c177d31c113063ddfb4a46f82d", 0xa2}], 0xa, &(0x7f0000001c40)=[{0x88, 0x110, 0x3, "d7fd2aa25b57cc3abc536f757109deced8d1eccfbc7c365d806ef6587682e9d2637a52c012e6f7af296a8196646bec470107682d375cdf273d156e6d3d614b2b3722a2e7de72cabcb94d81acdbe343ea487756d31b8843490914b0bae4d8b3a0cfbed27fb389d76d24648b2a069eacd78d"}, {0x60, 0x119, 0x7, "6dd1d609ee1e1030c2cec54288bd05865100cdefdb7101ae4ef8482e5a9a7ab41ec8b2fb57c224589cb3a24f56ad9057496933b17d72ae93edcaf87ff50c4eb1f218dd44fd1b174aeeb4f9e45b"}, {0x40, 0x115, 0x101, "795fc2510c39a39ee9ba630fe6e9e7c222f77fdba8c6bf9800df4c12e8387f2f3922f7855a1b0994e56519f9"}], 0x128}, 0x0, 0x20000001, 0x1}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 06:02:22 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x935b}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x4000, 0x0, 0x0, 0x0) 06:02:22 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x935b}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x5c34, &(0x7f0000000040)={0x0, 0xcf6d, 0x2, 0x1, 0x17a, 0x0, r0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000180)=0x0) r7 = fcntl$dupfd(r0, 0x406, r0) syz_io_uring_submit(r4, r6, &(0x7f0000000340)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r7, &(0x7f00000001c0)=0x80, &(0x7f0000000240)=@pptp={0x18, 0x2, {0x0, @dev}}, 0x0, 0x80000}, 0x5) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 3127.630024] FAULT_INJECTION: forcing a failure. [ 3127.630024] name failslab, interval 1, probability 0, space 0, times 0 [ 3127.632441] CPU: 1 PID: 17704 Comm: syz-executor.0 Not tainted 5.10.202 #1 [ 3127.633855] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3127.635545] Call Trace: [ 3127.636092] dump_stack+0x107/0x167 [ 3127.636848] should_fail.cold+0x5/0xa [ 3127.637633] ? create_object.isra.0+0x3a/0xa20 [ 3127.638569] should_failslab+0x5/0x20 [ 3127.639348] kmem_cache_alloc+0x5b/0x310 [ 3127.640194] ? mark_held_locks+0x9e/0xe0 [ 3127.641023] create_object.isra.0+0x3a/0xa20 [ 3127.641916] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3127.642949] kmem_cache_alloc_bulk+0x168/0x320 [ 3127.643887] io_submit_sqes+0x6f76/0x85c0 [ 3127.644761] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 3127.645768] __do_sys_io_uring_enter+0x6b5/0x1920 [ 3127.646744] ? lock_downgrade+0x6d0/0x6d0 [ 3127.647598] ? find_held_lock+0x2c/0x110 [ 3127.648437] ? io_submit_sqes+0x85c0/0x85c0 [ 3127.649311] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3127.650281] ? wait_for_completion_io+0x270/0x270 [ 3127.651256] ? rcu_read_lock_any_held+0x75/0xa0 [ 3127.652213] ? vfs_write+0x354/0xa70 [ 3127.652965] ? fput_many+0x2f/0x1a0 [ 3127.653705] ? ksys_write+0x1a9/0x260 [ 3127.654479] ? __ia32_sys_read+0xb0/0xb0 [ 3127.655302] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3127.656383] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3127.657430] do_syscall_64+0x33/0x40 [ 3127.658198] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 3127.659242] RIP: 0033:0x7fb03d693b19 [ 3127.660015] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3127.663794] RSP: 002b:00007fb03ac09188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 3127.665347] RAX: ffffffffffffffda RBX: 00007fb03d7a6f60 RCX: 00007fb03d693b19 [ 3127.666809] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 3127.668271] RBP: 00007fb03ac091d0 R08: 0000000000000000 R09: 0000000000000000 [ 3127.669710] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3127.671165] R13: 00007ffe77755f3f R14: 00007fb03ac09300 R15: 0000000000022000 06:02:22 executing program 5: openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) r0 = socket$inet(0x2, 0xa, 0xff7ffffd) r1 = syz_open_dev$vcsa(0x0, 0xe11, 0x4000) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000240)={'wg2\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000580)={r3, r2, "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", "53e73264eba58c5de5d2384abbe8dd8ea72be01bfcd6daa041050a23a5ec27d5dcf0aed87f9bcc869c6ebf1c3630de884b54dd6680e1dea34f661675f984828459321f42fb83d749067850004e9da3375748fa74a4330a66e3ea1e62f2f6413aef353e78ed2acf544d3beb96eefde8336ba9c02208396979ec975179883dacee433aefb6ff1cd41b6438d2f32e0763cdc310e834afb6b92ba385e602882f705da688e37726aef9cc058a02dab68133c46f77e2355193c18fc3c0d70c5856ca61d344026973f15aa81b370a08537ef3733f3c6e5ca3c7b5de9386956019ec0bba0cd387dd3f63606989591987a9dfb27d9225a164158997325d0ef88eae9e1fc00645611ce229cf3e40de15b3798048876412e5224b27b51f15785fc3f6dd8af730312e558319274b8ada98580edfb7097b11502fce5a5abc504db249764eef116b808513d550660c186ed0f5f4921fb7b6cc0529c1eb72438455c1f667d0bd0b171b89b519612913b0152cd1b420b2a9a4df55199a0ebe110d1fcf5eebb46b91e7ae1c5c95c48038dd738f8cf670c2de9bb3d3a6f092d5738fa7ed3d6a657841bb3bed0dee2895781d82e4e2dc6b51998e88e86ff53f21a4ae8ac780306d35e90eb2dc5a3f3a7d43f5dd7ce3807cb00600f7e8754eabcc815bbef1a5382cd7ca73cc85d53020c051882911aecdf9b0ce7c1bfdfa8d820d5efd4b60bacb7e64d98fac78810f085c51a19b89289772196915c93a0503694ed2af76b6960aecf0f1af22ada485b6ac62befdf35a0916678df405ca99925089cd3812d7b09e3f91f4daa94d464df0725249ede75cc626be7a8ed7cb87c0ed46675ed79618746c44729fe831f1cf4e485815bd9f7cdf455f6437f736858cf3026b18ba39d1bddbf58e9952b7d4b566955b80cc3c058fca3cb7e6c5159c3e7367d09ef3e8881179f51c10baf5cf29c8dcdbebdfa73cda0d9ccf8ab5af9240f88f78633be5d7d91da541cfcc01d59ac4936edf9920b67d19a1a093cfd4e594a8b369da465604212c6af340f0ade89223c631ba2db120ac9cfa9bda5b00358cea4c63d66f2b99dd3d575657609224a8874f12e80025173bfe43d35072e1ca14d097201178a8e27e62d4ecad1833aef65d12690ab97e0a15fd60302d1e7e516c3a9440e8535d0d4615d173607be209fcf2b91227519a808f51bc24197c0d63d0e522cf60427c95fae6e6c4bff0f4adb0902b8746738b1098bcf3a884850b7d18856d5ed07580965a693c8f95654cba9fb33f8c46b01347b074e5709fe982852e0f23e5a83215b3547edca8386bd9ebeda5807f3e6fe9dd1b3030abe916e3b7ba9c0b6130acd60f0c9719b3eb136bc8f3690b3f8e8f0d99f88bc6492024e59be459d5a08eaff70c6be9aa884faf2b69a915e191dd6ad34c75e30a06a714969e7a679756d8a76b1c8524deb5d6c868ef5e216369e6bb5207052fd7e5df3fcf8763ca2bfd9db080558571e851862dcd200491138dfd8e5b285f2e68d5e4968d8259c3df6d28fc5fb636ecc7d3fcb3f4af712c8b1d69f9012b07f7e34d8e5e76708c0a50b75d880b65fff32b4cd092fd1c6b2c36c36bea6a1308144ffc8ef9f6f717fe63dbfdfc0a95fc89ada3cb322a9033c5e72b5bc4cf8aadc1f730955fffde0a2881779e1d61b2874269bf1aec2fd075a1616cd3908edcd912f86a8003f39ad8330cde56d5875d495fa2d0941a07b20502f4211ed029b6546bfc50aa2299f8bcf6d524fac760cb74ed195f9cd8f99a027ab4556ccbb486d6a8a0914e654b6add10e68084c6f2e4c66a001bc09de3bf665642833680e4452a21f4686b865ba8e7ed9ac6a5cb932b25aa71a7b1e0146a4cf6390b96bd66fe6f26117b215a1262c8b8fbeed354937d55ca22a8c5927e20a620f4999bd91c0b523188a22efde8809abd90628c9593df695e4e3aad21831ff7db1d39b8839f476342c77cbeb15d12ed034c483c13cde875dc01fd14c1a8ec5529686d957b061f935cb9dbc24a8396cbc705cf7fb9d2169f7e3558ac7869fbd1c43aa9c9399ef0034366833c275000b59870c2ae4f2589c3c0d6b85b74b0a32a04bb5252e1e5201a3d082755a09720377361c5969e67842091fb92b6f7dc38abfb821bd40d0f1040595eb9481e5d28aa25605d87827e0905b350d9fd2750390f5d9025ef6ea30d15f616e932a4559d5c72b873300c8ff0dd44d4df7cd74f4f12f22d2855b2648bb6ecf492cc967cf9c32197c8ba8ec9d1e71aaf612a4dc4bc77aa49d858a6a0086160d0cabc5b31f8873d76cd4106f6a23031e75f6b97ec47a2fd26761ede9d980e40432d797da8e6e923d8bae939d925b84b944da98cd262a3009049d6983c2c17ddb1e693a24302b03497906af4323d0c5b2fb58eb6f9f5c256e56ec880e4d90e82ccc4b722e8f506217c9831d59e9de32e8f36163a43bb2ceb5cdcad19632d9d12bc64b2516cc8a28ddfb84f5c77e2aac8e1d45a7f31cae51f9fbc8a6629144518c291f2b5d5e7612d72213936c09653a91978a678eed3c90b9234ed165f581bfd1dd1dcf0c1286c1c3ce6fa77cced6db8c7ab033a565aa05193d6435ac3e45cd9957f0215cf0b45e71627f0b67dd979d04b916ac5317e73787704936f14a07988abfdc676b7a2cc5e2ace9e4a8b6773617c9067a01b984fcac1ad4d254c21c3259953e5c63fd3353cc4cb41b109c24280e7f40e8ee7f4dd232f6f774f37484cc9c7b5a7bcee9a1a9fef639d691592f63986777812c2e922a5ce336a8600856f94fd5eb3773794b252b971035b604d375cbd7ae53a42e0d1245b351bd11c02e0aaaa4ee7734c31be793398ef7a01d80a9f10d1265a3ec1f20bfb7434567b0a3e63a4a31edd15fc92eaee1e765c7dc8937a716e095bb1a6ac9cd63c5ad726c3d9b92d56a0f678a36c3ace4184139f2218f2b579458d94eb2c286e8ec8e098e62b76df1c4c9b5a8ece01172a75aadee376586c4b76de4d7b07c703eb35ffc7be32d78a94b0c8eddba4d4d6ff8712791a53ca61a92416afc7005c83193c4258a05d8a4aae34bc3d770a083df1badc1629659804152a351552c66265197ea63cc0ae3712b38b8b88ab1674ebeafd41211e62fb2bf1036c7865456478470a3e7276f2c60343d2a90b4a2799720f3a602930b656f369f59fbfd991d9c9d74fa0f46f8e7b8a37f78e212b03a9de446ef4f6d44e75f754dab9d5f0314ec30a302ba619b5bb85a474695ceef68a9b6669669387656e19335918d3d8537759b79f5a368b4b603f2891f151b8c828340811f87509f269ef4390e3b2a58fc8167b5ae7413d35d55667cab25636790be0beea3fc242af0d4a3a9c7d663fad6dbea1909ebf24fb38e95e014cc6afa979e83c21f5961a674c50300d9f9cb7e73708c316e66a9417719b3d9ae63e1ce33c437e900830c65825354ee88b17dec89dde804b7dc17203fa18072afa405a3add8a56cffb7fb691fac87c79bc09fb238e797f5a12e19ba70ef8f167ba0f45c46f32169295a5e6d86f566be3ee415b14e846bf358681ec554fa9d92f3573f41656a50b88596337ef766f98c5df83ff4f33185694a63d429e152b9f11c954f08f21b2607445be9d533c32fdb637537e94c4bd05ec69eb031c63cdccaa90ac852b0ce95d13ffa86ee708da2463d3d122dc235d50d92dfb55b49db8d6b6dc15701ec36006f55cbf4bdc45a67dc20874484175801514654a01a553b06817b179f92a9c8c34fe0d66529f6ca7f2b9b3f3724b80b6421448b96fd394a2f027864308f2b5788cd7b5098387cdeae1cb2ed26a4452ca0c5e28ef5c3c384181e9431ae5e0dfc7542a2a6037cb70468ee5787648223dc9c05696b9b28e1b8f78446798aed0f98e0092d32c356608b71d0716810fa247886f59eb360370221e8b2720654c6352da009c4bb0e7855a65d40e458739567c6f23b2c519126e012afa244d8a99733a1d1598b6c59f3ec9062e0c892f99540768bc9fe6bcb163577f05a7c1817b1806d3f766169aa1590fccc26b696a3e5ff5e338fd076f36e9713fd2b284ffd5ccbb68cc45d00249cbacf293908ccd47bfe1ce91329c75750762e91be71ef76ad2dddbea7ba8edaf70bf860a80ea8acc7183532b8f3498b1b2de9538e40b6cbc9b7f88c73b8952abd9c2d832d4d92bd2d00830d37418f33e58de35b49321654c762510b54c216a9f698772ddfe5082c8539e8158f3ea4e5b6fb4ce48dbac281fc20a7aebb5ecb021fede4c9c17e01e7fe5d8bda4e6fc6844a6014551044632654be6c519778ab18e28a67107163fff2ee942d2257d5dbeb3e19d6190ce4f9fc117e1d23f1f317baa0c377ea3b72d49ae28ecba77277a516cae36ba6ee91bcef308871efb5245cd9420bac262f3e91c96645ec5097ee802f0f103e9fcf8de5d809404006c91613e5eac580a05b135844e09e412fc728213a15ef64c035ce57c5c68724242d7f039c9b139609f523b9d8b2e90e3c85367ab09133d8c319b2d70b6d85ae0662b37a280ba8d02f80cb62e49dff9d062f536de074992998f0fe94a4a96310f262f3363d084ff5bf8bd0769a6c1f73a241b962310f21af08a8f7849ad64dfd37f665a3cedc817a788fcce1e739f784d8e336f5b83b6a1cf73225be911355e65945af07fef1190e31080d6b177b716f2244167e6eec76a275b4a3125df0eb196fd4fde958924282b47094497c1ffe0a128d6d9e409c69bb0c20a4fdc19a8b7ec4c4a54afb8746554c2846b2b713a91f678e688493db73e46ea8359357fe93e5f62542ecf874a56d7f7417f18b4fd0327b231ab73ad60d6532e533ccff78926faaab23722516a6525588c8b7fd064d12fe22994a19d20303f0761d4b6b59101884adeee090519df00f79b066bcfabbc92de6e9a6e8bf2fa5fb57d0c8cfa0448c61532f77faab33b25291bdd300a2c64c341c2a5a96a326e1a4216b4723c849ce2b6cd084693d0792571751a44ba30b80b62b4ff0cefcb5d508b93688abaf3283f8918861b35468ed4a44d4e2db9196531d9ad4d2ed8cd47457732e522289cc8cb3e45ac065075394826abcdf9787d8f0a89e79e3a053df27007f3316459cc7acb571486fae3e81238c8a329cfc2f2655bd349b29856babab75908b7d07657ffaa6e02981772e328465c2a82871fc1bc63ddbf12e2b124ace7a646e1412f95d04346e4ad5580e4de7a0b5c9deaf8e4449e222504a3d08825d30e745b7e875783cc8127f628c158e39333f07d6b1a14570b0632e1defa0803dbf8d6f987ffd3ac29243facf91ae4fdff11ea015b95df174438984598dea0ff3e820f973a987c6fa69a31fc6e5ba4920e6d7db43fa0cc6765351d781259d05caac19ee5d01d14101e369a567fc67dce565c42c1b16ab3c38a34bff78d64c7df1de4"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, &(0x7f0000000740)={0x0, r2, "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", "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"}) ioctl$SNAPSHOT_UNFREEZE(r0, 0x3302) r4 = syz_io_uring_setup(0x3157, &(0x7f0000000140), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) perf_event_open(&(0x7f0000000300)={0x3, 0x80, 0x5, 0xff, 0x1, 0x0, 0x0, 0xfffffffffffffffa, 0x40094, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x7, 0x2, @perf_config_ext={0x1000, 0x200}, 0x22, 0x7, 0xcac0000, 0xa, 0x2, 0x2f3a, 0x1f, 0x0, 0xffffffe0, 0x0, 0x5}, 0x0, 0xb, 0xffffffffffffffff, 0x9) syz_io_uring_submit(r5, 0x0, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x4004, @fd_index=0x4, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(r8, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r9 = socket$inet(0x2, 0xa, 0xff7ffffd) ioctl$SNAPSHOT_UNFREEZE(r9, 0x3302) dup3(r9, r8, 0x0) syz_io_uring_submit(r7, r6, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r9, 0x0}, 0x8001) io_uring_enter(r4, 0x58ab, 0x0, 0x0, 0x0, 0x0) 06:02:22 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x935b}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x40000000) 06:02:22 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 60) 06:02:22 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) r1 = syz_open_dev$vcsa(0x0, 0xe11, 0x4000) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000240)={'wg2\x00'}) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r1, 0x8008f512, &(0x7f0000000240)) r2 = dup2(r0, r1) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f00000001c0)={'ip6gre0\x00', @link_local}) r3 = socket$inet(0x2, 0xa, 0xff7ffffd) ioctl$SNAPSHOT_UNFREEZE(r3, 0x3302) r4 = syz_io_uring_setup(0x315b, &(0x7f0000000140)={0x0, 0x0, 0x8, 0x0, 0x2}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r7, r6, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r4, 0x321b, 0x2e94, 0x3, &(0x7f0000000040)={[0x6]}, 0x8) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000280)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) write$tun(r9, &(0x7f00000002c0)={@val={0x0, 0xeb5}, @val={0x2, 0x1, 0xfff8, 0x0, 0x3ff, 0x2}, @mpls={[{0xa5, 0x0, 0x1}, {0xf94ea}, {0xffc01}], @llc={@llc={0x80, 0x4, "ed", "fa46a5415d97c48d932c89f1c639efaead2957ce8d7faaed2f6192ba39d6a55fb5add66105c1867515972b35037d6411dff0c59e67aa96636cc843fad616a4201c761c713dfc8ffecc9871f37041b58a5ad9f05cbbfe3a678fcfdac9667d41fd9605130bc9d2e8aed78f180c7ae3a4a25eb0186cb9e47c1656fa8ce52eb9ed300d4377d8aa3934d6f73f288eef268d0de47c3c277f5e8aee448ea42dbf50cb29a8af7549944634ed9af37cc91464cb5c76d56ce424c23f8a7b1bb0c965d7b86150ffec415672e43467ba95f4d1ad5b947a1428a218fb544cb84a5e7e65a88b59d600061d4cf7f911d91eec"}}}}, 0x108) io_uring_enter(r4, 0x58ab, 0x0, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_RESIZE(r3, 0x50009403, &(0x7f0000000400)=ANY=[@ANYRES32=r8, @ANYBLOB="00000000303030303030303030303030303030303030303074363b265394a26856254ea5e0a6fd46d6fbb690ab1014aa7cfc188c4695e8b1fbeaf34f38cc171475a9b27082a01c3c612caf188a9fff265e76fd1aa77701085ece937e06c818fa0e5577ede88b42ed68c2d6bbbe62cdc35eba9f3dd4ee398360ec89a35db72ceeb7936cbc9083aa2e2c0ea6acdfcb13eb17852041d77ffc5c0ed405fd63474a82bf011fec3328547ac142fd14b0a4012abcfc9d9b6b7a29b1fcac54df648efe37cb3cb4ab73f8abcd52c95b"]) 06:02:22 executing program 4: socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$inet(0x2, 0x3, 0xff7ffffd) r1 = syz_io_uring_setup(0x3157, &(0x7f0000000140), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e22, @multicast2}, 0x10) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) 06:02:22 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x935b}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x42e1, 0x0, 0x0, 0x0) 06:02:22 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x935b}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000080)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r4}}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2, 0x20) 06:02:22 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x1, &(0x7f0000001900)=[{0x0, 0x0, 0x7fff}]) r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) pidfd_send_signal(r0, 0x3, &(0x7f0000000240)={0x27, 0x4619, 0x6}, 0x0) pidfd_send_signal(r0, 0x3f, &(0x7f0000000380)={0x23, 0x5, 0x6}, 0x0) r1 = dup(r0) pidfd_send_signal(r1, 0x0, &(0x7f0000000040)={0xb, 0x5, 0x2000000}, 0x0) syz_io_uring_setup(0x15c, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, r1}, &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000180), &(0x7f0000002a40)=0x0) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000140)) syz_read_part_table(0x6, 0x5, &(0x7f0000001c80)=[{&(0x7f0000001840)="ba39a511c6bc605f2eeff0b84c1f950c704e82b8915c7e88194e17a0b6d530b3eefc88ece4c33f3f271f84c45aba323d993eb21ed47cf09ae363154831ef3185b7fc1dc2045e6c488190542d186284", 0x4f, 0x7f}, {&(0x7f0000001940)="945a4be304bfbba04bfddadb46d36ab81628345702abf43a89765ab767a4cfe04b131ebb1cdfd2d888174894606643b18b444ff5e5e3ee520f83b73c65bb83191e75643ab57f43a6ac9d1726b175451c403bd327e28cbd8633cc154ad3e5e0b047c7687b005651b4b760e04fa9777771b54151a7ce6534adaed0530e310d63d23be66ec4d09f44b8b9730a3b51905e835cd5fcca28f7058f286d5b6da2b4e48cfaf0e90a2c27b899d19a20a4e5ff72d94362d5373ff4dfa54494490d025b88c32dcaa16c04c0afd59933094bc0427ed3b0f4e1fe4a4923ce485dde1003b8042488632acd87f139900e798b54fb9cb54b", 0xf0, 0x3}, {&(0x7f0000001a40)="225282325b018e5213bd567213cd9a86dbc88efa3fe12111d8a1a65488af5f6f3a67f76ebcf498532a24be7d0fe9b32a32740917706d90b85b0096779a2c27de150ac5541abc28", 0x47, 0x7fff}, {&(0x7f0000001ac0)="9280dad9d30a6abbad04e689879f04ea57264ef180a99b6b68e1b0f5d98ea9556678951416c061c8aacef03bd9eb074ea56cee1ff25b88addf57a0b0baadfd88b08305eb55ae8ef3a0dccfb25d0c1632", 0x50, 0x101}, {&(0x7f0000001b40)="083b5ccca7dee74613ed6f845876cb1bee86f39885bfa1a2333e993bffe98e7c42017a110d340c38634f80ae29f2b2babc578ed0cf2aea330d57b142947b8824aedcbd839109fdd11408a3ccb9377c08534a62f479e37d81ca4f66f4e4d1ccd85f312e171bacb1025bf793f91762ee8003ad0fbe3262a7f7294b47", 0x7b}]) syz_io_uring_submit(0x0, r2, &(0x7f0000000440)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r1, 0x0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0), 0x0, &(0x7f0000000780)=""/4096, 0x1000}, 0x0, 0x0, 0x1, {0x1}}, 0x101) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000540)={{{@in6, @in6=@dev}}, {{@in=@multicast1}, 0x0, @in6=@mcast1}}, &(0x7f0000000000)=0xe8) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000740)='/sys/class/drm', 0x970c7917c8cb9e10, 0x2) stat(&(0x7f00000001c0)='.\x00', &(0x7f0000001c00)) dup(r0) r4 = socket$inet(0x2, 0x3, 0x40) sendmmsg$inet(r4, &(0x7f00000002c0)=[{{&(0x7f0000002740)={0x2, 0x0, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000340)=[@ip_retopts={{0x18, 0x0, 0x7, {[@lsrr={0x83, 0x7, 0x4, [@loopback]}]}}}], 0x18}}], 0x1, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000700)=@IORING_OP_WRITEV={0x2, 0x1, 0x2007, @fd_index=0xa, 0x7f, &(0x7f0000000500)=[{&(0x7f0000000480)="bb024c69755e206d05b31065900010df58e4974e35dcf2a087a40e184899f3d6047a35b7253f48f6ce6594cd14a3018e3a7e86a44e06f1dbc01761bcd7a4ec3339c0768e7539014e60bf987583afa915b1", 0x51}, {&(0x7f0000000640)="5e8569ab6f02a7d5e01d991aa886eb33d57eb743219a7adff177dd0974a1e56944f84e80be535418540ae96f90d13a1fa5fbecfe3a47f7fde121708514c638d88ac95e763e64a2a2c2121e7e524716a0e94ff2abf9d37384a697a5359ac207ed5ca6a9a4b7483f0582598fd03a6bad682529b6e2f3ed37ef5ceeb4638e6448558c8b91a829f7b81f879bdb0d947fe06807d4a7c14c988bc70aa93340412d5925c4ef1ddc90d1da165e91742f3e1cb1ba278311eb729b6fb361bb2537ebcc0a7e", 0xc0}, {&(0x7f0000001780)="ff52023991a4f9811c9af4301173db45a53d393b4bdc9e2e55ff441f8dffb1af526a90b00ddbb87afedc0bcc766bd0bb9ca6ede2512c5d66cf05da27aa5465a3ee4f3d47fcd49accee97caedc17878ad2f56a30b4d6e4cca91111ba823b067fed613868f2def5919c8654c0d1179680e08f68340b502e4798e16546e48f1433cb93a6490bfe1c264cef4d98246f0957e2446bccdbb4cc2fa1bac65105c75246438a93d", 0xa3}, {&(0x7f0000000200)="54dbb557609a966157ee8e4fd3346f2138c9cc3dd861dba9376e818ed13ac73e42fb86f43e30e2", 0x27}], 0x4, 0xe, 0x1, {0x2, r5}}, 0x5) newfstatat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f0000000300), 0x800) [ 3128.049511] FAULT_INJECTION: forcing a failure. [ 3128.049511] name failslab, interval 1, probability 0, space 0, times 0 [ 3128.051916] CPU: 1 PID: 17754 Comm: syz-executor.0 Not tainted 5.10.202 #1 [ 3128.053319] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3128.055002] Call Trace: [ 3128.055543] dump_stack+0x107/0x167 [ 3128.056287] should_fail.cold+0x5/0xa [ 3128.057057] ? create_object.isra.0+0x3a/0xa20 [ 3128.057978] should_failslab+0x5/0x20 06:02:22 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x8}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x4c1, &(0x7f0000000080)=[0xffffffffffffffff, r0], 0x2, 0x0, 0x1}, 0x0) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000000040)={0x2, {0x2, 0x3, 0x7, 0x1, 0x3ff, 0x14}}) r4 = syz_open_dev$vcsa(0x0, 0xe11, 0x4000) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000000240)={'wg2\x00'}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="050000000000000000000200000008000300", @ANYRES32=r7, @ANYBLOB="080002"], 0x24}}, 0x0) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r4, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) r8 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000e00), r9) ioctl$sock_SIOCGIFINDEX_802154(r9, 0x8933, &(0x7f0000000080)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r9, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000e80)={&(0x7f00000003c0)={0x1c, r10, 0x939f0c73e17edec1, 0x0, 0x0, {0x24}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r11}]}, 0x1c}}, 0x0) sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x54, 0x0, 0x2, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan4\x00'}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0x1}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r11}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0002}}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x40001}, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x935b}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r8, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 3128.058951] kmem_cache_alloc+0x5b/0x310 [ 3128.059852] create_object.isra.0+0x3a/0xa20 [ 3128.060766] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3128.061814] kmem_cache_alloc_bulk+0x168/0x320 [ 3128.062760] io_submit_sqes+0x6f76/0x85c0 [ 3128.063664] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 3128.064690] __do_sys_io_uring_enter+0x6b5/0x1920 [ 3128.065681] ? lock_downgrade+0x6d0/0x6d0 [ 3128.066529] ? find_held_lock+0x2c/0x110 [ 3128.067371] ? io_submit_sqes+0x85c0/0x85c0 [ 3128.068260] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3128.069233] ? wait_for_completion_io+0x270/0x270 [ 3128.070193] ? rcu_read_lock_any_held+0x75/0xa0 [ 3128.071135] ? vfs_write+0x354/0xa70 [ 3128.071905] ? fput_many+0x2f/0x1a0 [ 3128.072638] ? ksys_write+0x1a9/0x260 [ 3128.073416] ? __ia32_sys_read+0xb0/0xb0 [ 3128.074242] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3128.075336] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3128.076420] do_syscall_64+0x33/0x40 [ 3128.077184] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 3128.078212] RIP: 0033:0x7fb03d693b19 [ 3128.078966] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3128.082717] RSP: 002b:00007fb03ac09188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 3128.084271] RAX: ffffffffffffffda RBX: 00007fb03d7a6f60 RCX: 00007fb03d693b19 [ 3128.085716] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 3128.087170] RBP: 00007fb03ac091d0 R08: 0000000000000000 R09: 0000000000000000 [ 3128.088654] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3128.090111] R13: 00007ffe77755f3f R14: 00007fb03ac09300 R15: 0000000000022000 06:02:23 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x935b}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x42eb, 0x0, 0x0, 0x0) 06:02:23 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r1 = socket$inet(0x2, 0xa, 0xff7ffffd) ioctl$SNAPSHOT_UNFREEZE(r1, 0x3302) r2 = syz_io_uring_setup(0x3157, &(0x7f0000000140), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsetxattr$security_selinux(r5, &(0x7f0000000100), &(0x7f0000000340)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x12, 0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000000, 0x10010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r6, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x1f, 0x0, 0x0, 0x0, {0x204}}, 0x9) pipe(&(0x7f0000003fc0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r7, 0xc0045878, 0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r8}}, 0x800) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r8}}, 0x0) r9 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) syz_io_uring_submit(r9, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0) 06:02:23 executing program 3: perf_event_open(&(0x7f0000000040)={0x4, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpgrp(0x0) r1 = pidfd_open(r0, 0x0) r2 = dup(r1) setns(r2, 0x20000000) preadv(r2, &(0x7f00000013c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}, {&(0x7f00000010c0)=""/215, 0xd7}, {&(0x7f00000011c0)=""/240, 0xf0}, {&(0x7f0000000000)=""/39, 0x27}, {&(0x7f00000012c0)=""/237, 0xed}], 0x5, 0x2, 0x8001) 06:02:23 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 61) [ 3128.458923] FAULT_INJECTION: forcing a failure. [ 3128.458923] name failslab, interval 1, probability 0, space 0, times 0 [ 3128.461367] CPU: 1 PID: 17810 Comm: syz-executor.0 Not tainted 5.10.202 #1 [ 3128.462865] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3128.464620] Call Trace: [ 3128.465196] dump_stack+0x107/0x167 [ 3128.465972] should_fail.cold+0x5/0xa [ 3128.466781] ? create_object.isra.0+0x3a/0xa20 [ 3128.467794] should_failslab+0x5/0x20 [ 3128.468621] kmem_cache_alloc+0x5b/0x310 [ 3128.469495] ? mark_held_locks+0x9e/0xe0 [ 3128.470347] create_object.isra.0+0x3a/0xa20 [ 3128.471302] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3128.472370] kmem_cache_alloc_bulk+0x168/0x320 [ 3128.473361] io_submit_sqes+0x6f76/0x85c0 [ 3128.474258] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 3128.475338] __do_sys_io_uring_enter+0x6b5/0x1920 [ 3128.476351] ? lock_downgrade+0x6d0/0x6d0 [ 3128.477196] ? find_held_lock+0x2c/0x110 [ 3128.478027] ? io_submit_sqes+0x85c0/0x85c0 [ 3128.478925] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3128.479915] ? wait_for_completion_io+0x270/0x270 [ 3128.480905] ? rcu_read_lock_any_held+0x75/0xa0 [ 3128.481854] ? vfs_write+0x354/0xa70 [ 3128.482626] ? fput_many+0x2f/0x1a0 [ 3128.483373] ? ksys_write+0x1a9/0x260 [ 3128.484167] ? __ia32_sys_read+0xb0/0xb0 [ 3128.485011] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3128.486089] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3128.487165] do_syscall_64+0x33/0x40 [ 3128.487942] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 3128.488986] RIP: 0033:0x7fb03d693b19 [ 3128.489744] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3128.493508] RSP: 002b:00007fb03ac09188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 3128.495050] RAX: ffffffffffffffda RBX: 00007fb03d7a6f60 RCX: 00007fb03d693b19 [ 3128.496519] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 3128.498003] RBP: 00007fb03ac091d0 R08: 0000000000000000 R09: 0000000000000000 [ 3128.499478] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3128.500951] R13: 00007ffe77755f3f R14: 00007fb03ac09300 R15: 0000000000022000 06:02:37 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x400000000000070, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) sendmsg(0xffffffffffffffff, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x10080, 0x0) ioctl$TCSETS(r2, 0x5402, &(0x7f00000000c0)={0x9, 0x9, 0x6, 0x4, 0x12, "4269382712e25702f4efd7745903138d43b376"}) 06:02:37 executing program 6: syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x935b}, 0x40020}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x3b1300, 0x0) ioctl$TUNSETQUEUE(r1, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r2 = socket$inet(0x2, 0xa, 0xff7ffffd) ioctl$SNAPSHOT_UNFREEZE(r2, 0x3302) dup3(r2, r1, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r2, 0x400c6615, &(0x7f0000000040)={0x0, @adiantum, 0x0, @desc1}) syz_io_uring_submit(r0, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) 06:02:37 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x935b}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xe4ffffff) 06:02:37 executing program 5: recvmmsg(0xffffffffffffffff, &(0x7f0000003cc0)=[{{&(0x7f00000001c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000240)=""/136, 0x88}, {&(0x7f0000000300)=""/77, 0x4d}, {&(0x7f0000000380)=""/65, 0x41}, {&(0x7f0000000400)=""/171, 0xab}], 0x4, &(0x7f00000004c0)}, 0x2}, {{&(0x7f0000000500)=@l2tp={0x2, 0x0, @multicast1}, 0x80, &(0x7f0000001880)=[{&(0x7f0000000580)=""/91, 0x5b}, {&(0x7f0000000740)=""/4096, 0x1000}, {&(0x7f0000000600)=""/165, 0xa5}, {&(0x7f0000001740)=""/153, 0x99}, {&(0x7f00000006c0)=""/58, 0x3a}, {&(0x7f0000001800)=""/113, 0x71}], 0x6, &(0x7f0000001900)=""/92, 0x5c}, 0x1}, {{&(0x7f0000001980)=@pppoe={0x18, 0x0, {0x0, @multicast}}, 0x80, &(0x7f0000002bc0)=[{&(0x7f0000001a00)=""/4096, 0x1000}, {&(0x7f0000002a00)=""/110, 0x6e}, {&(0x7f0000002a80)=""/162, 0xa2}, {&(0x7f0000002b40)=""/123, 0x7b}], 0x4}, 0x5}, {{&(0x7f0000002c00)=@ieee802154={0x24, @short}, 0x80, &(0x7f0000002e00)=[{&(0x7f0000002c80)=""/75, 0x4b}, {&(0x7f0000002d00)=""/65, 0x41}, {&(0x7f0000002d80)=""/74, 0x4a}], 0x3}, 0x4}, {{&(0x7f0000002e40)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x80, &(0x7f0000002fc0)=[{&(0x7f0000002ec0)=""/222, 0xde}], 0x1, &(0x7f0000003000)=""/79, 0x4f}, 0x5}, {{&(0x7f0000003080)=@pppoe={0x18, 0x0, {0x0, @remote}}, 0x80, &(0x7f00000031c0)=[{&(0x7f0000003100)=""/137, 0x89}], 0x1, &(0x7f0000003200)=""/168, 0xa8}, 0x1}, {{&(0x7f00000032c0)=@hci, 0x80, &(0x7f0000003440)=[{&(0x7f0000003340)=""/203, 0xcb}], 0x1, &(0x7f0000003480)=""/1, 0x1}, 0x7fffffff}, {{&(0x7f00000034c0)=@pppoe={0x18, 0x0, {0x0, @multicast}}, 0x80, &(0x7f0000003b40)=[{&(0x7f0000003540)=""/20, 0x14}, {&(0x7f0000003580)=""/254, 0xfe}, {&(0x7f0000003680)=""/78, 0x4e}, {&(0x7f0000003700)=""/207, 0xcf}, {&(0x7f0000003800)=""/43, 0x2b}, {&(0x7f0000003840)=""/192, 0xc0}, {&(0x7f0000003900)=""/45, 0x2d}, {&(0x7f0000003940)=""/203, 0xcb}, {&(0x7f0000003a40)=""/223, 0xdf}], 0x9, &(0x7f0000003c00)=""/182, 0xb6}, 0x9}], 0x8, 0x12120, &(0x7f0000003ec0)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r1 = socket$inet(0x2, 0xa, 0xff7ffffd) ioctl$SNAPSHOT_UNFREEZE(r1, 0x3302) r2 = syz_io_uring_setup(0x3157, &(0x7f0000000140), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) syz_io_uring_submit(r5, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0) 06:02:37 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000005, 0x10, r3, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r4}}, 0x800) syz_io_uring_submit(r1, 0x0, &(0x7f0000001400)=@IORING_OP_FALLOCATE={0x11, 0x1, 0x0, @fd, 0x0, 0x0, 0x1, 0x0, 0x0, {0x0, r4}}, 0x7) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000000040)={0x2, {0x2, 0x3, 0x7, 0x1, 0x3ff, 0x14}}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r3, 0xc0189372, &(0x7f0000001480)=ANY=[@ANYBLOB="00180000000000000000", @ANYRES32=r3, @ANYBLOB='\t\x00\x00\x00\x00\x00\x00\x00./file0\x00']) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x8, 0x4000010, r5, 0x0) r7 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x935b}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r6, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r8 = syz_open_dev$vcsa(0x0, 0xe11, 0x4000) ioctl$ifreq_SIOCGIFINDEX_wireguard(r8, 0x8933, &(0x7f0000000240)={'wg2\x00'}) ioctl$TIOCL_PASTESEL(r8, 0x541c, &(0x7f00000000c0)) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000001c0)={'erspan0\x00', &(0x7f0000000180)=ANY=[]}) openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x200400, 0x191) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000340)={0x0, 0x0, "7dbdc4fa30811b2d74cc6f19e4ad75c38cb69e60ec822e9eec19d042cca2d61f10c7e4e949dd9175422799e290930c610961d3749a7a2659d3ec05ac9bcf602b619e5ceac889baa00d0000ebc39d10aa0800310241f445d10a41074e2dde6bb35952e190f3ef8e39153e9344f747fef82d23c0f3a0360ada262b58cb440970f80a272bd8edc894420a114ade140709f7b6a657a75ea54f45973688494ca93f298439ca12fdcd5882bc0f9ae4f5c5686f4458463b45ca9c3b837fa11d62af9413ac3f8fe07506d256f7e6bced645353930be72fbb325111f6f94bc0d3a718bac3da4f26b4094e7bf629de291f73a3f1bb842ed45b2bdf451200", "5c42688310fc1272c4f06d9cc7049c528bf5b0f9076d7eb16f54078e8c4c424df3c0b7f13dbdd85f3a896bca86339974c11dbba0f37c087e7399b3bc89593b6e402a9cca76514f81f9d940a35b4e9009a175e56a1dfbac56435b1a7a7f007294600758610a08913ceb785548e56ed60cc19a7ca79dbf63cc20226ac0e4612e5d66127e13db5f65249bf00c712bab8667a9f594100365e8f8abf81be0d016618f6f89f391a5487df3f4f72a155e2ebdb19372b5878a6845fcc897bbf7cad5fed5da0845bd1166c3db4a27d3b8b4559a6f2bfe20dcf014baf8c996020122dfae5bec8789be45a31837aa9e6558d3fdcaa433c1974975527018edc17e89c1144fc3dd0d0721c1eddf7116ad303f8e8073ddaf0c6333d92c563a737ed6d12c1e1ab5665d7145efd02ae387f0d63ea06f82bbe978a1ee31f33afefd76893fc9df7f12aa556136645ffd9676e0041bd0fb7817784c3a1443bace0c45f30ac2bf88c25c79ba5a92e0e08862f4a3479da81eec8b65a3d4fa3829195821d5c232da5ab1fea5a32b10b3fec8c49f94bce5e63e351b6313ae4e7306c1048085b8962ca95cfa4594b83120addda52aae3a0f26a121a297bdb7d2fc59a1cfd584eb1aa3814fbb0be8c789e9829668bcbb38f101a4fc2a2ea64d4e2d0a70ea0623149b4cf75fabba0a1327e6e8cb614fd433fd6f285201bd9c32b056bada3e18b65cb1e596c95f28078cdb3ad66278394bd1bdfc715f123410dfd3a12db26c90826a062f233df661e32a25bf2902e4228fc357e6ca75a45b98eff96349d1e19d82f06a271d19281cea2d318563ade70681407b7647bc0bd2226c9ee0f78b893c3ca7b10bbf6b5edbc65706327a4e5129b461025e92f7b7fc32d3eaeb6be04c1c9511b8118854e18ca0496674ce731b61441e8cbb7d3b5e5251463f22ac7545ffdd259fc288bbddc12914e5bcb3fd702afed62dcc0320004528ba0f983681aaef1fc1da8e968d482bcdd0897a8d115688906549fa4eb68b277c1c523002633cadb929ae932e0cdb13953f46d35e08a04e1a168dcee0775a6a51c5bdb2f8e56fd7c77a7b7b621c492cd2fa616d074e4cf39f41c5f6e15f601b20d162da10b16abef65c3781d8bb87e5ecc4346e1159b18c6c737fc028ecd3f8630609d41a158a6ee0d567701d74130ab36cecc4087c9379e7f842da400adaa7a6ab41814840bbee27422e5ae85e6a3b12b0ed12bda797ed7015d3084533ffffffff7521e7e0abc36fa4322c421ae88d3bd2436ca65559ee0bc605f30f85ca6bcc6928e58679c87d97a87d8a52f41c636d2141b83925c17f1421df6ececeaee783e99da7192cb8cbbddeb7b62ef8c447e2d1d8fc249c257eea58ebf3e6b7620b5ea72b3a7833b5819843631212ed4b480d625b884b6676ebfc2c2f7097af9294aac1e9a2cea39d59803bc36a730a25947a7867de558fa226a9c4d31d4b38a13547767bb0291237147d89c35c5e9e1b990c22765e043e57b70d2466a86cdfdf9b81b9bc9419cb63c4b4535b4a22775dc8a0b46e7fb9fe4b5ea1dd448fc21f32af3d63c2a79e47954ad598ddd9a3a033e23381e617e3c17a06bfe43f9fbafa927a1be6521bc5293719577645f7463c94cc60d1b29f23cb023b86c78afda1e775817c34368c3e88f3dbde75ee230c37a2b598fdef8c936e7f4abd121fc5465dc73ed00c013943c361fe27c62d9eda2da9753f8a1b17f56a566c2dbf3d49aee6f5f61bccbc44dd70b9ba90a2697347c8440355c41bfaad9394f9a024fee14e71409c8e4c8508fd906554109ceeb82b7570bba88f7e9ca03fce9c2fae07c78b74504d4e8a119d60ff7fc1e884526aaa94636e05d0f008c2809ac779c6d61212eac597b55f5279c241ec10e0bbb794b448f374dbc70c1a9cba197eda41213bc27ce2af8d5e67666529d513d91d59a7ab0c4c05aa9ed1caf5eb3b348b9b8ebf3804bb53b4955cf6c94d7f7063f766185b41e07e3f4f54637476b6a48dd6376de41935f8d369a5ccb5ad39e210ed37a872b5f129ed69f83f09d101dad320502f2de6de4861d97e38cd4f5ca78dec6d0723b099d9efbd1fbfe1dab0d113fbcf72d1c3625568b4ab02f7a12dc5115fec7f64977330c95e396399365fc480959578f91233106d7eaaa27376112ba11eaf51d56ad4aebed004be2dbe107a76f00abd86da5df4a5453797c9580a8c7be66436c04fbb321e2786353a857e691ad37839210d9fc116310b693b7702330addd9e9005e32d2fa11e79ddf382ce83d102c4f4446dc9d35c56adbbe3a1399ba9eac9546e7115d27f43cbcf607507fd7ad3aa4e04d41947b264ffbdd2cffb9be4ff8ed5d539dc8752af3613421058c95c99fd3f73add61b7fbe36e2ed83b6af7e82159e541e1d5ac41e95fcb010cdbc0557cfac8a4652f8cb01197869e1cd772b1faf4d061c912ca47f162f947551c8bcd8b2702b62ab4c042d9e4e918f4084859f215ae6690c2271a54cfcdfadcb38c9c5c8d66d918f065ffeb77eb8c123d396fb8a2b09bc8cb0e5c0a3e10f3c1ce3dc0e4f5ae9da9a4babf0947828fbc3840a38ee5ea2f509c7fc05c2d011fc5374cb830121cb546d7ffdb6b63a6f33f0e0c8347c0016610f586312bb9fccf70a25709be275a41fac01f7f19e42e458d3c842bc858c4b502842db4620a1a8dd64347c1663709963560e738929dbb75c938042917e53843bb47656c2e127b78f4788095610ad723ea5327c8a4b6a22131e6484c5e541beaaeb828c4158028485716ac1923e3d5c7f06f3313a84f88a014e6f81afd280615aa10cd5e7b0683c2d3a773017132f98bb47da7263dbaaf79b8b913f2e5e669e234690414a54d5a9fbc81df7fc7d62ee35f632ccde7097d07ddeca1c444cf435802065a5d3ff449ec66e55e899fe6888fe429a48d94d88d6d9a4ebbabc807a647769862d97fea223261d0330f1660a84c85b8512ac254ce2fe5d797383894a990e60f35383e059a05b7c0a4a2fc40d334767e7330d39f2f0efb12c1075a94912eefb891233e46a33fbf032c8fe84f3322a9a7c9644b2b632419512aacf82686c5c954876e6dcc233adfe30b7c6338f3d804d17870d56a897dabfe56597e626909f6e5650e6683eecf096ff7759ca39af787e47e939fd3bb3ce211b558ae6acbe624186370d09e57d820eb9332bedd7547a925361d595833827b91f66befce8697532aa79b8772dbb5064d83b3c5dc214644ec65e883d425960ab36a01d8ac1810b90ba5162cb20a89e29d421ebe0d73a9878fb76bf5c59365c4d997587d6f4752a1ae7096ef8e1fe389261b46d3cabdd1fc37db3bbe6803173ba92a2625c5c7390fadd2a5f9904eaae37273f4c69f6ec2814b0f21b02992ac42f1305d44acdc9b0084da7e6fe492f0dd38d3a5fc09313ad2aa789b6bc0d6607700a7bb74d37e83be296726924d4b295b66095bbf15dccd9cc82ff3d214c06348eb67523d649e04ce8b03a329d23afa2002071480d8a363ca15647ef395c97b0c8d9ac0cd61589d7bb598e09eb96191802ad31b90b80001460c51f50d8c1420112415aa17f720318e0e92652fd5d027fbfb275876c6f271ea7bf24c512a930d9c4f9ae107e0c6cfff6db07a68ab1c7cacb7cc8de5ae74097fec1f4d66b5521e70dab73f46c5221db955ee32727887660d37da088b77fbfccf49d5ae509f08d89c9d19002d3cadf23b004c80881908c0991a28f1fd53a9269d3c7ab9ae77982b978436b8c30af770c8dba94e15f916f892a07acf43cd3cc0c4a5116f56fc512d3f98e49baca350a8d33584f8868ef33731ab10bd1c1d1f043b0f532a7a607d3101f39e42ef69a5c2dcd2006ef86c197824ed8e63931099158241bbd64259e0350ce10962a81106931c5b39a3c597d4897f391d830f01830245451ae40b02de7ae2aad6cb42177ec955ce7abfc231c6f3041ca178e30bd02503077f68cfb9527b265154a5bbdfd0e856508959cf40f99d7c93c43685a2d74eb47d00504e23e7fe8d61107bf8b0949921e25cf0ecbd8e730a030d761cbc0dcc43f073488aa5fb03f803a2c9d7110e4e2777e55c202c540e251f50dedd4e83f1dea0e8cf54adaf1274031b009e156362324253a76cb9017bc9daa2f5c536b37f0080479e14a91fdad22af9f83f8b1fdd6f353b00fe76e0db545bdeb7656a744ddfae70426089a62fe05cd13582e4562fb10eb44dbbc80b60a374e765e15e2b260eecf3b1988a195b69544ad31070ab999a5cc02abbd54abd6ee086066bda4cd93d95f6a5639bf74c8926f491568e84422bad6bac32572b3ae1ec0595e01ee41b9285c14dd383940fdf6b6fdedc820f9eb006aaa93a0ab3727e2e66d47e5e429bfebace7dee99bc052b17549297dd3f53034d5e9e09afb56728607ca034f9b1dba572d86a7c00dd9f981fae256e3dee9cdad655a21d5bcdf7fe205c1890c982f9ca0cc33787b43af15dbf0157bfa41e825e8f1b517a712a5bc9409100ae121ee34e5290b95dbfd871558019e9bae8546dd5ee703a87ef2744e48ca0064f7d796d5c0cf4135daf4d2b2ff95b68493f49084dce892b0bf46c2bc863c453f3a3e5da2caa6fd9cef402b73a09aaae83abfce4248da04c30703faccc17270d038955527b32a9bc821f0ec18d7c3457d229f89ae311ae7692c0517fd7e50daf882d2d802ff5ff86e1c1ed93f3b9baecfbb8fc6dcf03ee769891e06cdded031b3fc05388900fe685f25ff6385d9414c3223b3e489b64931bdf84981e316aa0e82a9812fe2cbfb7b2c307a920319b9b42f4e2bc399892303e63f1a35a3e255b70d6f44952c517f761b2d849547393778051b78521f686f997f2d2005fdf6975626fb7bdd9bc89b143ab40c5ab427d76eb32e27463f736a5c8b4985e48363d5f139f0870b4770a967e89ae660ca104b8f514749cc94c395b77053b5036fa84a60a7bbd436509ece4ec8e3e36bfd3351cc5cebc7e88cff2e12358cf744a564fb20a8955d5f5dd6319c02aa0a67aadca8e08e857e43409e19d1e0962ce7f03ee06da86b385cacf66f605a644cf06cc93ae19102ba114e510532aadefade1448c44d347640d4640df739a0f32eea09798c24dd9ada0da8ffbe9325e2ff5edddc12f0b0fac6233d9f1f2175d0a3104ca63c1cc220b8518940cde9cce558d6b6d051e3052d34e2b18751440dd13f84d04792f0fe35522af2744763afcb19317d1612c33867cced9b48e6439eaf6205efde9192bca97183a79f182631f51b39e16bf7d548aca022388657493648f6eb3eb54982d0a9d28cccc08d4187753c8294328b9f3e672349e210cdd79fa64cb6b8875f5d16644fed466b7fe03d0dd90c77930f4f437243d97718ada36912dbe2700"}) [ 3142.432087] FAULT_INJECTION: forcing a failure. ioctl$BTRFS_IOC_INO_LOOKUP_USER(r7, 0xd000943e, &(0x7f0000001e00)={r9, 0x0, "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", "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"}) 06:02:37 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x935b}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x8804, 0x0, 0x0, 0x0) 06:02:37 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 62) 06:02:37 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) read(r0, &(0x7f00000001c0)=""/4096, 0x1000) socket$inet(0x2, 0xa, 0xff7ffffd) r1 = syz_io_uring_setup(0x3157, &(0x7f0000000140), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, 0x10}, 0x0) syz_io_uring_setup(0x6dc2, &(0x7f00000011c0)={0x0, 0x29bc, 0x2, 0x2, 0x336, 0x0, r1}, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000001240)) r5 = syz_open_dev$vcsa(&(0x7f0000001280), 0x1, 0x40000) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000000, 0x10010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r7, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x1f, 0x0, 0x0, 0x0, {0x204}}, 0x9) pipe(&(0x7f0000003fc0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r8, 0xc0045878, 0x0) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r7, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r9}}, 0x800) syz_io_uring_submit(r4, 0x0, &(0x7f0000001980)=@IORING_OP_RECVMSG={0xa, 0x5, 0x0, r5, 0x0, &(0x7f0000001940)={&(0x7f00000012c0)=@ethernet={0x0, @remote}, 0x80, &(0x7f0000001880)=[{&(0x7f0000001340)=""/239, 0xef}, {&(0x7f0000001440)=""/98, 0x62}, {&(0x7f00000014c0)=""/179, 0xb3}, {&(0x7f0000001580)=""/214, 0xd6}, {&(0x7f0000001680)=""/131, 0x83}, {&(0x7f0000001740)=""/12, 0xc}, {&(0x7f0000001780)=""/217, 0xd9}], 0x7, &(0x7f0000001900)=""/51, 0x33}, 0x0, 0x2121, 0x1, {0x2, r9}}, 0x8162) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r10 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r10, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 3142.432087] name failslab, interval 1, probability 0, space 0, times 0 [ 3142.433748] CPU: 1 PID: 17831 Comm: syz-executor.0 Not tainted 5.10.202 #1 [ 3142.434557] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3142.435525] Call Trace: [ 3142.435855] dump_stack+0x107/0x167 [ 3142.436279] should_fail.cold+0x5/0xa [ 3142.436725] ? create_object.isra.0+0x3a/0xa20 [ 3142.437255] should_failslab+0x5/0x20 [ 3142.437703] kmem_cache_alloc+0x5b/0x310 [ 3142.438179] ? mark_held_locks+0x9e/0xe0 [ 3142.438655] create_object.isra.0+0x3a/0xa20 [ 3142.439163] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3142.439762] kmem_cache_alloc_bulk+0x168/0x320 [ 3142.440305] io_submit_sqes+0x6f76/0x85c0 [ 3142.440809] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 3142.441388] __do_sys_io_uring_enter+0x6b5/0x1920 [ 3142.441974] ? lock_downgrade+0x6d0/0x6d0 [ 3142.442474] ? find_held_lock+0x2c/0x110 [ 3142.442976] ? io_submit_sqes+0x85c0/0x85c0 [ 3142.443500] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3142.444113] ? wait_for_completion_io+0x270/0x270 [ 3142.444704] ? rcu_read_lock_any_held+0x75/0xa0 [ 3142.445311] ? vfs_write+0x354/0xa70 [ 3142.445848] ? fput_many+0x2f/0x1a0 [ 3142.446284] ? ksys_write+0x1a9/0x260 [ 3142.446733] ? __ia32_sys_read+0xb0/0xb0 [ 3142.447226] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3142.447876] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3142.448507] do_syscall_64+0x33/0x40 [ 3142.448951] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 3142.449569] RIP: 0033:0x7fb03d693b19 [ 3142.450015] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3142.452251] RSP: 002b:00007fb03ac09188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 3142.453174] RAX: ffffffffffffffda RBX: 00007fb03d7a6f60 RCX: 00007fb03d693b19 [ 3142.454010] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 3142.454862] RBP: 00007fb03ac091d0 R08: 0000000000000000 R09: 0000000000000000 [ 3142.455710] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3142.456565] R13: 00007ffe77755f3f R14: 00007fb03ac09300 R15: 0000000000022000 06:02:37 executing program 6: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_MADVISE={0x19, 0x3, 0x0, 0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x12}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = perf_event_open(&(0x7f0000001d80)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000980), 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) ioctl$BTRFS_IOC_TREE_SEARCH(r4, 0xd0009411, &(0x7f0000000a00)={{0x0, 0x5e0, 0x6, 0x7f, 0x8, 0x7, 0x7ff, 0x85, 0xffffffff, 0x4, 0xb0d, 0xfffffffffffffffa, 0xfff, 0xffffffffffffffff, 0x7fffffff}}) ioctl$BTRFS_IOC_INO_LOOKUP(r4, 0xd0009412, &(0x7f0000001e00)={r5, 0x6}) syz_io_uring_setup(0x803cdd, &(0x7f0000000900)={0x0, 0x64ae, 0x2, 0x0, 0x1f2, 0x0, r0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000280), &(0x7f0000001a00)=0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(r7, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r8 = socket$inet(0x2, 0xa, 0xff7ffffd) ioctl$SNAPSHOT_UNFREEZE(r8, 0x3302) dup3(r8, r7, 0x0) r9 = syz_open_dev$vcsa(0x0, 0x6, 0x393182) ioctl$ifreq_SIOCGIFINDEX_wireguard(r9, 0x8933, &(0x7f0000000240)={'wg2\x00'}) r10 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001a40), 0x48002, 0x0) r11 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r6, &(0x7f0000001ac0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x9, &(0x7f0000001a80)=[r0, r8, r9, r10, r4], 0x5, 0x0, 0x0, {0x0, r11}}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x6, 0x9, &(0x7f0000000800)=[{&(0x7f00000000c0)="26dd3b41eaabb73e601f690a7958d48a0b7c5258c3c044e3071edf68", 0x1c, 0x1}, {&(0x7f0000000340)="e36727da731b0ec319bc8d7a7356c19cf10bb82220781e28274e1750bf3bf5328fcedfeda88b6fdb7a1aa2ef546034d8eed9f5c3794760d94407d2e348c5d786463ed42ab5fe5744cc61d918dad790b5569ec7bb36dc047061c20f0f87be2ccc2a5103e0170148729a075ba4d2db3d6d4793ee593b1c35906e23bcb3ff64246db5bae955b00e44b30ebc1ff989544e9df120ea0654323f2f4adc0e6a91650264e5f338128e360345190f0f22809909da106d72aec28c298b6485cf161560cc3e6cc8a6cdcdd18adb273402d09172c80783b0975e890874438626a03e24186de8ea94d79f50fae0f9be7d5c70caf77f94a9877373", 0xf4, 0x9}, {&(0x7f0000000440)="f8666702189c138001f88803256a1b55ce92bf87d78b332da7fe91d4f5af9a76f42eb288dbf28a1ad89717cc32450d16f46a64336036cf1524b8fd2ead5be735b1d9f8ae29f98f86e2a66d6f3e6e4d17d15e6ea01c782774a8fc9e398c046ad28614b7f8ab12c46ca67266f47e024544980d4079b703c22677230dffa621abd6a79b56ab259366436c8cf86526c07a8f54c5b4b53b44ed7bb67fc8104b5601732b538d26103c7200f539ee074131466b6d178e93afa84e227964087c34113a81f9f2c0e5b42e9d81", 0xc8, 0x1}, {&(0x7f0000000180)="23a66d419d7204b05d1d3366ed5fda720455c1a02286b05e3402d1a89f29b4b7c54566b15da950ab0f400421bdfe4700d80b483813691655c54b15dcfd13f23577ed213f6cab5ee0988a925aaac6397e9112f514e9ff9922863b512dcb0e1022234c44c78824d62da0652fb3aac0fd44d6321b479f754be1865485d8673927b3", 0x80}, {&(0x7f0000000540)="bad369e9c44dd88418093348d9628484a002e7c30b61534891e545ddd554e9b6cbe68d1e908e1ccd199604d303730985e3afce0292e87ac0c39b2b08d02f9aff8929bdb3ecd2aa2d925dd8199d3bfc79181830b5d70cddad30194d03e4427dae032d36d13e5e68034056f32b445abe01ac2f3a7bad7a163b6dde53d4302d2d471df6bc4171e4795feb33230b91af532cee050d2c7819fc1bf96b8ea90f3e14a79a65883410d8e905c22256ab6816439c88be9d770766d70d562358a5511323d7880388d83f676198c24c8d4eee7dd97404ae665c1d36d1fb3c4e2284be1c6db031811044c6705135b0614765b1", 0xed, 0x40}, {&(0x7f0000000640)="683d5ab5a1299adc49fdbf552cc793ea3ce1efac2226bf6ee81a6dbcccf2edeab7f4d9e69bf2cfb1edb7b1470079970010eebf8614f765b14673d1a47ea4eac3d429e30d00680764a9d99b0868cc31404461f5747524b6f92929866bd02a232a41f74564bb47babab323eec115cfef6310487fb72e05fb8f55411baaa09cc6bc61ae48d86433a5fb5e80272352487b539cc212157aaa7f56c1948b8982b5a797a4f3ee40f9d7c1ccf441a8a484", 0xad, 0xb113}, {&(0x7f0000000240)="7a87a7909e773b520930713039e53e18be91bf0223a6f33b78118e4f15188a05", 0x20, 0x2}, {&(0x7f0000000700)="7b96e2bc69b9ceec618289d222e1cc497c104300910fc3a744cccce43353b9e3f02408faf6c7f9c35b001fc8eed2121d0df4681665fdda3c04f29fc20a6b08c5a7dd7259ddce61936bccc9b2f84f279db3233585ebdcafdccf4a103eed992e45a51032110bcadb808987741437d3314eaac01900152947087daf8b60ef8d40336a67f81db531cb6fbde7e3fdf0559578fcaf590078ad95a93f3e5325d584203142aba22dc4950459e5462027a9c8302be3897a444cac67a6af814130f626e531f5135f5e3d1d4ad91a554abd493d6f8751c53750c75a9612bd460d59d95a5be21b70a0", 0xe3, 0x100000001}, {&(0x7f0000000280), 0x0, 0xdd}], 0x8, &(0x7f0000001c00)=ANY=[@ANYBLOB="6e6e6f6e756d74828d6c3d312c726f6469722c6d61736b3d5e4d41595f495050454e442c6101eb920035d0a9e369742c64736d616769633dd4bf343030303030303a4e517e408d708ee04e59e5609809af8e3b3030303030303030372c000036c6596d38dc31f3e5fdd188dc1b0bcae08c22f880f5fcf5e3faf6effa5753ed8f13aa0054e0c76c001cac37368dc0f36e95e56e60d6b5df03a1e50000a5792ae3343a3284f3ec23b7b1e0a7b4ec000000000000000264a4ef6fd500"/199]) 06:02:37 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 63) 06:02:37 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x935b}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x8904, 0x0, 0x0, 0x0) [ 3142.651466] FAULT_INJECTION: forcing a failure. [ 3142.651466] name failslab, interval 1, probability 0, space 0, times 0 [ 3142.652843] CPU: 1 PID: 17868 Comm: syz-executor.0 Not tainted 5.10.202 #1 [ 3142.653591] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3142.654497] Call Trace: [ 3142.654796] dump_stack+0x107/0x167 [ 3142.655194] should_fail.cold+0x5/0xa [ 3142.655614] ? create_object.isra.0+0x3a/0xa20 [ 3142.656116] should_failslab+0x5/0x20 [ 3142.656528] kmem_cache_alloc+0x5b/0x310 [ 3142.656973] ? mark_held_locks+0x9e/0xe0 [ 3142.657406] create_object.isra.0+0x3a/0xa20 [ 3142.657879] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3142.658425] kmem_cache_alloc_bulk+0x168/0x320 [ 3142.658923] io_submit_sqes+0x6f76/0x85c0 [ 3142.659380] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 3142.659926] __do_sys_io_uring_enter+0x6b5/0x1920 [ 3142.660437] ? lock_downgrade+0x6d0/0x6d0 [ 3142.660878] ? find_held_lock+0x2c/0x110 [ 3142.661317] ? io_submit_sqes+0x85c0/0x85c0 [ 3142.661791] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3142.662327] ? wait_for_completion_io+0x270/0x270 [ 3142.662866] ? rcu_read_lock_any_held+0x75/0xa0 [ 3142.663374] ? vfs_write+0x354/0xa70 [ 3142.663809] ? fput_many+0x2f/0x1a0 [ 3142.664218] ? ksys_write+0x1a9/0x260 [ 3142.664639] ? __ia32_sys_read+0xb0/0xb0 [ 3142.665094] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3142.665666] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3142.666239] do_syscall_64+0x33/0x40 [ 3142.666651] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 3142.667216] RIP: 0033:0x7fb03d693b19 [ 3142.667640] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3142.669662] RSP: 002b:00007fb03ac09188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 3142.670508] RAX: ffffffffffffffda RBX: 00007fb03d7a6f60 RCX: 00007fb03d693b19 [ 3142.671289] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 3142.672089] RBP: 00007fb03ac091d0 R08: 0000000000000000 R09: 0000000000000000 [ 3142.672852] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3142.673651] R13: 00007ffe77755f3f R14: 00007fb03ac09300 R15: 0000000000022000 06:02:37 executing program 3: r0 = syz_mount_image$vfat(0x0, &(0x7f0000000a40)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$cgroup(0x0, &(0x7f0000000d00)='./file0\x00', &(0x7f0000000d40), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='noclone_children']) r1 = openat(r0, &(0x7f0000000000)='./file0\x00', 0x40000, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r2 = socket$inet(0x2, 0xa, 0xff7ffffd) ioctl$SNAPSHOT_UNFREEZE(r2, 0x3302) dup3(r2, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)=ANY=[@ANYBLOB="010000000119000018170000", @ANYRES32=r1, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB='./file0\x00']) accept4$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14, 0x80400) syz_mount_image$nfs(&(0x7f0000000300), &(0x7f0000000340)='./file0\x00', 0x80000001, 0x1, &(0x7f0000000440)=[{&(0x7f0000000380)="3751d8eb4e87155a2d5416ace6aa8432fa738b9d88bcf1c1d399b36d00ce7a5d2dc3b7c62617c37cfd8c2308d1c96f15ae597c0765cc5a6975f03f9aadba28a0abb3744966127f0fe4893565a4d213abeae1522edc77d9bc3c75d4ca646b7a977be74f67c3afcec79f90ceca3fc0551f85da97d6a5050cf79153515e6bb5509e12f7f82e535f9369cd8918c026", 0x8d, 0x8}], 0x2010, &(0x7f0000000480)=ANY=[@ANYBLOB="6367726f7570002c6367726f7570002c2925252c6367726f7570002c3a29212c6367726f7570002c6f626a5f726f6c653d6367726f7570002c7065726d69745f646972656374696f2c686173682c66736d616769633d3078303030303030303030303030303339312c736d61636b6673666c6f6f723d7d28402b24b52f2c6f626a5f747970653d6367726f7570002c66736d616769633d307830303030303030303030303030303035e2a8576b616769633d3078303030303030303030303030303030352c00"]) r3 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x4, 0x10, 0x2, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) io_uring_enter(r3, 0x58ab, 0x0, 0x0, 0x0, 0x0) getresgid(&(0x7f0000000240)=0x0, &(0x7f0000000280), &(0x7f0000000900)) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000940)={{{@in=@dev, @in6=@ipv4={""/10, ""/2, @initdev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private2}, 0x0, @in6=@dev}}, &(0x7f0000000a40)=0xe8) fchown(r3, r5, r4) stat(&(0x7f0000001cc0)='.\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r6, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xc00) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000200)=[{&(0x7f0000000140)="925480ae5bbb1600e70b84585fdd75750bc903acfe3cfd7b2387a3a926a237bdb70ad280ff18448489e7cb3c2d3b27a3dae974edccb8d72285077bf6fcf75dd879edb5950d2dc2bd1ecfa73f78400e24f2aaafb558e8f443ba0c72eb42aa3487d87f97d3eb9c11d03fa8bbc375195a31235eee2ecf720d0f4cbbccdfacf8a0c8a96dc7a7e32d51ca6914a4d4d3f5adb5f1e8afccdcaf263ff8a432e2f5031e31edfc3d7de0482206e9cb6056b3e36e4e5646fff265c0f3", 0xb7}], 0x1, &(0x7f0000000640)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xee00, 0xee01}}}, @rights={{0x1c, 0x1, 0x1, [r0, r2, r0]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r5}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0x0, r4}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r6, r7}}}], 0xa0, 0x181}, 0x4c000) [ 3142.692390] cgroup: Unknown subsys name 'noclone_children' 06:02:37 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r1 = socket$inet(0x2, 0xa, 0xff7ffffd) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.events\x00', 0x0, 0x0) ioctl$TUNDETACHFILTER(r2, 0x401054d6, 0x0) ioctl$SNAPSHOT_UNFREEZE(r1, 0x3302) r3 = syz_io_uring_setup(0x3157, &(0x7f0000000140), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) syz_io_uring_submit(r6, r5, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r3, 0x58ab, 0x0, 0x0, 0x0, 0x0) 06:02:37 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x935b}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xffffffe4) 06:02:37 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(r4, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r5 = socket$inet(0x2, 0xa, 0xff7ffffd) ioctl$SNAPSHOT_UNFREEZE(r5, 0x3302) r6 = dup3(r5, r4, 0x0) connect$inet(r6, &(0x7f00000000c0)={0x2, 0x4e21, @private=0xa010100}, 0x10) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f0000000080)={{0x1, 0x1, 0x18, r4, {0x40}}, './file0\x00'}) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000000040)={0x2, {0x2, 0x3, 0x7, 0x1, 0x3ff, 0x14}}) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x935b}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r7, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 3142.765997] FAT-fs (loop6): Unrecognized mount option "nnonumt‚l=1" or missing value 06:02:51 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 64) 06:02:51 executing program 4: socket$inet6_udp(0xa, 0x2, 0x0) socket$inet(0x2, 0xa, 0xff7ffffd) r0 = syz_io_uring_setup(0x3157, &(0x7f0000000140), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r4 = syz_open_dev$vcsa(0x0, 0xe11, 0x4000) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000000240)={'wg2\x00'}) r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x94000, 0x0) io_uring_enter(r5, 0x58ab, 0x0, 0x0, 0x0, 0xffffffffffffffda) 06:02:51 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x935b}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x1000000000000) 06:02:51 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x935b}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0xe142, 0x0, 0x0, 0x0) 06:02:51 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r1 = socket$inet(0x2, 0xa, 0xff7ffffd) ioctl$SNAPSHOT_UNFREEZE(r1, 0x3302) r2 = syz_io_uring_setup(0x3157, &(0x7f0000000140), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) syz_io_uring_submit(r5, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8002) io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0) 06:02:51 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000000040)={0x2, {0x2, 0x3, 0x7, 0x1, 0x3ff, 0x14}}) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r5 = syz_io_uring_setup(0x55f1, &(0x7f0000000080), &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) pipe2(&(0x7f00000001c0)={0xffffffffffffffff}, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x400}, 0x0) io_uring_enter(r5, 0x76d3, 0x0, 0x0, 0x0, 0x0) getsockname(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x935b}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) ioctl$TIOCPKT(r8, 0x5420, &(0x7f0000000240)=0x7) r9 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x5, 0x4000010, r3, 0x8000000) r10 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000080), 0x10001, 0x0) r11 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r9, r2, &(0x7f00000000c0)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x5, 0x0, r3, 0x0, r10, 0x2, 0x0, 0x1, {0x0, r11}}, 0x80000001) syz_io_uring_setup(0x1191, &(0x7f00000003c0)={0x0, 0x100b, 0x1, 0x1, 0x122}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000280), &(0x7f0000000440)) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 06:02:51 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x935b}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CLOSE={0x13, 0x4, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x101) r4 = syz_open_dev$vcsa(0x0, 0xe11, 0x4000) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000000240)={'wg2\x00'}) io_uring_enter(r4, 0x108c, 0x6d1d, 0x1, &(0x7f0000000040)={[0x7]}, 0x8) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 06:02:52 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c0000002500210c00000000000200001b1f00000400000000000000", @ANYRES32], 0x2c}}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000080), 0x6e, &(0x7f0000000000)=[{&(0x7f0000000100)=""/115, 0x73}], 0x1, &(0x7f0000000180)=[@cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xb0}, 0x141) [ 3157.092309] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3157.109797] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3157.112295] FAULT_INJECTION: forcing a failure. [ 3157.112295] name failslab, interval 1, probability 0, space 0, times 0 [ 3157.114662] CPU: 0 PID: 17935 Comm: syz-executor.0 Not tainted 5.10.202 #1 [ 3157.116095] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3157.117782] Call Trace: [ 3157.118329] dump_stack+0x107/0x167 [ 3157.119082] should_fail.cold+0x5/0xa [ 3157.119880] should_failslab+0x5/0x20 [ 3157.120656] kmem_cache_alloc_bulk+0x4b/0x320 [ 3157.121582] io_submit_sqes+0x6f76/0x85c0 [ 3157.122467] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 3157.123483] __do_sys_io_uring_enter+0x6b5/0x1920 [ 3157.124499] ? lock_downgrade+0x6d0/0x6d0 [ 3157.125344] ? find_held_lock+0x2c/0x110 [ 3157.126181] ? io_submit_sqes+0x85c0/0x85c0 [ 3157.127075] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3157.128072] ? wait_for_completion_io+0x270/0x270 [ 3157.129060] ? rcu_read_lock_any_held+0x75/0xa0 [ 3157.130011] ? vfs_write+0x354/0xa70 [ 3157.130773] ? fput_many+0x2f/0x1a0 [ 3157.131513] ? ksys_write+0x1a9/0x260 [ 3157.132336] ? __ia32_sys_read+0xb0/0xb0 [ 3157.133167] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3157.134233] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3157.135287] do_syscall_64+0x33/0x40 [ 3157.136064] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 3157.137104] RIP: 0033:0x7fb03d693b19 [ 3157.137860] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3157.141635] RSP: 002b:00007fb03ac09188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 3157.143196] RAX: ffffffffffffffda RBX: 00007fb03d7a6f60 RCX: 00007fb03d693b19 [ 3157.144664] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 3157.146124] RBP: 00007fb03ac091d0 R08: 0000000000000000 R09: 0000000000000000 [ 3157.147576] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3157.149048] R13: 00007ffe77755f3f R14: 00007fb03ac09300 R15: 0000000000022000 06:02:52 executing program 3: r0 = syz_mount_image$vfat(0x0, &(0x7f0000000a40)='./file1\x00', 0x0, 0xffffffffffffff08, 0x0, 0x2, 0x0) readlinkat(r0, &(0x7f0000000080)='./file1\x00', &(0x7f0000000100)=""/143, 0x8f) r1 = syz_open_dev$vcsa(0x0, 0xe11, 0x4000) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000240)={'wg2\x00'}) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KIOCSOUND(r2, 0x4b2f, 0x1) openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x40080, 0x0) mount$cgroup(0x0, &(0x7f0000000d00)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000000c0)=ANY=[@ANYRES32=r2, @ANYRESDEC=0x0]) 06:02:52 executing program 4: socket$inet6_udp(0xa, 0x2, 0x0) socket$inet(0x2, 0xa, 0xff7ffffd) r0 = syz_io_uring_setup(0x2081, &(0x7f0000000140)={0x0, 0x4, 0x0, 0x1}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x4571, 0x0, 0x0, 0x0) 06:02:52 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r1 = socket$inet(0x2, 0xa, 0xff7ffffd) ioctl$SNAPSHOT_UNFREEZE(r1, 0x3302) r2 = syz_open_dev$vcsa(0x0, 0xe11, 0x4000) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000240)={'wg2\x00'}) r3 = syz_io_uring_setup(0x3157, &(0x7f0000000140)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, r2}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='freezer.parent_freezing\x00', 0x0, 0x0) write$tun(r7, &(0x7f0000000280)={@void, @val={0x0, 0x3, 0x8, 0x800, 0x2}, @ipv4=@tcp={{0xe, 0x4, 0x3, 0x6, 0x163, 0x68, 0x0, 0x7f, 0x6, 0x0, @multicast2, @local, {[@timestamp_prespec={0x44, 0x24, 0x98, 0x3, 0x7, [{@multicast1, 0x9}, {@local, 0x5}, {@loopback, 0x3a26a364}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3}]}]}}, {{0x4e22, 0x4e23, 0x41424344, 0x41424344, 0x1, 0x0, 0x15, 0x8, 0x2, 0x0, 0xff, {[@exp_fastopen={0xfe, 0xb, 0xf989, "9af5d3b059e65b"}, @nop, @eol, @mptcp=@capable={0x1e, 0xc, 0x0, 0x8, 0x1}, @md5sig={0x13, 0x12, "a9a0251ea57971260307b0fa34c43987"}, @mptcp=@capable={0x1e, 0x14, 0x7, 0x8, 0x3, 0x800, [0x80]}]}}, {"9f4206a58e5ad2a361b9ffcbe5e6c1d862b05f2da1b62c6178ea76b77895f00c9425445ed3b8444195a13c0fe3a671240a3b30535d84e807661ffe1767226e359ebd93133ea6fb852e1cdc60eb1a1a868849dc71f180e8de9dd61d5549254ab99f0907970463d6b6b0c23f065d514a10157ac8f9f3893cf2e23e4900d96d68245020e0036471b4208c9a1b342004b1d2c97f25ff16bb7f35751d72419934cb81d5b30b96dec93cf2e07fc7a0803ee85b4a93ab751d3ce09a428c54a8ef1637c3946feee7a1a998ecb21511cd2a19e797e34cc20fcde81b"}}}}, 0x16d) syz_io_uring_submit(r6, r5, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r3, 0x58ab, 0x0, 0x0, 0x0, 0x0) 06:02:52 executing program 6: syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_config_ext={0x800}, 0x1c280}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x2, &(0x7f0000000240)={0x0, 0xb, 0x4}, &(0x7f0000000040)) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x280400, 0x0) kcmp(0x0, 0x0, 0x6, 0xffffffffffffffff, 0xffffffffffffffff) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) read(r1, &(0x7f0000000080)=""/65, 0x41) timer_gettime(r0, &(0x7f0000000080)) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(r2, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r3 = socket$inet(0x2, 0xa, 0xff7ffffd) ioctl$SNAPSHOT_UNFREEZE(r3, 0x3302) dup3(r3, r2, 0x0) preadv(r3, &(0x7f0000000180)=[{&(0x7f0000000100)=""/100, 0x64}, {&(0x7f00000002c0)=""/113, 0x71}], 0x2, 0x3d36, 0x0) 06:02:52 executing program 3: syz_emit_ethernet(0x66, &(0x7f0000000000)=ANY=[@ANYBLOB="0171c200000000000000000086dd6096033f00303a00fc020000000000000000000000000000ff12000000000000000000000000000102000a86dc349f9b0cb877a06a70ff8246907800000000600009e60000000000000000000000000000ffffac1e0001fe"], 0x0) syz_emit_ethernet(0xf, &(0x7f0000000080)=ANY=[@ANYBLOB="00000802c2ff3d63f2ccde0000000000000000"], &(0x7f0000000180)={0x1, 0x4, [0x108, 0xb7e, 0xd85, 0xf2f]}) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() setpgid(0x0, r1) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x8, 0x7f, 0x1, 0x7a, 0x0, 0x4, 0x1, 0x8, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x8000, 0x2, @perf_bp={&(0x7f00000001c0), 0x2}, 0xc300, 0x4, 0x1ff, 0x4, 0xfffffffffffffff9, 0x4, 0x7fff, 0x0, 0xffff0001, 0x0, 0x2f}, r1, 0x4, r0, 0x2) ptrace(0x8, r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaa28c3ffb4f199100460081004800080600f1080006040002aabaaaaaaa26e00000022198b80900541720ac14"], &(0x7f0000000140)={0x1, 0x1, [0xb65, 0x6cb, 0xe93, 0xd]}) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x412100, 0x0) ioctl$TUNSETQUEUE(r2, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) mlock(&(0x7f0000ffe000/0x1000)=nil, 0x1000) r3 = perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x60, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000237}, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$usbmon(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x6, 0x50111, 0xffffffffffffffff, 0x3) ptrace$getenv(0x4201, r1, 0xba, &(0x7f0000000200)) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/212, 0xd4, 0x40000000, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40082404, &(0x7f0000000400)=0x4) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000000)={0x8020}) 06:02:52 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000000040)={0x2, {0x2, 0x3, 0x7, 0x1, 0x3ff, 0x14}}) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x935b}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(r5, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r6 = socket$inet(0x2, 0xa, 0xff7ffffd) ioctl$SNAPSHOT_UNFREEZE(r6, 0x3302) dup3(r6, r5, 0x0) fsetxattr(r5, &(0x7f0000000080)=@random={'osx.', '\x00'}, &(0x7f00000000c0)='$.:%[', 0x5, 0x2) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 06:02:52 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 65) [ 3157.649874] FAULT_INJECTION: forcing a failure. [ 3157.649874] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 3157.652486] CPU: 1 PID: 18002 Comm: syz-executor.0 Not tainted 5.10.202 #1 [ 3157.653893] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3157.655580] Call Trace: [ 3157.656132] dump_stack+0x107/0x167 [ 3157.656866] should_fail.cold+0x5/0xa [ 3157.657635] __alloc_pages_nodemask+0x182/0x600 [ 3157.658559] ? __alloc_pages_slowpath.constprop.0+0x2130/0x2130 [ 3157.659785] alloc_pages_current+0x187/0x280 [ 3157.660693] allocate_slab+0x26f/0x380 [ 3157.661473] ___slab_alloc+0x470/0x700 [ 3157.662255] ? io_submit_sqes+0x6f76/0x85c0 [ 3157.663136] ? kmem_cache_alloc_bulk+0x1ec/0x320 [ 3157.664085] kmem_cache_alloc_bulk+0x1ec/0x320 [ 3157.664997] io_submit_sqes+0x6f76/0x85c0 [ 3157.665855] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 3157.666841] __do_sys_io_uring_enter+0x6b5/0x1920 [ 3157.667817] ? lock_downgrade+0x6d0/0x6d0 [ 3157.668652] ? find_held_lock+0x2c/0x110 [ 3157.669500] ? io_submit_sqes+0x85c0/0x85c0 [ 3157.670375] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3157.671373] ? wait_for_completion_io+0x270/0x270 [ 3157.672365] ? rcu_read_lock_any_held+0x75/0xa0 [ 3157.673315] ? vfs_write+0x354/0xa70 [ 3157.674065] ? fput_many+0x2f/0x1a0 [ 3157.674812] ? ksys_write+0x1a9/0x260 [ 3157.675592] ? __ia32_sys_read+0xb0/0xb0 [ 3157.676419] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3157.677488] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3157.678547] do_syscall_64+0x33/0x40 [ 3157.679309] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 3157.680358] RIP: 0033:0x7fb03d693b19 [ 3157.681120] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3157.684873] RSP: 002b:00007fb03ac09188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 3157.686425] RAX: ffffffffffffffda RBX: 00007fb03d7a6f60 RCX: 00007fb03d693b19 [ 3157.687888] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 3157.689338] RBP: 00007fb03ac091d0 R08: 0000000000000000 R09: 0000000000000000 [ 3157.690789] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3157.692246] R13: 00007ffe77755f3f R14: 00007fb03ac09300 R15: 0000000000022000 06:03:09 executing program 3: setxattr$security_selinux(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)='system_u:object_r:autofs_device_t:s0\x00', 0x25, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x8142, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x10a) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000010000100000000f531cd9172d8c995f7f83f0400000000000000000000000005000000000000000c00008008001400", @ANYRES32=0x0, @ANYBLOB="0c000d8008008f0000000000"], 0x34}}, 0x0) 06:03:09 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 66) [ 3174.358362] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 06:03:09 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r1 = socket$inet(0x2, 0xa, 0xff7ffffd) ioctl$SNAPSHOT_UNFREEZE(r1, 0x3302) r2 = syz_io_uring_setup(0x3157, &(0x7f0000000140), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) syz_io_uring_submit(r5, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r2, 0x300a, 0x0, 0x1, 0x0, 0x0) 06:03:09 executing program 7: r0 = syz_open_dev$vcsa(0x0, 0xe11, 0x4000) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000240)={'wg2\x00'}) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, &(0x7f0000000340)=""/132, 0x84, 0x0, &(0x7f0000000080)=""/32, 0x20}, &(0x7f0000000180)=0x40) r1 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r4 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) ioctl$TIOCL_SETSEL(r4, 0x541c, &(0x7f0000000040)={0x2, {0x2, 0x3, 0x7, 0x1, 0x3ff, 0x14}}) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) ioctl$VT_RELDISP(r4, 0x5605) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x935b}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) 06:03:09 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x935b}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0xeb42, 0x0, 0x0, 0x0) 06:03:09 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x935b}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x80000000000000) 06:03:09 executing program 4: socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$inet(0x2, 0xa, 0xff7ffffd) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f0000000040)={'ah\x00'}, &(0x7f00000001c0)=0x1e) r1 = syz_io_uring_setup(0x3157, &(0x7f0000000140), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x20, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000240)=@IORING_OP_OPENAT={0x12, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000200)='./file0\x00', 0x110, 0x8000, 0x12345, {0x0, r5}}, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) 06:03:09 executing program 6: ftruncate(0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xfdef) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000200)={0x0}, &(0x7f0000000240)=0xc) syz_open_procfs(r0, &(0x7f00000002c0)='fdinfo/4\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000001f210c000000000000000002000000"], 0x14}}, 0x0) r2 = syz_io_uring_setup(0x21, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180), &(0x7f0000002a40)=0x0) r4 = eventfd(0x0) io_uring_register$IORING_REGISTER_EVENTFD(r2, 0x4, &(0x7f0000000140)=r4, 0x1) syz_io_uring_submit(0x0, r3, &(0x7f0000000040)=@IORING_OP_ASYNC_CANCEL, 0x0) io_uring_enter(r2, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r4, @out_args}, './file1\x00'}) fcntl$setstatus(r1, 0x4, 0x6400) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r2, 0x4018f50b, &(0x7f0000000100)={0x1, 0x0, 0x3}) write(r1, &(0x7f0000001200), 0xffffff45) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="050000000000000000000200000008000300", @ANYRES32=r5, @ANYBLOB="080002"], 0x24}}, 0x0) sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x4c, 0x0, 0x10, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10004840}, 0x8008000) [ 3174.404163] FAULT_INJECTION: forcing a failure. [ 3174.404163] name failslab, interval 1, probability 0, space 0, times 0 [ 3174.406512] CPU: 0 PID: 18022 Comm: syz-executor.0 Not tainted 5.10.202 #1 [ 3174.407933] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3174.409647] Call Trace: [ 3174.410197] dump_stack+0x107/0x167 [ 3174.410963] should_fail.cold+0x5/0xa [ 3174.411742] ? create_object.isra.0+0x3a/0xa20 [ 3174.412688] should_failslab+0x5/0x20 [ 3174.413466] kmem_cache_alloc+0x5b/0x310 [ 3174.414310] ? mark_held_locks+0x9e/0xe0 [ 3174.415147] create_object.isra.0+0x3a/0xa20 [ 3174.416064] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3174.417095] kmem_cache_alloc_bulk+0x168/0x320 [ 3174.418033] io_submit_sqes+0x6f76/0x85c0 [ 3174.418913] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 3174.419927] __do_sys_io_uring_enter+0x6b5/0x1920 [ 3174.420943] ? lock_downgrade+0x6d0/0x6d0 [ 3174.421793] ? find_held_lock+0x2c/0x110 [ 3174.422629] ? io_submit_sqes+0x85c0/0x85c0 [ 3174.423522] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3174.424529] ? wait_for_completion_io+0x270/0x270 [ 3174.425509] ? rcu_read_lock_any_held+0x75/0xa0 [ 3174.426456] ? vfs_write+0x354/0xa70 [ 3174.427231] ? fput_many+0x2f/0x1a0 [ 3174.427993] ? ksys_write+0x1a9/0x260 [ 3174.428786] ? __ia32_sys_read+0xb0/0xb0 [ 3174.429625] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3174.430714] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3174.431789] do_syscall_64+0x33/0x40 [ 3174.432580] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 3174.433636] RIP: 0033:0x7fb03d693b19 [ 3174.434403] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3174.438200] RSP: 002b:00007fb03ac09188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 3174.439777] RAX: ffffffffffffffda RBX: 00007fb03d7a6f60 RCX: 00007fb03d693b19 [ 3174.441249] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 3174.442736] RBP: 00007fb03ac091d0 R08: 0000000000000000 R09: 0000000000000000 [ 3174.444223] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3174.445689] R13: 00007ffe77755f3f R14: 00007fb03ac09300 R15: 0000000000022000 06:03:09 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(r1, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r2 = socket$inet(0x2, 0xa, 0xff7ffffd) ioctl$SNAPSHOT_UNFREEZE(r2, 0x3302) dup3(r2, r1, 0x0) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000040)) r3 = socket$inet(0x2, 0xa, 0xff7ffffd) ioctl$SNAPSHOT_UNFREEZE(r3, 0x3302) r4 = syz_io_uring_setup(0x3157, &(0x7f0000000140), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) syz_io_uring_submit(r7, r6, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r4, 0x58ab, 0x0, 0x0, 0x0, 0x0) 06:03:09 executing program 7: r0 = syz_io_uring_setup(0x2011, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x10101, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(r7, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r8 = socket$inet(0x2, 0xa, 0xff7ffffd) ioctl$SNAPSHOT_UNFREEZE(r8, 0x3302) dup3(r8, r7, 0x0) ioctl$TUNSETQUEUE(r7, 0x400454ca, &(0x7f0000000000)={'bond_slave_0\x00'}) ioctl$SNAPSHOT_UNFREEZE(0xffffffffffffffff, 0x3302) dup3(0xffffffffffffffff, r6, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000080)=@IORING_OP_CLOSE={0x13, 0x2}, 0x8) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000000040)={0x2, {0x2, 0x3, 0x7, 0x1, 0x3ff, 0x14}}) r9 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x935b}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r9, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x80800, 0x1}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 06:03:09 executing program 4: socket$inet6_udp(0xa, 0x2, 0x0) socket$inet(0x2, 0xa, 0xff7ffffd) r0 = syz_io_uring_setup(0x3157, &(0x7f0000000140), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x8) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000040)={0x0, 'caif0\x00', {0x4}, 0xff}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = syz_open_dev$vcsa(0x0, 0xe11, 0x4000) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000240)={'wg2\x00'}) setsockopt$inet6_udp_int(r5, 0x11, 0x65, &(0x7f00000001c0)=0x4600000, 0x4) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 06:03:09 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 67) 06:03:09 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x935b}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x200000000000000) 06:03:09 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x935b}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x800000, 0x0, 0x0, 0x0) [ 3174.854681] FAULT_INJECTION: forcing a failure. [ 3174.854681] name failslab, interval 1, probability 0, space 0, times 0 [ 3174.857176] CPU: 0 PID: 18077 Comm: syz-executor.0 Not tainted 5.10.202 #1 [ 3174.858588] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3174.860292] Call Trace: [ 3174.860831] dump_stack+0x107/0x167 [ 3174.861583] should_fail.cold+0x5/0xa [ 3174.862361] ? create_object.isra.0+0x3a/0xa20 [ 3174.863290] should_failslab+0x5/0x20 [ 3174.864072] kmem_cache_alloc+0x5b/0x310 [ 3174.864911] ? mark_held_locks+0x9e/0xe0 [ 3174.865759] create_object.isra.0+0x3a/0xa20 [ 3174.866667] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3174.867725] kmem_cache_alloc_bulk+0x168/0x320 [ 3174.868700] io_submit_sqes+0x6f76/0x85c0 [ 3174.869604] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 3174.870624] __do_sys_io_uring_enter+0x6b5/0x1920 [ 3174.871635] ? lock_downgrade+0x6d0/0x6d0 [ 3174.872503] ? find_held_lock+0x2c/0x110 [ 3174.873343] ? io_submit_sqes+0x85c0/0x85c0 [ 3174.874240] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3174.875231] ? wait_for_completion_io+0x270/0x270 [ 3174.876228] ? rcu_read_lock_any_held+0x75/0xa0 [ 3174.877181] ? vfs_write+0x354/0xa70 [ 3174.877969] ? fput_many+0x2f/0x1a0 [ 3174.878724] ? ksys_write+0x1a9/0x260 [ 3174.879512] ? __ia32_sys_read+0xb0/0xb0 [ 3174.880374] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3174.881457] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3174.882527] do_syscall_64+0x33/0x40 [ 3174.883304] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 3174.884367] RIP: 0033:0x7fb03d693b19 [ 3174.885133] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3174.888939] RSP: 002b:00007fb03ac09188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 3174.890518] RAX: ffffffffffffffda RBX: 00007fb03d7a6f60 RCX: 00007fb03d693b19 [ 3174.892001] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 3174.893494] RBP: 00007fb03ac091d0 R08: 0000000000000000 R09: 0000000000000000 [ 3174.894976] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3174.896459] R13: 00007ffe77755f3f R14: 00007fb03ac09300 R15: 0000000000022000 06:03:09 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r1 = socket$inet(0x2, 0xa, 0xff7ffffd) ioctl$SNAPSHOT_UNFREEZE(r1, 0x3302) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f00000001c0)={0x0, 0x0, 0x7, 0x0, '\x00', [{0x100, 0x5, 0x2, 0x2, 0x400, 0x100}, {0x1, 0x4, 0x80, 0x8, 0x3, 0x3f}], ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) r2 = syz_io_uring_setup(0x3157, &(0x7f0000000140), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x204) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) syz_io_uring_submit(r5, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0) 06:03:09 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000040)={0x2, {0x2, 0x3, 0x7, 0x1, 0x3ff, 0x14}}) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x935b}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 06:03:09 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x935b}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x500000000000000) 06:03:09 executing program 6: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0x98a) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000001e00)={0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}], 0x6, "e1cbd9b75ee3c2"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000001480)={{r3, 0x8, 0x400, 0x3, 0x2, 0x80, 0x1000, 0x1, 0x2, 0x100, 0x9, 0x8, 0x81, 0x0, 0x6}, 0x50, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000001300)=ANY=[@ANYBLOB="00000000fffffdfd0100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000feffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004e18f3835023f5b3b1ab5ef114656c07d33f4486a667121fcc64e224d7be04b3b99c6a90aade7b4ac50aa8f0baa857a391d6929acc2c2413bb84c3fdef115b9385cfbfe18911dd6b5055cde977505603a5411b872f832408f9baeed6b777bee7d8fd3aa9b0994205d439"]) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) flock(r4, 0x6) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY(r1, 0x5000940f, &(0x7f0000000300)={{}, "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"}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000240)=0x67bb, 0x4) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000100)={0x101, 0x0, 0x0, 'queue0\x00'}) unshare(0x48020200) r6 = mq_open(&(0x7f0000005c00)='-@\x00', 0x0, 0x0, 0x0) mq_timedsend(r6, 0x0, 0x0, 0x0, &(0x7f0000000040)) ioctl$BTRFS_IOC_LOGICAL_INO(r6, 0xc0389424, &(0x7f00000000c0)={0x9, 0x30, '\x00', 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 06:03:29 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 68) 06:03:29 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) recvmmsg(r3, &(0x7f0000000680)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000080)=""/30, 0x1e}, {&(0x7f0000000340)=""/253, 0xfd}, {&(0x7f0000000440)=""/194, 0xc2}, {&(0x7f0000000180)=""/72, 0x48}, {&(0x7f0000000240)=""/73, 0x49}], 0x5, &(0x7f00000000c0)=""/4, 0x4}, 0x1}, {{&(0x7f00000005c0)=@l2tp={0x2, 0x0, @dev}, 0x80, &(0x7f0000000640)}, 0xf6}], 0x2, 0x10000, &(0x7f0000000700)={0x0, 0x3938700}) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000000040)={0x2, {0x2, 0x3, 0x7, 0x1, 0x3ff, 0x14}}) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x935b}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 06:03:29 executing program 6: r0 = add_key$keyring(&(0x7f0000000780), &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$unlink(0x9, r0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000780), &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$unlink(0x9, r1, 0xfffffffffffffffd) request_key(0x0, 0x0, 0x0, r1) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x101001, 0x0) r3 = add_key$keyring(&(0x7f0000000780), &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$unlink(0x9, r3, 0xfffffffffffffffd) request_key(&(0x7f0000000040)='.dead\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000400)='\xc3', r3) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000380), 0x284200, 0x0) keyctl$unlink(0x9, 0x0, 0xfffffffffffffffd) add_key(&(0x7f00000004c0)='id_legacy\x00', &(0x7f0000000440)={'syz', 0x0}, &(0x7f0000000480)="e168c29c899b714057100565e5e9cafb8bbee32897cb281416ea3044", 0x1c, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x48, 0x80, 0x72, 0x1, 0x0, 0x8, 0x8, 0x3, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x3, 0x0, @perf_bp={&(0x7f00000002c0), 0x4}, 0x5140, 0xffff, 0xfffffffa, 0x8, 0x6, 0xd1, 0x52, 0x0, 0x40, 0x0, 0x4}, 0x0, 0x4, r4, 0x8) request_key(&(0x7f0000000200)='.dead\x00', &(0x7f0000000240)={'syz', 0x1}, &(0x7f0000000280)='\x00', r1) r5 = add_key$user(&(0x7f00000003c0), &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000500)='_', 0x1, 0x0) keyctl$chown(0xb, r5, 0xee01, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xbfb7add41102c7c0) keyctl$chown(0x4, r5, 0xee01, r6) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) write$rfkill(r2, &(0x7f00000000c0)={0x0, 0x0, 0x3, 0x1}, 0x8) 06:03:29 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r1 = socket$inet(0x2, 0xa, 0xff7ffffd) ioctl$SNAPSHOT_UNFREEZE(r1, 0x3302) r2 = syz_io_uring_setup(0x92c, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) syz_io_uring_submit(r5, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) mbind(&(0x7f0000ff2000/0x1000)=nil, 0x1000, 0x8000, &(0x7f0000000040)=0x2, 0x6b, 0x2) io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0) 06:03:29 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @remote, 0x96}, 0x1c) socket$inet(0x2, 0xa, 0xff7ffffd) r2 = syz_io_uring_setup(0x3157, &(0x7f0000000140)={0x0, 0x7246, 0x1, 0x3, 0x248, 0x0, r1}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) syz_io_uring_submit(r5, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0) 06:03:29 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x935b}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x2000000, 0x0, 0x0, 0x0) 06:03:29 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x935b}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x62e000000000000) 06:03:29 executing program 3: syz_emit_ethernet(0x26, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) write$tun(r0, &(0x7f0000000280)={@val={0x0, 0x4486}, @void, @ipv6=@tcp={0x1, 0x6, "3ebcf9", 0x1c2, 0x6, 0xff, @remote, @private0, {[@srh={0x9930574bf82803e4, 0xe, 0x4, 0x7, 0x0, 0x60, 0xffff, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, @dev={0xfe, 0x80, '\x00', 0x1a}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private2={0xfc, 0x2, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01']}, @srh={0x1, 0xe, 0x4, 0x7, 0xff, 0x68, 0x5, [@remote, @mcast1, @private2, @private2, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast1, @dev={0xfe, 0x80, '\x00', 0x27}]}, @hopopts={0xc, 0x0, '\x00', [@ra={0x5, 0x2, 0x5}]}], {{0x4e21, 0x4e23, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0x1, 0x3, 0x0, 0x1, {[@nop, @mss={0x2, 0x4, 0x1}]}}, {"92627cf031ab4c8a2879dbf1d59a1d54a5b9f37df277a020a081579c00e49f00ceb0786a9c0e43a7eb8d630f499561f7c42015716f15fabcfe05164c679a020a6369831921608377741f23092dd9150a90fb5b271eb133b7bd487988f3342772ee43b2f3546e684385ffb717ea10076ffb0e650d0ff0f5126b5f03c5e66baa86aaec64a28aa4cdf8dc0f1a864236b05f029fb4896b46ae1ab122c81e126378ef9befb38c06e3"}}}}}, 0x1ee) [ 3194.306453] [ 3194.306872] ====================================================== [ 3194.308142] WARNING: possible circular locking dependency detected [ 3194.309429] 5.10.202 #1 Not tainted [ 3194.310164] ------------------------------------------------------ [ 3194.310318] FAULT_INJECTION: forcing a failure. [ 3194.310318] name failslab, interval 1, probability 0, space 0, times 0 [ 3194.311411] syz-executor.6/18144 is trying to acquire lock: [ 3194.311420] ffff888016ef8ae8 ( [ 3194.313034] CPU: 0 PID: 18148 Comm: syz-executor.0 Not tainted 5.10.202 #1 [ 3194.314152] (work_completion)(&hdev->tx_work) [ 3194.314586] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3194.315971] ){+.+.}-{0:0} [ 3194.316566] Call Trace: [ 3194.316588] dump_stack+0x107/0x167 [ 3194.322501] , at: __flush_work+0xdd/0xa90 [ 3194.322860] should_fail.cold+0x5/0xa [ 3194.323373] [ 3194.323373] but task is already holding lock: [ 3194.323866] ? create_object.isra.0+0x3a/0xa20 [ 3194.324698] ffff888016ef8f40 [ 3194.325212] should_failslab+0x5/0x20 [ 3194.326397] ( [ 3194.327015] kmem_cache_alloc+0x5b/0x310 [ 3194.327617] &hdev->req_lock [ 3194.328127] create_object.isra.0+0x3a/0xa20 [ 3194.328506] ){+.+.}-{3:3} [ 3194.329055] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3194.329073] kmem_cache_alloc_bulk+0x168/0x320 [ 3194.329668] , at: hci_dev_do_close+0xef/0x1240 [ 3194.330250] io_submit_sqes+0x6f76/0x85c0 [ 3194.330806] [ 3194.330806] which lock already depends on the new lock. [ 3194.330806] [ 3194.331495] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 3194.332398] [ 3194.332398] the existing dependency chain (in reverse order) is: [ 3194.332408] [ 3194.332408] -> #3 [ 3194.333027] __do_sys_io_uring_enter+0x6b5/0x1920 [ 3194.333850] ( [ 3194.334940] ? lock_downgrade+0x6d0/0x6d0 [ 3194.335922] &hdev->req_lock [ 3194.336933] ? io_submit_sqes+0x85c0/0x85c0 [ 3194.337637] ){+.+.}-{3:3} [ 3194.338294] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3194.338648] : [ 3194.339213] ? wait_for_completion_io+0x270/0x270 [ 3194.339805] __mutex_lock+0x13d/0x10b0 [ 3194.340387] ? vfs_write+0x354/0xa70 [ 3194.340940] hci_dev_do_close+0xef/0x1240 [ 3194.341590] ? fput_many+0x2f/0x1a0 [ 3194.341939] hci_rfkill_set_block+0x166/0x1a0 [ 3194.342610] ? ksys_write+0x1a9/0x260 [ 3194.343486] rfkill_set_block+0x1fd/0x540 [ 3194.343994] ? __ia32_sys_read+0xb0/0xb0 [ 3194.344925] rfkill_fop_write+0x253/0x4b0 [ 3194.345419] ? fpregs_assert_state_consistent+0xb9/0xe0 [ 3194.346413] vfs_write+0x29a/0xa70 [ 3194.346921] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3194.347845] ksys_write+0x1f6/0x260 [ 3194.348396] do_syscall_64+0x33/0x40 [ 3194.349323] do_syscall_64+0x33/0x40 [ 3194.350042] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 3194.350849] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 3194.351536] RIP: 0033:0x7fb03d693b19 [ 3194.351556] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3194.352383] [ 3194.352383] -> #2 [ 3194.352889] RSP: 002b:00007fb03ac09188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 3194.353739] ( [ 3194.354439] RAX: ffffffffffffffda RBX: 00007fb03d7a6f60 RCX: 00007fb03d693b19 [ 3194.355561] rfkill_global_mutex [ 3194.356054] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 3194.356068] RBP: 00007fb03ac091d0 R08: 0000000000000000 R09: 0000000000000000 [ 3194.359797] ){+.+.}-{3:3} [ 3194.360272] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3194.360279] R13: 00007ffe77755f3f R14: 00007fb03ac09300 R15: 0000000000022000 [ 3194.370654] : [ 3194.371036] __mutex_lock+0x13d/0x10b0 [ 3194.371961] rfkill_register+0x36/0xa10 [ 3194.372939] hci_register_dev+0x42e/0xc00 [ 3194.373939] __vhci_create_device+0x2c8/0x5c0 [ 3194.374989] vhci_open_timeout+0x38/0x50 [ 3194.375966] process_one_work+0x9a9/0x14b0 [ 3194.376935] worker_thread+0x61d/0x1310 [ 3194.377842] kthread+0x38f/0x470 [ 3194.378635] ret_from_fork+0x22/0x30 [ 3194.379482] [ 3194.379482] -> #1 (&data->open_mutex){+.+.}-{3:3}: [ 3194.380815] __mutex_lock+0x13d/0x10b0 [ 3194.381697] vhci_send_frame+0x63/0xa0 [ 3194.382584] hci_send_frame+0x1b9/0x320 [ 3194.383489] hci_tx_work+0x10af/0x1660 [ 3194.384373] process_one_work+0x9a9/0x14b0 [ 3194.385328] worker_thread+0x61d/0x1310 [ 3194.386232] kthread+0x38f/0x470 [ 3194.387010] ret_from_fork+0x22/0x30 [ 3194.387851] [ 3194.387851] -> #0 ((work_completion)(&hdev->tx_work)){+.+.}-{0:0}: [ 3194.389460] __lock_acquire+0x29e7/0x5b00 [ 3194.390398] lock_acquire+0x197/0x470 [ 3194.391270] __flush_work+0x105/0xa90 [ 3194.392145] hci_dev_do_close+0x131/0x1240 [ 3194.393107] hci_rfkill_set_block+0x166/0x1a0 [ 3194.394104] rfkill_set_block+0x1fd/0x540 [ 3194.395050] rfkill_fop_write+0x253/0x4b0 [ 3194.395975] vfs_write+0x29a/0xa70 [ 3194.396815] ksys_write+0x1f6/0x260 [ 3194.397645] do_syscall_64+0x33/0x40 [ 3194.398499] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 3194.399637] [ 3194.399637] other info that might help us debug this: [ 3194.399637] [ 3194.401261] Chain exists of: [ 3194.401261] (work_completion)(&hdev->tx_work) --> rfkill_global_mutex --> &hdev->req_lock [ 3194.401261] [ 3194.403820] Possible unsafe locking scenario: [ 3194.403820] [ 3194.405024] CPU0 CPU1 [ 3194.405951] ---- ---- [ 3194.406886] lock(&hdev->req_lock); [ 3194.407639] lock(rfkill_global_mutex); [ 3194.408968] lock(&hdev->req_lock); [ 3194.410215] lock((work_completion)(&hdev->tx_work)); [ 3194.411268] [ 3194.411268] *** DEADLOCK *** [ 3194.411268] [ 3194.412551] 2 locks held by syz-executor.6/18144: [ 3194.413512] #0: ffffffff856193e8 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0xff/0x4b0 [ 3194.415379] #1: ffff888016ef8f40 (&hdev->req_lock){+.+.}-{3:3}, at: hci_dev_do_close+0xef/0x1240 [ 3194.417215] [ 3194.417215] stack backtrace: [ 3194.418117] CPU: 1 PID: 18144 Comm: syz-executor.6 Not tainted 5.10.202 #1 [ 3194.419502] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3194.421175] Call Trace: [ 3194.421704] dump_stack+0x107/0x167 [ 3194.422435] check_noncircular+0x263/0x2e0 [ 3194.423292] ? register_lock_class+0xbb/0x17b0 [ 3194.424206] ? print_circular_bug+0x470/0x470 [ 3194.425125] ? stack_trace_consume_entry+0x160/0x160 [ 3194.426161] ? alloc_chain_hlocks+0x1ec/0x5a0 [ 3194.427078] __lock_acquire+0x29e7/0x5b00 [ 3194.427916] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3194.428971] ? SOFTIRQ_verbose+0x10/0x10 [ 3194.429803] ? SOFTIRQ_verbose+0x10/0x10 [ 3194.430624] lock_acquire+0x197/0x470 [ 3194.431384] ? __flush_work+0xdd/0xa90 [ 3194.432175] ? lock_release+0x680/0x680 [ 3194.432993] ? lock_release+0x680/0x680 [ 3194.433787] ? lock_chain_count+0x20/0x20 [ 3194.434619] ? perf_trace_lock+0xac/0x490 [ 3194.435451] ? lock_chain_count+0x20/0x20 [ 3194.436315] __flush_work+0x105/0xa90 [ 3194.437091] ? __flush_work+0xdd/0xa90 [ 3194.437882] ? queue_delayed_work_on+0xe0/0xe0 [ 3194.438801] ? hci_dev_do_close+0xef/0x1240 [ 3194.439674] ? __cancel_work_timer+0x2a9/0x4c0 [ 3194.440603] ? mutex_lock_io_nested+0xf30/0xf30 [ 3194.441551] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3194.442621] ? cancel_delayed_work+0x24d/0x2b0 [ 3194.443551] ? trace_hardirqs_on+0x5b/0x180 [ 3194.444441] ? cancel_delayed_work+0x1b8/0x2b0 [ 3194.445368] ? cancel_delayed_work_sync+0x20/0x20 [ 3194.446346] hci_dev_do_close+0x131/0x1240 [ 3194.447196] ? rfkill_set_block+0x18f/0x540 [ 3194.448069] ? hci_dev_open+0x350/0x350 [ 3194.448889] ? mark_held_locks+0x9e/0xe0 [ 3194.449718] hci_rfkill_set_block+0x166/0x1a0 [ 3194.450619] ? hci_power_off+0x20/0x20 [ 3194.451405] rfkill_set_block+0x1fd/0x540 [ 3194.452238] rfkill_fop_write+0x253/0x4b0 [ 3194.453094] ? rfkill_sync_work+0xa0/0xa0 [ 3194.453930] ? security_file_permission+0x24e/0x570 [ 3194.454936] ? rfkill_sync_work+0xa0/0xa0 [ 3194.455764] vfs_write+0x29a/0xa70 [ 3194.456499] ksys_write+0x1f6/0x260 [ 3194.457229] ? __ia32_sys_read+0xb0/0xb0 [ 3194.458047] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3194.459097] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3194.460132] do_syscall_64+0x33/0x40 [ 3194.460888] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 3194.461916] RIP: 0033:0x7fc27017db19 [ 3194.462664] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3194.466360] RSP: 002b:00007fc26d6f3188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 3194.467885] RAX: ffffffffffffffda RBX: 00007fc270290f60 RCX: 00007fc27017db19 [ 3194.469332] RDX: 0000000000000008 RSI: 00000000200000c0 RDI: 0000000000000003 [ 3194.470757] RBP: 00007fc2701d7f6d R08: 0000000000000000 R09: 0000000000000000 [ 3194.472181] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3194.473629] R13: 00007ffdf032a5df R14: 00007fc26d6f3300 R15: 0000000000022000 06:03:29 executing program 4: socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$inet(0x2, 0xa, 0xff7ffffd) r1 = syz_io_uring_setup(0x3157, &(0x7f0000000140), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$vcsa(0x0, 0xe11, 0x4000) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000000240)={'wg2\x00'}) connect$inet(r4, &(0x7f00000001c0)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) 06:03:29 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)=0x0) r2 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) syz_io_uring_submit(r4, r1, &(0x7f0000000080)=@IORING_OP_WRITE_FIXED={0x5, 0xd, 0x2000, @fd_index=0x5, 0x8, 0xe78a79a, 0x6, 0x17, 0x0, {0x3, r3}}, 0x0) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000000040)={0x2, {0x2, 0x3, 0x7, 0x1, 0x3ff, 0x14}}) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x2000000, 0x13, r0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r2, {0x10000}}, './file0\x00'}) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x4000)=nil, 0x4000, 0x2000008, 0x10, r7, 0x10000000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x935b}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r6, r1, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 06:03:29 executing program 3: r0 = getpid() process_vm_readv(r0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/193, 0xc1}], 0x1, &(0x7f0000000380)=[{&(0x7f0000003300)=""/4096, 0xd00}], 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x2ba0}, r0, 0xfffffffffffffffb, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vcsa(0x0, 0xe11, 0x4000) process_vm_readv(r0, &(0x7f0000000100)=[{&(0x7f0000000280)=""/181, 0xb5}], 0x1, &(0x7f0000001580)=[{&(0x7f00000003c0)=""/231, 0xe7}, {&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f00000014c0)=""/149, 0x95}, {&(0x7f0000000340)=""/16, 0x10}], 0x4, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000240)={'wg2\x00'}) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x0) r2 = semget$private(0x0, 0x2, 0x0) semop(r2, &(0x7f0000000000)=[{0x0, 0x0, 0x1800}], 0x1) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/hci\x00') openat(r3, &(0x7f0000000080)='./file0\x00', 0x107100, 0x30) semctl$IPC_RMID(r2, 0x0, 0x0) 06:03:29 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 69) [ 3194.626520] FAULT_INJECTION: forcing a failure. [ 3194.626520] name failslab, interval 1, probability 0, space 0, times 0 [ 3194.628005] CPU: 0 PID: 18182 Comm: syz-executor.0 Not tainted 5.10.202 #1 [ 3194.628882] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3194.629918] Call Trace: [ 3194.630265] dump_stack+0x107/0x167 [ 3194.630728] should_fail.cold+0x5/0xa [ 3194.631202] ? create_object.isra.0+0x3a/0xa20 [ 3194.631780] should_failslab+0x5/0x20 [ 3194.632256] kmem_cache_alloc+0x5b/0x310 [ 3194.632789] create_object.isra.0+0x3a/0xa20 [ 3194.633337] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3194.633969] kmem_cache_alloc_bulk+0x168/0x320 [ 3194.634546] io_submit_sqes+0x6f76/0x85c0 [ 3194.635079] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 3194.635709] __do_sys_io_uring_enter+0x6b5/0x1920 [ 3194.636346] ? lock_downgrade+0x6d0/0x6d0 [ 3194.636888] ? io_submit_sqes+0x85c0/0x85c0 [ 3194.637450] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3194.638077] ? wait_for_completion_io+0x270/0x270 [ 3194.638706] ? vfs_write+0x354/0xa70 [ 3194.639186] ? fput_many+0x2f/0x1a0 [ 3194.639660] ? ksys_write+0x1a9/0x260 [ 3194.640158] ? __ia32_sys_read+0xb0/0xb0 [ 3194.640705] ? fpregs_assert_state_consistent+0xb9/0xe0 [ 3194.641397] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3194.642069] do_syscall_64+0x33/0x40 [ 3194.642551] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 3194.643221] RIP: 0033:0x7fb03d693b19 [ 3194.643706] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3194.646126] RSP: 002b:00007fb03ac09188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 3194.647118] RAX: ffffffffffffffda RBX: 00007fb03d7a6f60 RCX: 00007fb03d693b19 [ 3194.648053] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 3194.649004] RBP: 00007fb03ac091d0 R08: 0000000000000000 R09: 0000000000000000 [ 3194.649933] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3194.650865] R13: 00007ffe77755f3f R14: 00007fb03ac09300 R15: 0000000000022000 VM DIAGNOSIS: 06:03:29 Registers: info registers vcpu 0 RAX=0000000000021e7a RBX=0000000000000001 RCX=ffffc900007df000 RDX=0000000000040000 RSI=ffffffff81299e81 RDI=0000000000000001 RBP=0000000000000000 RSP=ffff88804f74f8a0 R8 =0000000000000000 R9 =ffffffff8567254f R10=0000000000000000 R11=0000000000000001 R12=0000000000000017 R13=0000000000000016 R14=ffff88800ce9b480 R15=0000000000000000 RIP=ffffffff81299e83 RFL=00000012 [----A--] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007fb03ac09700 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fb03ac08f78 CR3=000000004f46c000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=ffffffffffffffffffffffffffff0000 XMM05=00000000000000000000000000000000 XMM06=0000000000000000000000524f525245 XMM07=00000000000000000000000000000000 XMM08=000000000000000000524f5252450040 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=dffffc0000000060 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd RSI=ffffffff822ca59c RDI=ffffffff879e81e0 RBP=ffffffff879e81a0 RSP=ffff88804f6171f8 R8 =0000000000000001 R9 =0000000000000003 R10=000000000000000a R11=0000000000000001 R12=0000000000000020 R13=fffffbfff0f3d088 R14=fffffbfff0f3d03e R15=dffffc0000000000 RIP=ffffffff822ca5f0 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007fc26d6f3700 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000000020001d80 CR3=000000004a04c000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=0000000000000000ffffffff0000030d XMM01=00000000000000000000000000000000 XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=ffffffffffffffffffffffff00000000 XMM05=00000000000000000000000000000000 XMM06=0000000000000000000000524f525245 XMM07=00000000000000000000000000000000 XMM08=000000000000000000524f5252450040 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000